Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
File: veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft (raw, json)
Hash identifier: cvE8Vl/AlN4BB6LnPHhDuKZvBOGcPu1+P3W/bKENOtE=
Subject key identifier: 98:1A:A4:AD:05:9E:C9:A2:65:61:E2:08:41:98:71:CE:B6:4A:21:53
Authority key identifier: BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
Certificate issuer: /CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Certificate serial: 0197CC4CC48EB271CA8093D2A1D13DC5E761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
Manifest number: 025A
Signing time: Wed 02 Jul 2025 18:01:12 +0000
Manifest this update: Wed 02 Jul 2025 18:01:12 +0000
Manifest next update: Thu 03 Jul 2025 18:01:12 +0000
Files and hashes: 1: _4qziCwy0-5brLbRyXE5FVM4Qcw.roa (hash: DVo7lEo2YXrAeiVBkSOW/Tj//cfB8+ZnaTMO+Oa9vp8=)
2: veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl (hash: hbTib0UX843B4BVAcpC0UcSxpq9Pz+Z6feIgMeTGFZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:c4:8e:b2:71:ca:80:93:d2:a1:d1:3d:c5:e7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Validity
Not Before: Jul 2 18:01:12 2025 GMT
Not After : Jul 3 18:01:12 2025 GMT
Subject: CN=981aa4ad059ec9a26561e208419871ceb64a2153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:b3:f8:7c:11:50:00:b6:a7:1d:99:7a:8e:
c9:f5:5a:f3:6b:c4:dc:97:32:94:46:25:ce:1c:42:
e3:ce:a2:9c:d9:a0:52:c4:74:3e:60:33:8a:63:09:
df:7e:66:52:fb:25:2f:40:ff:39:d6:33:a6:78:79:
eb:98:b7:a5:fe:e2:ac:21:45:50:ce:58:76:8d:63:
5b:05:18:64:59:a2:ed:d4:6e:5b:21:0a:92:67:64:
b3:69:01:17:de:0a:d8:c4:b7:e6:40:c9:9f:af:ee:
94:a0:84:1d:9a:d1:14:1e:07:f8:82:cc:e6:fd:dd:
4e:29:3e:6e:ce:8d:d3:89:4a:aa:07:95:4a:cd:f0:
08:a3:5f:68:41:2c:79:ad:cf:22:74:6f:54:73:e2:
38:99:c3:73:34:05:e0:80:2d:6d:c8:76:d5:7d:d5:
c5:7b:f2:52:f2:86:d4:3a:a4:81:5d:48:9d:3a:cb:
46:15:32:4c:a6:a1:b1:90:a2:c2:5d:93:27:93:1c:
f1:ca:67:44:18:32:9c:1a:8b:ae:48:65:b9:c8:8b:
48:19:c2:9a:3c:d5:33:29:27:12:33:47:06:38:0f:
89:1e:6d:61:c6:57:1f:88:45:34:0c:ca:6f:67:1e:
64:43:5d:96:02:0d:72:ad:7d:b9:d2:18:bc:1e:5e:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:A4:AD:05:9E:C9:A2:65:61:E2:08:41:98:71:CE:B6:4A:21:53
X509v3 Authority Key Identifier:
keyid:BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:46:56:47:f4:d6:75:21:79:c3:54:94:60:65:57:66:97:0f:
25:52:ab:a5:46:b8:dd:22:25:44:44:26:af:e5:60:0a:4b:01:
5b:8c:b5:1c:af:f6:b7:83:d3:7d:a7:58:b0:08:35:d9:77:2d:
ed:12:05:3e:77:0e:8b:20:00:b3:58:60:7f:8b:44:40:6b:ef:
59:97:e8:6d:df:70:a8:87:13:5d:78:ff:d2:f9:70:8f:21:c6:
f6:da:91:c0:c4:40:0c:ee:3e:79:c2:d9:13:2b:22:70:2d:4c:
8b:22:4f:2c:f2:37:74:a2:dc:c7:a5:6a:b2:a3:af:2a:c7:1f:
26:5a:38:ed:49:61:08:98:e7:cf:bd:6e:69:db:89:08:86:02:
6e:0e:ad:70:c4:cd:4d:19:50:aa:13:7d:2d:71:89:1d:06:df:
3c:c4:8c:71:4c:c9:66:fa:67:c1:16:5b:39:6d:12:70:34:fc:
df:5d:e3:dc:9c:d0:6c:f7:eb:30:6a:01:87:cd:be:28:bf:d8:
02:c8:2c:fd:63:99:23:d1:f6:3d:b5:52:12:a3:e3:36:0f:4f:
6d:89:eb:b6:a8:9c:10:8a:85:fd:f6:3b:b4:78:9b:bf:d8:90:
e0:ac:a4:78:c9:9f:04:88:cd:40:46:7d:7e:61:95:fb:fd:25:
0b:42:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:56:04 2025 by rpki-client