Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: vrgewokANBYcPOFLprOTwP9KXYY060CPQ1QR+62VHLE=
Subject key identifier: 4D:34:42:A9:34:55:22:FA:E8:BF:E6:B1:5F:C6:DC:21:84:E1:B3:D1
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 0198D4E031DC808E5905C3AB7B7ADE77BDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: 36oOWA7Nd7KW04CxuHmrcQ+DQxcZOGbn9VcFWO1cMqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:31:dc:80:8e:59:05:c3:ab:7b:7a:de:77:bd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=4d3442a9345522fae8bfe6b15fc6dc2184e1b3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:16:27:de:a9:13:d2:91:49:42:3b:d4:b4:
1c:e8:dc:26:7e:f5:6f:11:60:c7:6e:f5:32:21:10:
7b:60:e9:21:20:5a:52:40:70:7b:c9:21:f6:77:ac:
b6:30:76:38:11:d6:8d:31:c5:92:9b:b7:9a:84:90:
6b:3d:ab:48:9f:4f:79:4b:52:77:9e:b3:88:05:7b:
48:42:c2:06:7d:3f:69:16:ae:79:c6:dc:f3:7f:f0:
3d:00:14:bd:94:84:4b:49:b5:7b:5d:90:b4:b7:3a:
ae:b1:d0:17:18:ad:ec:fd:05:cd:b4:64:d2:d9:1b:
84:ba:65:13:bb:d6:90:93:03:07:70:ea:f2:fd:df:
f3:29:5d:f9:b3:97:44:0d:4e:05:83:b5:9d:7e:1a:
73:bf:f6:00:fe:1b:73:77:b4:cc:78:20:cc:30:26:
b9:0f:5a:f9:a9:d3:6b:b0:72:77:ac:49:92:e5:55:
6e:ad:4e:61:2c:f0:60:6a:73:ea:02:48:55:88:39:
4a:1a:22:4c:10:5c:98:71:79:5d:ab:93:bf:a7:78:
4f:e4:fb:da:d1:43:3b:df:2d:80:95:05:99:0a:6d:
4e:9c:0a:ce:3a:cd:39:8e:0b:fa:65:48:f6:8b:18:
88:16:e0:47:61:c7:82:63:a2:65:28:ac:21:bd:23:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:42:A9:34:55:22:FA:E8:BF:E6:B1:5F:C6:DC:21:84:E1:B3:D1
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fd:80:c7:fe:b7:59:ca:a2:d4:f9:bd:e2:7f:46:b4:7b:cd:
67:67:7e:de:6b:25:7c:51:08:db:18:49:c7:da:df:53:b3:a1:
01:be:18:cf:c7:b8:55:da:4f:be:b3:f9:04:f4:00:e3:85:aa:
dd:4b:0c:3c:09:0f:ac:be:9c:31:1f:e7:db:5e:d4:bb:fb:22:
7d:f6:a0:82:69:b3:5e:30:42:85:1c:d0:03:1e:c0:a6:20:cd:
e1:73:dd:0d:81:d4:f5:d8:de:65:1b:02:62:ed:03:a8:c2:e9:
0f:aa:45:c2:74:e6:18:c2:5e:f7:50:62:35:5a:57:db:8e:be:
46:bf:d3:71:f0:5b:ca:13:a8:14:89:3d:58:47:11:cb:9f:10:
75:c7:0c:e7:62:d1:2b:5d:c1:8e:97:f5:0b:3a:94:41:77:77:
6d:63:25:20:39:65:7c:13:99:37:b8:a6:a2:0c:03:09:85:e7:
63:c9:7d:53:56:4d:5b:b2:b8:05:5b:88:2d:8b:0e:27:6a:c1:
13:32:c8:9c:a6:b5:56:b8:fb:80:ce:c4:93:57:1b:bd:9c:63:
f0:56:d9:74:b0:a8:75:6e:15:57:f0:ab:89:6d:8b:fb:88:e9:
1c:33:3c:3f:38:11:ff:51:64:a3:a7:f3:bf:0d:6f:86:13:c9:
21:48:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:37 2025 by rpki-client