Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: b2VQc3yseH8TiQmY/Hs9O/IhiXmVLOaXNaVmNbrkbgM=
Subject key identifier: E8:AA:ED:D6:A4:E9:D1:81:D3:6D:CD:6F:A5:C1:08:AD:6C:34:1C:EC
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 0199FC583AA29DA563090D2565D17614A507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 1333
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: jUObpALZ00rlrdFoWdFD+UHWjwNqL8uMBBlwjb9s3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3a:a2:9d:a5:63:09:0d:25:65:d1:76:14:a5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=e8aaedd6a4e9d181d36dcd6fa5c108ad6c341cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:b3:67:72:9a:20:00:65:d1:d6:ab:f3:a4:
96:8c:3e:df:aa:c2:97:7a:41:3a:00:37:bb:39:ac:
bf:51:5f:b1:e1:f0:34:d7:82:54:2a:b5:2a:ce:6a:
1f:35:d7:38:0a:71:4d:05:39:49:59:8c:d3:30:f2:
25:81:f6:ce:c0:b6:5f:cc:b3:95:18:a6:42:ce:10:
31:c5:4e:75:c1:2e:d2:c6:86:45:63:ce:d1:a0:16:
48:3e:35:da:ed:cc:43:16:03:f4:dc:90:d7:6f:c4:
17:ba:88:60:67:5a:e9:0d:4f:29:00:ad:34:dc:ca:
be:ea:65:a0:67:9d:c8:69:df:96:47:98:97:c1:3d:
86:06:5a:a0:29:34:c8:13:21:a2:46:7e:73:49:1c:
a2:e3:d7:84:e2:8a:dc:ca:8b:5a:09:d4:78:0e:dc:
e4:2b:ac:b5:72:0e:99:54:96:02:d6:58:ae:42:2d:
13:47:39:3d:52:fc:d2:5a:df:ae:6f:8f:17:81:fd:
75:a2:0d:75:e0:83:0a:5d:66:0b:1c:6e:96:70:ba:
ae:04:5b:ea:fd:15:62:41:dc:c9:63:7a:16:70:0b:
4f:6f:78:90:05:81:38:68:a0:bf:28:88:d3:9b:bc:
35:8b:62:79:dc:0c:19:60:07:cb:6c:47:6d:54:bc:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:ED:D6:A4:E9:D1:81:D3:6D:CD:6F:A5:C1:08:AD:6C:34:1C:EC
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:51:e4:d5:6e:8a:06:05:a5:32:1e:65:75:2d:30:88:1d:82:
e2:7e:25:ae:4e:ec:1c:4c:4f:2c:84:26:1b:f1:6c:f9:c8:71:
78:b5:3c:ae:fa:9f:2e:1f:2c:4b:c9:a0:8e:83:06:77:c0:71:
1c:db:aa:1c:e8:40:d0:c6:f6:82:19:db:f5:9e:66:54:42:64:
d9:08:40:e9:b7:8a:d2:b6:12:d4:8a:47:5c:33:17:1b:b5:0d:
5a:eb:af:5e:41:e5:67:bb:46:2a:47:d8:57:96:1e:c9:fa:83:
78:6c:4b:ad:7b:79:bd:25:84:cb:44:3f:e0:56:c0:99:af:46:
86:90:af:37:59:89:80:87:49:98:58:df:dc:8b:71:eb:57:34:
67:57:05:4e:b6:b2:21:ec:82:ab:0a:58:1f:84:8d:cb:e7:1e:
e5:b8:16:35:5c:14:5f:3a:d5:e8:45:2c:94:d4:34:12:00:8f:
41:c5:57:db:bd:0b:5b:c5:87:2f:be:38:03:0e:ba:b5:ec:d5:
64:87:63:28:75:72:d0:ae:ee:d0:91:f0:08:84:0d:7a:b7:d1:
6c:f6:61:ca:69:e5:6d:04:ee:e9:91:e0:10:fc:2c:3f:d2:db:
8f:b9:75:b5:3c:fd:59:7d:b8:94:d4:23:26:4c:be:b1:c6:a1:
b3:30:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:13 2025 by rpki-client