Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: Ca3g0r3LbrxcAVEMllgvtfMLXcQzyiU9uwVn0vfOo1A=
Subject key identifier: 97:58:FF:C3:BC:33:91:A0:0F:53:20:F4:86:6F:BE:CB:61:76:29:6C
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 0198D583DD6E32129B704C73A5D89F221F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 10D1
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: HI4Eb4M3xEh3YyFNs5SJc6sXSakzxJJRHJhAY8tJI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dd:6e:32:12:9b:70:4c:73:a5:d8:9f:22:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=9758ffc3bc3391a00f5320f4866fbecb6176296c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:62:b6:a0:64:b2:d3:23:82:4e:37:4a:56:
26:8f:95:08:8f:00:36:4f:83:c2:e9:fd:c6:56:71:
85:fe:59:6a:f9:3f:a7:d1:de:0b:15:3c:9c:30:60:
65:87:17:fb:4b:25:77:c8:62:d9:44:cf:1e:a8:a8:
5a:9d:c8:ba:1d:39:15:7b:6d:b1:e4:61:1a:74:32:
ec:d4:44:0e:0e:93:53:78:a6:4b:b8:6d:7b:3a:73:
d7:77:93:1d:7c:d0:20:7c:8c:41:4c:2f:33:33:40:
96:a5:b9:87:a8:e2:9c:34:e2:7f:a1:97:df:59:53:
ae:09:ec:26:c2:06:89:f1:c0:54:02:8b:45:ee:1e:
a9:fd:c5:9b:28:e5:93:12:ad:6e:3b:c6:4c:c8:57:
89:63:b2:4c:2f:77:98:bf:6b:f3:c0:da:b0:42:ba:
4d:7b:ed:1d:ec:f1:bc:5f:ba:32:a5:c3:96:1a:70:
44:8f:f7:04:22:c8:3f:0d:09:ca:68:57:6a:29:3b:
f0:21:b6:0d:d8:51:6c:1e:c1:5d:76:b6:68:15:3d:
c5:7a:31:c9:b3:3d:0e:ff:51:b5:4c:5d:1e:06:27:
0f:e1:38:03:be:e0:4e:2e:00:24:d1:ee:a9:bc:f2:
95:ca:eb:3d:85:72:cf:c3:e4:cc:bc:d9:31:fa:55:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:FF:C3:BC:33:91:A0:0F:53:20:F4:86:6F:BE:CB:61:76:29:6C
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:89:37:3a:5f:9e:2f:f2:37:5a:73:27:59:f8:30:6b:c6:79:
87:9e:f0:19:e7:2c:a2:31:95:f6:ce:d3:3c:55:15:20:c5:40:
36:64:6a:ee:98:23:46:d5:66:70:6e:6d:4b:54:c1:7f:7e:1e:
6a:1c:e4:0d:87:83:5b:48:65:ec:7e:20:b6:51:42:fa:f0:88:
bd:dd:01:cb:c6:00:78:24:f8:9b:e8:5c:bf:d2:d1:29:b6:9c:
9d:eb:3e:1a:4e:76:00:eb:44:db:a4:6d:62:4c:24:c5:79:26:
52:58:db:2a:09:26:13:be:04:51:6d:83:14:12:7e:50:f2:f7:
99:c2:34:1d:f3:32:e6:58:4c:f2:f3:5d:64:4c:00:1b:61:c5:
a9:b7:06:37:1f:7e:f8:66:6c:79:dc:e9:99:60:97:92:24:44:
96:5e:de:c2:67:b8:d8:2a:e8:de:4e:e8:19:db:68:36:4b:15:
d6:96:39:fb:9b:76:85:64:10:40:f6:36:94:0f:ce:5f:48:e3:
40:04:33:b5:56:9e:7b:4a:88:7d:4d:ae:b5:27:72:a8:26:e2:
cb:73:1b:9d:8c:8c:75:27:b7:b2:02:6b:a2:38:1f:4b:2a:52:
c7:d9:74:d9:34:32:8d:38:22:3b:6f:9a:59:5d:39:db:7d:e7:
56:cf:ec:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg91uMhKbcExzpdifIh9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4
MmJjMTgwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg5NzU4ZmZjM2JjMzM5MWEwMGY1MzIwZjQ4NjZmYmVjYjYxNzYyOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CxitqBkstMjgk43SlYmj5UIjwA2
T4PC6f3GVnGF/llq+T+n0d4LFTycMGBlhxf7SyV3yGLZRM8eqKhanci6HTkVe22x
5GEadDLs1EQODpNTeKZLuG17OnPXd5MdfNAgfIxBTC8zM0CWpbmHqOKcNOJ/oZff
WVOuCewmwgaJ8cBUAotF7h6p/cWbKOWTEq1uO8ZMyFeJY7JML3eYv2vzwNqwQrpN
e+0d7PG8X7oypcOWGnBEj/cEIsg/DQnKaFdqKTvwIbYN2FFsHsFddrZoFT3FejHJ
sz0O/1G1TF0eBicP4TgDvuBOLgAk0e6pvPKVyus9hXLPw+TMvNkx+lVSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdY/8O8M5GgD1Mg9IZvvsthdilsMB8GA1UdIwQY
MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt
MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx
LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyIk3Ol+e
L/I3WnMnWfgwa8Z5h57wGecsojGV9s7TPFUVIMVANmRq7pgjRtVmcG5tS1TBf34e
ahzkDYeDW0hl7H4gtlFC+vCIvd0By8YAeCT4m+hcv9LRKbacnes+Gk52AOtE26Rt
YkwkxXkmUljbKgkmE74EUW2DFBJ+UPL3mcI0HfMy5lhM8vNdZEwAG2HFqbcGNx9+
+GZsedzpmWCXkiREll7ewme42Cro3k7oGdtoNksV1pY5+5t2hWQQQPY2lA/OX0jj
QAQztVaee0qIfU2utSdyqCbiy3MbnYyMdSe3sgJrojgfSypSx9l02TQyjTgiO2+a
WV05233nVs/sKw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client