Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: O5yN9xN9nAnPMX1FAEgY7f/kGTtQ8pK5Q9Hks5yhmw0=
Subject key identifier: CF:B5:0C:04:29:FB:BB:65:8F:F1:7B:97:83:2F:6D:5C:8D:30:CE:61
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 0199FEEC024F181D7936417A53DEFE1F33DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 116B
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: MzSsecHSuOUlY2pfWZNs9xO7UGe+FCjisMLpSETRODQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:02:4f:18:1d:79:36:41:7a:53:de:fe:1f:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=cfb50c0429fbbb658ff17b97832f6d5c8d30ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:b2:b8:27:a9:bc:81:18:f9:c7:b8:e2:c3:
e4:2a:40:81:28:1d:e2:bf:41:3a:e2:29:16:ba:e3:
66:00:45:40:d7:b4:fd:ac:2e:b2:cd:48:8d:ff:e3:
0c:89:5e:27:a2:ab:75:b9:67:8d:1c:99:f2:52:92:
fd:c4:1f:d8:f9:0e:29:a2:55:81:3f:f6:41:47:26:
80:1a:b8:50:f6:01:d9:12:98:ad:61:7a:81:a0:99:
48:e8:6a:7d:f2:20:71:e4:96:db:dd:be:a7:df:2e:
af:93:9b:af:e6:00:90:50:14:86:d9:08:b1:c2:ac:
0a:b0:37:79:d2:54:23:fd:c4:bc:ee:f8:2a:36:03:
60:3e:d7:3d:20:4d:d7:ba:f8:24:89:b7:b4:44:be:
27:5e:ac:69:d8:f2:10:92:d5:ad:8a:e1:3b:0a:8a:
3a:bd:09:fd:6f:5a:91:0c:1a:3e:2d:3f:2c:9f:05:
5f:d1:c1:4f:c5:cb:75:e4:29:cc:b9:28:3e:97:f9:
02:49:de:6b:b4:4d:16:ab:75:be:0a:e3:96:a6:eb:
9c:e0:ab:0d:52:5b:ca:15:b7:d2:44:32:57:ec:d0:
76:6f:4e:21:46:9b:66:a0:a3:9c:c8:df:56:e4:06:
a0:0b:1c:20:87:be:54:10:3b:34:cf:82:bb:94:96:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:0C:04:29:FB:BB:65:8F:F1:7B:97:83:2F:6D:5C:8D:30:CE:61
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:75:d7:f7:29:42:d0:4e:36:97:aa:49:57:b5:f3:8e:c0:e3:
60:29:f6:b8:79:31:71:74:06:32:8b:da:62:91:14:ee:b2:6a:
e7:a3:ff:54:5d:7c:2e:ed:16:36:5a:a8:ff:40:ca:5f:ca:21:
29:f0:3f:55:8a:73:3f:12:44:8a:64:cd:9e:a3:44:1d:b0:fb:
cc:61:21:7e:35:05:07:56:f8:84:75:59:83:17:bb:49:a1:a6:
01:28:e8:99:fa:ba:1d:be:ed:24:ae:93:e8:04:40:bd:d1:b3:
5b:89:3d:8b:2a:0a:58:b6:3c:2c:9c:16:da:e5:27:bc:5d:7a:
c9:2f:ec:6d:a8:f5:48:e5:15:d3:d5:43:38:cd:33:d9:33:10:
ef:f2:55:fd:b5:32:00:37:c6:bc:81:8b:74:cd:0a:f4:df:1c:
79:bc:41:d5:81:80:e1:5e:27:e6:a2:c5:ad:11:e5:15:f5:3d:
60:e6:88:f2:50:a8:85:1e:22:ca:bc:1f:e4:5f:03:0a:38:18:
c9:81:00:6a:72:73:8e:48:2f:ad:71:a9:dd:3b:78:66:4e:67:
5f:ee:8c:e4:8c:22:43:9d:b1:5f:db:01:68:9a:81:e5:34:74:
67:d4:51:e3:98:46:28:e3:d5:73:21:f2:7c:7b:df:30:ab:b7:
c5:a5:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:44 2025 by rpki-client