Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: NYF8HF6DDQJ6HKoZFYEvKVEIsKKD0Erym21mmHfcl5w=
Subject key identifier: CC:36:D7:9A:36:AA:C9:0F:52:28:29:1B:1A:18:BB:23:D8:D1:CF:CC
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 01987C095EC7CF88BD9C4A42E12CBD8B1B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0D13
Signing time: Tue 05 Aug 2025 21:00:45 +0000
Manifest this update: Tue 05 Aug 2025 21:00:45 +0000
Manifest next update: Wed 06 Aug 2025 21:00:45 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: PnsNkYydLePVCQuq/V+1LFG8EMMS3S8XCix4KmR6nu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:5e:c7:cf:88:bd:9c:4a:42:e1:2c:bd:8b:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Aug 5 21:00:45 2025 GMT
Not After : Aug 6 21:00:45 2025 GMT
Subject: CN=cc36d79a36aac90f5228291b1a18bb23d8d1cfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:32:3f:7b:94:02:7f:d4:08:c4:43:62:c9:
5d:6d:27:18:05:04:e2:20:aa:f7:5b:ea:8a:e5:f1:
1c:58:a1:47:83:54:05:f9:7f:b6:02:09:df:30:d3:
87:02:ee:6b:ec:b3:6c:76:35:10:e6:5d:85:8a:53:
e8:ce:18:e3:da:72:6c:b5:e3:b4:9a:64:1f:fa:11:
d3:db:ca:87:7e:38:73:37:06:c8:82:86:8b:35:b9:
02:5d:f8:10:ec:c4:0f:97:f9:c2:92:ae:c3:20:5c:
7a:e5:a4:6d:39:31:4b:d0:04:10:99:67:f2:37:82:
dc:e3:5c:1c:4d:d7:ec:59:18:4f:e7:0c:5a:e0:5f:
2a:07:aa:04:95:54:63:b3:17:5a:83:ba:19:28:29:
03:ef:5a:e9:a2:d6:cd:a3:ec:52:d1:f6:8c:fc:35:
50:56:26:d5:25:ff:41:91:7d:c6:3b:13:95:f2:5c:
7a:e4:27:44:b7:6e:ad:e7:3e:19:17:5d:bf:ac:c0:
b4:93:a3:85:c9:1e:87:aa:ac:92:e6:70:a9:b6:de:
91:da:18:15:80:1e:2a:3a:86:9f:41:50:d2:73:f6:
0f:50:73:6d:05:85:4b:3c:a4:64:4c:6e:c4:a9:d4:
d0:3d:50:9f:eb:17:9e:0b:0b:a9:9f:77:55:0d:79:
8e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:D7:9A:36:AA:C9:0F:52:28:29:1B:1A:18:BB:23:D8:D1:CF:CC
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:13:14:4b:ea:be:06:a0:97:e7:32:4b:42:81:27:20:66:c2:
3c:c7:a9:0a:ba:e5:d1:c8:19:fe:9c:14:0b:00:a3:78:98:73:
cc:d3:96:ed:67:db:34:5b:8f:bb:ea:a9:d9:13:12:36:01:db:
69:ab:80:fc:fb:53:5b:64:34:8c:6f:a2:bd:07:2c:00:84:0c:
05:a4:23:38:07:a9:81:e4:57:03:6d:25:3a:37:a5:66:71:8b:
52:e2:de:e6:a0:5b:65:2e:b2:6c:94:ab:67:14:83:6f:45:cd:
45:a6:8a:bf:e2:c5:42:0e:42:87:b5:2b:78:6a:4b:54:ff:98:
f8:e7:08:d2:18:92:4b:a6:b5:e9:c5:73:30:38:1e:90:93:ce:
44:a0:4d:40:88:0c:fd:b7:18:d8:f4:40:07:1d:6d:cc:08:cc:
72:bc:8c:3f:20:ad:93:14:80:1b:56:99:85:80:d1:e5:1b:4c:
08:10:56:d5:9e:fa:c4:c2:fb:f7:2f:d7:d0:74:67:f2:b0:40:
a7:a3:d5:0d:16:da:88:c3:d0:6b:da:9f:be:c7:70:7b:07:41:
da:d6:95:21:ae:8c:f0:29:49:d9:dc:66:42:d1:e6:22:fd:a1:
ae:cc:0b:e1:22:cd:aa:5b:e2:1d:af:f0:3b:e6:e2:cb:13:68:
4d:6d:85:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8CV7Hz4i9nEpC4Sy9ixuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0
OWQwNzkwHhcNMjUwODA1MjEwMDQ1WhcNMjUwODA2MjEwMDQ1WjAzMTEwLwYDVQQD
EyhjYzM2ZDc5YTM2YWFjOTBmNTIyODI5MWIxYTE4YmIyM2Q4ZDFjZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZoyP3uUAn/UCMRDYsldbScYBQTi
IKr3W+qK5fEcWKFHg1QF+X+2AgnfMNOHAu5r7LNsdjUQ5l2FilPozhjj2nJsteO0
mmQf+hHT28qHfjhzNwbIgoaLNbkCXfgQ7MQPl/nCkq7DIFx65aRtOTFL0AQQmWfy
N4Lc41wcTdfsWRhP5wxa4F8qB6oElVRjsxdag7oZKCkD71rpotbNo+xS0faM/DVQ
VibVJf9BkX3GOxOV8lx65CdEt26t5z4ZF12/rMC0k6OFyR6HqqyS5nCptt6R2hgV
gB4qOoafQVDSc/YPUHNtBYVLPKRkTG7EqdTQPVCf6xeeCwupn3dVDXmOJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw215o2qskPUigpGxoYuyPY0c/MMB8GA1UdIwQY
MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt
NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk
LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshMUS+q+
BqCX5zJLQoEnIGbCPMepCrrl0cgZ/pwUCwCjeJhzzNOW7WfbNFuPu+qp2RMSNgHb
aauA/PtTW2Q0jG+ivQcsAIQMBaQjOAepgeRXA20lOjelZnGLUuLe5qBbZS6ybJSr
ZxSDb0XNRaaKv+LFQg5Ch7UreGpLVP+Y+OcI0hiSS6a16cVzMDgekJPORKBNQIgM
/bcY2PRABx1tzAjMcryMPyCtkxSAG1aZhYDR5RtMCBBW1Z76xML79y/X0HRn8rBA
p6PVDRbaiMPQa9qfvsdwewdB2taVIa6M8ClJ2dxmQtHmIv2hrswL4SLNqlviHa/w
O+biyxNoTW2Fpg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:45 2025 by rpki-client