Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: TPs5wjX1Vb/C9sSYl0hmXyydLdKM7qSOe5c/ZMZ0jaY=
Subject key identifier: B8:05:18:CD:43:E0:FB:A9:95:72:B8:36:72:43:12:55:04:7B:67:42
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0198963704CDDBD305F8020ED6DB3C559E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 23:00:44 +0000
Manifest this update: Sun 10 Aug 2025 23:00:44 +0000
Manifest next update: Mon 11 Aug 2025 23:00:44 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: rkUPGTDT7H3ct+76l6XSJUV0Zi9k09SGTfFrWCisnpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:04:cd:db:d3:05:f8:02:0e:d6:db:3c:55:9e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Aug 10 23:00:44 2025 GMT
Not After : Aug 11 23:00:44 2025 GMT
Subject: CN=b80518cd43e0fba99572b83672431255047b6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:31:2a:e2:39:96:ae:83:c5:dc:7b:8b:88:
58:e1:e8:ff:cd:23:8d:bf:99:f2:4d:50:0e:36:ec:
18:58:b5:13:56:9b:f8:3a:cf:45:5c:5b:32:08:6a:
0a:a8:2d:4d:75:97:b5:69:14:81:03:39:21:3e:08:
15:f2:be:92:c4:66:5b:6b:e6:5d:72:61:a1:1d:24:
99:e9:38:a4:7a:c0:cf:44:b6:d0:ed:47:97:44:eb:
36:97:73:20:76:2d:ac:76:0d:92:a9:b8:43:96:49:
20:e6:de:68:fa:d7:8c:62:0d:29:74:90:dc:e8:c1:
26:15:76:78:2f:4f:89:0f:a2:f1:5f:bf:d2:c7:50:
5c:8f:52:7b:76:21:86:20:5f:a2:23:6f:67:bd:de:
ca:42:29:6e:ff:c8:a1:9f:f7:f3:68:fb:86:4b:97:
b2:cb:ba:a7:de:43:bd:a3:2e:64:6d:24:fd:6b:fc:
76:2f:73:49:8a:da:6c:12:04:12:01:19:f3:4a:aa:
e6:68:32:81:5e:e9:b5:09:c8:fd:11:e1:1b:93:e6:
c1:a7:3f:28:32:3b:0c:c9:8c:ea:9a:c5:bf:d2:d4:
04:2c:69:cd:bc:88:5f:1d:5d:28:06:ff:72:83:63:
67:74:fa:f1:ca:66:5a:eb:44:f9:50:e8:36:e2:1d:
17:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:18:CD:43:E0:FB:A9:95:72:B8:36:72:43:12:55:04:7B:67:42
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:83:14:62:87:c4:7f:e7:53:d8:f7:76:c1:17:30:bf:9a:
8a:98:44:05:94:1d:89:62:a5:83:87:04:90:28:4c:41:cd:3c:
9b:10:7e:ce:95:6c:d7:c1:6f:bd:91:b2:de:e9:d9:50:65:d3:
6f:d2:ee:76:a2:09:c1:c8:44:d1:d9:93:54:59:53:f7:55:d3:
81:d8:f1:cb:ce:0d:df:2c:fb:c0:de:d1:26:54:3f:0f:01:92:
96:ea:a6:11:cd:04:b4:7c:63:f6:33:d9:8d:49:99:bf:05:6d:
d4:92:c1:c5:06:b4:c1:22:0f:39:9f:c7:76:2f:db:c4:ca:d9:
d4:7d:09:2f:9e:dc:67:b6:0f:5f:87:26:f6:c0:59:95:b5:77:
7c:13:07:bd:e5:5d:ed:de:45:3a:28:40:e2:f5:13:1c:d0:48:
fc:8e:1f:00:4f:7c:25:7a:c5:64:f3:a1:84:e6:b5:66:58:6f:
a4:1d:d5:87:43:79:8e:80:16:6d:2a:d6:af:1c:ed:a0:b8:40:
c6:bb:5b:2c:de:58:f9:e8:15:4f:01:58:ae:bf:bb:d5:4c:f6:
0a:a3:e5:bf:f1:a9:db:e6:6c:bb:20:85:4a:ed:d3:b4:ab:29:
68:71:f6:2d:0a:5e:b6:a9:b9:9c:14:d1:2e:a3:e7:10:db:50:
07:8b:ea:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWNwTN29MF+AIO1ts8VZ4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUwODEwMjMwMDQ0WhcNMjUwODExMjMwMDQ0WjAzMTEwLwYDVQQD
EyhiODA1MThjZDQzZTBmYmE5OTU3MmI4MzY3MjQzMTI1NTA0N2I2NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCkxKuI5lq6Dxdx7i4hY4ej/zSON
v5nyTVAONuwYWLUTVpv4Os9FXFsyCGoKqC1NdZe1aRSBAzkhPggV8r6SxGZba+Zd
cmGhHSSZ6TikesDPRLbQ7UeXROs2l3Mgdi2sdg2SqbhDlkkg5t5o+teMYg0pdJDc
6MEmFXZ4L0+JD6LxX7/Sx1Bcj1J7diGGIF+iI29nvd7KQilu/8ihn/fzaPuGS5ey
y7qn3kO9oy5kbST9a/x2L3NJitpsEgQSARnzSqrmaDKBXum1Ccj9EeEbk+bBpz8o
MjsMyYzqmsW/0tQELGnNvIhfHV0oBv9yg2NndPrxymZa60T5UOg24h0XVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgFGM1D4PuplXK4NnJDElUEe2dCMB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfamDFGKH
xH/nU9j3dsEXML+aiphEBZQdiWKlg4cEkChMQc08mxB+zpVs18FvvZGy3unZUGXT
b9LudqIJwchE0dmTVFlT91XTgdjxy84N3yz7wN7RJlQ/DwGSluqmEc0EtHxj9jPZ
jUmZvwVt1JLBxQa0wSIPOZ/Hdi/bxMrZ1H0JL57cZ7YPX4cm9sBZlbV3fBMHveVd
7d5FOihA4vUTHNBI/I4fAE98JXrFZPOhhOa1ZlhvpB3Vh0N5joAWbSrWrxztoLhA
xrtbLN5Y+egVTwFYrr+71Uz2CqPlv/Gp2+ZsuyCFSu3TtKspaHH2LQpetqm5nBTR
LqPnENtQB4vq6g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:22 2025 by rpki-client