Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: vZawFpiajHKabmxDND4ddiiljahAmiEzcSBRsjG+vkQ=
Subject key identifier: 0E:97:65:A7:A2:DE:F2:2B:F1:01:C8:68:31:E0:DB:06:95:A4:61:51
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 0197B9D8DC8593639E12B4B4FCCEE6B58C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0C9D
Signing time: Sun 29 Jun 2025 04:01:26 +0000
Manifest this update: Sun 29 Jun 2025 04:01:26 +0000
Manifest next update: Mon 30 Jun 2025 04:01:26 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: /ffFdP8MX+GWiGyYm55E8yjuGxesRdr5myIm0oQsUHc=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:dc:85:93:63:9e:12:b4:b4:fc:ce:e6:b5:8c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Jun 29 04:01:26 2025 GMT
Not After : Jun 30 04:01:26 2025 GMT
Subject: CN=0e9765a7a2def22bf101c86831e0db0695a46151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:81:7c:69:5d:f5:b4:29:d1:c0:24:46:c8:
20:d5:7d:56:a0:44:cd:37:27:d7:2c:2b:49:36:4f:
a5:90:d3:76:ad:c5:c6:46:1b:88:13:f7:02:c0:10:
14:64:66:27:35:24:3b:63:6f:ab:38:b6:47:54:8c:
ee:d2:e8:98:ac:c8:bc:1a:39:cb:ea:31:fd:0b:73:
8d:9c:c1:e7:72:a1:d9:55:aa:16:cd:19:4c:0d:41:
9f:2d:f2:4f:a3:17:c8:c3:60:a0:16:ac:31:2b:30:
23:82:7a:2e:17:d9:ca:d1:c5:bd:76:06:86:75:31:
bd:6d:e8:39:39:e3:b2:57:18:96:51:20:4d:80:17:
71:30:c1:7a:8e:f6:b4:c4:00:d0:5f:70:5e:84:35:
9a:22:e1:1e:fa:65:d1:ab:e6:32:6a:de:6d:19:5f:
15:5c:5d:25:6d:93:c1:97:0e:86:bc:4e:6c:c0:93:
f0:e7:13:7b:27:c5:c5:7f:3f:19:07:98:c6:14:27:
fc:ce:25:6c:64:fb:9b:a1:e3:15:ef:fa:b0:3a:0a:
b6:d3:2e:04:6c:e8:5c:1b:3a:98:66:a8:85:e9:0b:
4c:1a:cc:37:3e:70:13:80:59:64:08:de:89:a0:07:
3c:f5:01:35:87:54:bb:c1:91:40:4a:67:65:1a:cd:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:97:65:A7:A2:DE:F2:2B:F1:01:C8:68:31:E0:DB:06:95:A4:61:51
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:f3:96:4e:49:07:b9:cf:80:af:9e:97:72:3e:e3:ba:8e:
fb:17:b0:40:70:c6:30:c5:ef:85:45:34:5c:9b:6e:c6:33:e6:
c6:cb:c5:7e:ea:d5:98:3b:7c:e1:5a:65:00:3b:93:64:f8:32:
f3:e3:d9:cd:fc:3a:eb:b7:51:fc:5c:79:76:f5:55:d8:1e:7f:
d8:50:ce:ea:3b:1a:a0:65:8d:54:71:1e:62:45:7b:a2:b7:96:
3a:42:ee:e5:ed:46:a5:8f:23:df:ea:47:6e:7d:28:56:1b:e6:
2d:ff:2a:fe:5c:a0:db:61:b3:c9:4e:5b:8f:b7:23:6b:3e:9d:
d4:11:3e:a8:a8:fa:b7:18:8c:18:1d:d6:5c:1f:66:8b:29:90:
46:59:fa:0a:4a:29:4c:51:64:3f:a5:4d:e5:09:d0:9b:b9:1d:
41:c1:97:ce:c1:c8:bc:bb:03:01:bc:ef:ed:e2:42:99:2b:a2:
60:ca:58:35:67:30:8e:f9:dd:93:d7:32:37:97:1f:d3:bd:6e:
15:6a:a3:ca:bb:b9:1b:f0:37:7e:d6:7c:c1:db:61:48:51:75:
c5:2d:15:da:e7:02:8f:44:45:c8:89:30:c1:53:3a:1f:3b:48:
2f:cb:ac:fd:fd:dd:c3:26:b6:21:d9:ef:1d:da:8a:62:0e:f6:
5b:d3:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:06:13 2025 by rpki-client