Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: ZvRsFcbuy+BV4Sa8Ocl8YmGt/00i9iNCztwvl+2I4H4=
Subject key identifier: 34:02:05:39:C4:14:82:C5:1A:0C:0C:E5:42:4F:7F:7A:6D:EB:ED:42
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 0198D5BB88D1FEA9CE5B0EB2C10E88B7B8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: WJCLm8sekM2v5QvT3aNV+CNhZ8oJY03Ak2oQQThrfHw=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:88:d1:fe:a9:ce:5b:0e:b2:c1:0e:88:b7:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=34020539c41482c51a0c0ce5424f7f7a6debed42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:dd:27:8b:15:66:a6:2e:81:14:94:d4:30:
02:93:77:fd:44:84:ae:6e:e5:85:98:0b:65:21:b8:
7f:7d:4f:30:4d:46:49:bf:8a:3c:f6:d4:08:c3:32:
67:8a:d0:4f:1e:33:a7:fe:c3:35:74:71:0f:e3:04:
b9:94:52:3e:f9:a4:a5:16:a2:fa:07:45:82:00:b2:
49:6c:27:45:f8:cd:df:75:52:5e:67:ad:72:ad:a6:
ce:90:26:4c:f5:9a:ad:31:65:20:e6:1a:97:7d:d3:
4a:9e:75:c8:ea:c9:47:70:04:35:fc:72:be:dc:9c:
f7:d2:fc:bf:8c:ec:b1:18:43:b2:b2:d8:a7:6f:d5:
fa:16:46:a8:b6:4e:3f:ee:af:06:f0:92:9d:90:c9:
d1:b4:2c:c2:7b:b5:4f:d5:05:04:5c:95:9d:6d:79:
75:8f:c4:cb:e3:68:1d:c1:59:03:bd:2d:09:aa:9a:
36:b4:52:d8:a3:9a:d5:62:2b:94:19:68:e4:65:ac:
6e:bb:3d:0c:71:0a:dd:e9:bf:fd:d2:55:19:83:a9:
f0:5c:df:95:8f:a2:66:35:7a:7c:d8:50:a6:13:58:
23:5b:27:60:eb:36:17:fc:db:94:07:46:91:5c:ea:
33:fc:94:94:b4:28:5f:10:be:a3:1f:0f:71:18:6b:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:02:05:39:C4:14:82:C5:1A:0C:0C:E5:42:4F:7F:7A:6D:EB:ED:42
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ef:71:44:b8:34:b6:74:7e:27:90:5b:d4:93:d2:c0:98:3a:
f4:b2:31:eb:01:bb:87:c6:61:ad:fa:e8:5d:f9:f1:f1:a1:e8:
5d:da:ed:bd:ba:93:8e:13:e4:cd:3f:dd:29:fa:3c:2f:aa:52:
4c:c6:79:1a:99:68:2d:75:89:bf:7b:25:c9:bb:33:45:37:72:
13:50:35:23:07:d0:ca:67:cb:b1:7e:bc:8f:24:84:6b:9f:0a:
b8:db:a2:0c:2c:35:11:d2:3b:0b:c1:a8:94:21:56:db:44:ba:
09:d6:30:85:61:8b:0b:10:b8:25:ba:3f:ff:b8:b1:bc:89:93:
e3:a7:fa:c5:07:83:f3:4c:30:5c:3e:4c:b3:e8:c8:32:bf:2e:
f1:60:c4:53:3d:38:11:18:44:1b:9f:90:81:2a:bf:7e:33:74:
43:0a:ba:73:24:ac:9a:19:68:3b:9f:64:61:53:b4:04:05:3a:
f8:ba:d2:77:0e:6c:e1:4d:f7:ba:73:9c:5d:66:c0:01:e7:d2:
94:5d:b1:f7:63:b9:2f:54:22:05:ce:51:bb:94:21:2c:b6:34:
63:06:b9:68:e1:7f:15:73:71:af:98:9d:cd:fa:8d:b1:83:e8:
82:03:58:a3:eb:e6:78:38:b9:be:af:e8:3c:b2:8a:98:d4:40:
1c:37:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:59 2025 by rpki-client