Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File: veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier: p+KegjUqmCkC6qJR3p5aY/+DIorUHTdmmKIvGKyvf7g=
Subject key identifier: 7A:95:90:CE:50:2A:F7:6B:71:18:FB:CE:09:6B:4B:ED:CA:E5:AB:AF
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 019A54F6149DD2439CB3CCF4E5FFAA8BB3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number: 0AAE
Signing time: Wed 05 Nov 2025 17:00:04 +0000
Manifest this update: Wed 05 Nov 2025 17:00:04 +0000
Manifest next update: Thu 06 Nov 2025 17:00:04 +0000
Files and hashes: 1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: ZwBjD+5H6eKddOanytIAj86U8AEA6M0XdTOvKzN+ZR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:14:9d:d2:43:9c:b3:cc:f4:e5:ff:aa:8b:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Nov 5 17:00:04 2025 GMT
Not After : Nov 6 17:00:04 2025 GMT
Subject: CN=7a9590ce502af76b7118fbce096b4bedcae5abaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:9c:0b:cd:e9:29:94:f0:44:75:d4:db:80:
c0:3f:36:9b:6b:eb:2e:72:57:66:fa:cf:82:7f:8b:
8c:85:00:28:61:9e:b3:52:6a:7c:4e:ff:2d:2f:16:
5a:8a:77:6e:25:03:44:d3:13:36:de:22:2b:ac:0e:
72:13:f3:99:e6:e7:ba:02:1c:56:a2:c3:eb:91:de:
5d:81:2f:77:46:9a:fb:80:0d:ee:96:70:02:af:45:
dc:68:ff:05:86:a6:42:4d:5f:01:f8:3e:b7:75:02:
fc:29:dc:9a:53:b5:a5:d4:a4:ae:4d:b2:2d:94:4a:
71:4a:12:6a:84:2d:7a:1d:d6:b8:97:51:21:af:7a:
b2:82:4e:13:e4:c3:55:d5:58:b2:6c:d8:0b:12:48:
f8:97:d8:10:f7:db:e3:6f:0d:73:45:05:1f:50:da:
c5:82:ab:b5:76:6d:d4:c7:f7:db:5e:e0:4d:c0:d2:
97:89:db:e3:9c:17:33:37:3c:fc:3a:e9:ee:32:c2:
8c:91:49:ff:48:9d:8b:95:b2:cf:54:2d:58:1e:50:
12:8c:6a:50:d4:52:83:47:07:44:95:f0:93:cf:23:
65:59:8d:65:3c:2e:1b:8a:10:74:5d:21:76:89:ed:
54:30:31:1d:9c:7a:2a:b4:e6:a7:02:1a:30:37:68:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:95:90:CE:50:2A:F7:6B:71:18:FB:CE:09:6B:4B:ED:CA:E5:AB:AF
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:95:d1:69:0f:b7:06:22:58:d6:2a:cb:f0:12:c2:c3:7c:
47:9c:31:50:ca:12:77:07:d7:5c:f5:d7:8c:8c:1c:3f:f4:65:
d1:60:dc:db:1d:63:13:3a:15:c3:5d:5e:e9:5f:a4:b3:b7:91:
98:0d:25:79:63:56:c9:cd:6a:0a:1e:11:be:08:b8:63:23:e2:
b5:23:21:87:47:75:bd:67:53:5b:52:0b:b2:9f:2d:e4:8d:6b:
bd:08:40:88:35:a1:42:cb:d8:c4:40:e7:c2:a6:f8:bc:24:f9:
14:53:40:85:0c:3a:4b:a7:c5:cf:f6:65:7d:bd:54:35:6b:f7:
16:de:4b:a5:fc:d8:b4:ca:ca:a5:75:cb:ef:22:e3:35:2c:0a:
08:3d:aa:c8:f9:2c:6e:80:cf:ac:20:84:91:00:2a:61:95:2b:
1d:33:be:da:3e:c1:28:54:ef:3e:74:4a:12:63:c0:61:92:a1:
cd:0a:33:0d:fb:37:b2:11:73:a8:83:f1:ba:0d:6c:e8:2e:e6:
ed:a3:32:8b:b8:67:3d:87:12:c9:cb:7c:c9:70:e4:a8:76:70:
aa:7a:8b:c5:58:12:85:22:01:4a:25:3b:f9:ef:14:16:19:9d:
3b:38:ad:da:89:b2:fe:02:7f:f0:ec:06:44:cf:ef:9f:e6:57:
fc:f3:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:37 2025 by rpki-client