Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: BZoJyoKghC2O/P9ycbez4t1qzuJ+YoqromHqh9XUIsQ=
Subject key identifier: 7F:1E:42:75:31:79:52:45:24:CF:EA:7A:09:E8:34:A7:E2:50:3A:E2
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 0198D6CD1F767D2FA4AC6F66E3F0A9BE883D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 129B
Signing time: Sat 23 Aug 2025 12:00:23 +0000
Manifest this update: Sat 23 Aug 2025 12:00:23 +0000
Manifest next update: Sun 24 Aug 2025 12:00:23 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: qn0x24O4aElgCbkYRJzQK3beO1drRCkNwvfyZ1RzmlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:1f:76:7d:2f:a4:ac:6f:66:e3:f0:a9:be:88:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Aug 23 12:00:23 2025 GMT
Not After : Aug 24 12:00:23 2025 GMT
Subject: CN=7f1e42753179524524cfea7a09e834a7e2503ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:0d:80:55:b2:85:f0:d2:50:a3:ab:ff:c9:
f7:e9:8c:b1:00:12:9d:86:4d:72:c5:d5:de:13:28:
bb:a1:53:43:ef:cb:7b:8d:a5:36:6d:17:28:8a:fe:
69:dc:d7:5f:48:4b:93:b2:87:ce:fd:75:c2:93:a6:
d2:7b:6d:98:d9:77:42:21:ca:47:1d:00:b6:fb:fd:
24:2c:45:06:f9:d1:60:d3:6e:51:e8:72:e1:ce:d9:
c4:17:28:35:91:ef:8c:6f:45:00:19:14:e8:41:07:
fd:f1:f4:42:5d:00:40:c6:52:2b:d6:1a:bf:68:f4:
96:8a:89:2a:7b:92:dc:5e:04:d5:8d:bf:58:e5:61:
64:78:13:2d:bb:5b:71:0f:ff:7d:5d:74:fa:74:05:
cd:61:b2:75:82:99:64:68:04:3a:58:a7:00:84:55:
c9:fa:f8:3d:f8:e7:07:07:8d:ca:a8:28:aa:93:77:
80:e4:37:d3:dd:3a:d4:02:50:83:79:2e:0e:a9:47:
ab:0d:ab:7b:6e:03:bf:f4:47:ce:5c:5e:75:2e:59:
11:97:93:39:43:15:60:90:ba:64:95:97:b5:51:6b:
46:bc:29:d5:8c:49:99:cc:fc:b4:04:aa:ae:59:8f:
c0:90:9d:39:cd:68:cf:6a:03:a7:77:14:3e:d7:fc:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:42:75:31:79:52:45:24:CF:EA:7A:09:E8:34:A7:E2:50:3A:E2
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:49:83:2b:b1:20:03:5a:6f:6f:5f:f0:0d:b8:a6:6b:07:
17:50:f2:84:a4:4d:88:ff:23:6d:0d:5c:d5:a2:bb:97:6b:e2:
2a:3f:ef:b7:6c:d8:1e:68:9d:48:48:e9:8c:2d:eb:72:7c:60:
4e:a4:64:4a:92:6c:55:60:d1:83:ea:0a:34:71:93:33:88:8b:
bd:c9:c8:3a:c7:08:39:55:c9:9b:e7:8d:d0:34:d9:ec:a2:13:
3f:99:c9:a5:ae:46:dc:f0:4d:07:f1:eb:6b:e7:42:95:e2:fe:
0f:b9:42:cd:42:de:03:b7:c7:ef:6b:b1:56:e6:0a:b3:6d:09:
25:07:9c:33:ee:bf:3b:3c:aa:5c:30:41:fc:3f:e1:c6:ba:c4:
62:97:67:2e:00:e3:53:42:03:57:44:9e:84:46:c8:90:cb:99:
86:71:c3:dc:e7:0a:9c:ac:2d:45:47:71:68:d2:81:42:22:e1:
4f:62:82:77:e8:29:df:06:fe:0e:ec:28:fb:17:03:18:14:ef:
8d:2f:a0:dd:21:44:43:2b:5b:30:45:3e:c9:83:0b:04:95:79:
da:84:e4:dc:eb:7c:cb:89:0d:d2:2f:1c:58:8c:b6:aa:84:27:
ea:86:97:66:31:d9:34:52:6b:5c:91:d6:0f:cc:72:83:ba:79:
04:22:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:16 2025 by rpki-client