Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: i93AwsiPMiOPX2KnUeAV43vwscejlHB9txeqjczLqVo=
Subject key identifier: 68:32:E5:86:23:70:2B:44:21:E2:69:AC:01:2E:F2:F7:DA:08:6E:AE
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 019A4D7429B5FDF4096F72293B80346446AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:49 +0000
Manifest this update: Tue 04 Nov 2025 06:00:49 +0000
Manifest next update: Wed 05 Nov 2025 06:00:49 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: 1EeR5DG5WxmiMgsEFO3tsTepHy1UvygqT0DHI5j0DQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:29:b5:fd:f4:09:6f:72:29:3b:80:34:64:46:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Nov 4 06:00:49 2025 GMT
Not After : Nov 5 06:00:49 2025 GMT
Subject: CN=6832e58623702b4421e269ac012ef2f7da086eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:17:cf:52:98:d9:82:f8:0c:66:cd:6f:8c:
6e:57:d5:e0:e7:24:b5:08:81:4e:0e:b2:ef:3f:a8:
85:ce:ae:e1:ee:6a:ed:a6:f0:50:c2:21:78:aa:a0:
3f:b5:e8:85:4e:22:c5:bc:28:78:e4:fb:4a:dd:a3:
af:87:0f:3b:cf:74:f1:63:bf:89:47:b6:32:09:76:
4a:69:3c:a8:3c:26:30:3d:b8:ec:ba:34:42:83:d7:
22:78:fb:31:b7:07:ae:ef:f5:51:ab:38:71:27:e1:
1b:fd:7c:39:ab:08:2e:94:e1:f8:75:81:d6:1e:1b:
77:29:7f:ec:fe:1b:d7:d5:cf:df:99:86:17:f2:47:
0a:05:77:90:c0:33:5c:fe:3d:29:d9:6f:54:91:c4:
8c:f5:a5:1e:ab:29:ed:76:9b:5e:50:d5:3a:75:ff:
e8:76:1b:90:8a:c5:47:7c:b7:4a:10:7b:4e:0a:d4:
24:9f:81:7b:e4:9f:30:dd:1e:a4:12:b8:39:cb:2c:
ee:c7:69:b4:24:3f:9a:a6:7d:a4:ad:bb:9a:74:d8:
80:04:ba:3a:ef:54:34:6f:bb:80:2d:d0:07:2a:77:
52:6c:a8:07:d4:93:22:6f:66:e1:e4:f7:00:90:98:
2c:96:40:04:91:52:35:f6:21:af:db:93:8c:17:8a:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:E5:86:23:70:2B:44:21:E2:69:AC:01:2E:F2:F7:DA:08:6E:AE
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:73:90:3e:22:20:16:f6:53:c2:c5:9f:c0:98:c5:69:9e:dd:
07:35:fa:e2:13:87:97:1b:ab:a8:a3:7c:e2:a5:90:d5:f7:ed:
e7:73:27:75:5a:9d:7d:6a:ae:a3:90:fc:48:8f:15:4f:5e:7a:
7c:95:8b:53:f4:bd:cc:1f:3e:22:aa:aa:5d:2f:7f:af:d6:52:
95:36:f1:db:19:03:db:40:43:28:69:16:de:5c:48:e4:e3:b7:
66:0f:34:f4:f5:df:42:2f:28:8a:2f:b1:02:f7:be:f4:b3:51:
eb:b3:26:6d:29:f8:21:c3:94:5a:10:da:3c:14:72:8c:6d:4d:
21:a1:a0:eb:aa:dc:95:b1:69:1f:07:28:85:48:62:25:6d:2c:
5b:ed:ac:a9:aa:22:32:14:b9:07:fb:da:01:f4:9a:2b:cb:c1:
91:a9:42:8d:c2:d7:2d:86:01:d2:4c:72:c0:5e:0f:f4:da:88:
f4:e0:d1:a5:a5:51:e9:88:30:f2:47:b4:4f:ce:6c:f2:28:84:
26:76:1d:98:5e:66:2b:9a:e4:cb:c3:4e:99:8a:94:15:2e:fe:
cb:6e:34:84:46:28:0f:be:63:b2:ab:3f:33:a4:a1:5b:f5:97:
8a:46:73:a0:10:4b:71:66:08:2a:20:39:d9:8c:9a:6a:ad:80:
71:88:8f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdCm1/fQJb3IpO4A0ZEarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTU5NGUzNDZmMTRkMDk4M2MxYTZiZjRiYjVjNzE0ZmY5
Yjg0NDIwHhcNMjUxMTA0MDYwMDQ5WhcNMjUxMTA1MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg2ODMyZTU4NjIzNzAyYjQ0MjFlMjY5YWMwMTJlZjJmN2RhMDg2ZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU0Xz1KY2YL4DGbNb4xuV9Xg5yS1
CIFODrLvP6iFzq7h7mrtpvBQwiF4qqA/teiFTiLFvCh45PtK3aOvhw87z3TxY7+J
R7YyCXZKaTyoPCYwPbjsujRCg9ciePsxtweu7/VRqzhxJ+Eb/Xw5qwgulOH4dYHW
Hht3KX/s/hvX1c/fmYYX8kcKBXeQwDNc/j0p2W9UkcSM9aUeqyntdpteUNU6df/o
dhuQisVHfLdKEHtOCtQkn4F75J8w3R6kErg5yyzux2m0JD+apn2krbuadNiABLo6
71Q0b7uALdAHKndSbKgH1JMib2bh5PcAkJgslkAEkVI19iGv25OMF4r98QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgy5YYjcCtEIeJprAEu8vfaCG6uMB8GA1UdIwQY
MBaAFL3llONG8U0Jg8Gmv0u1xxT/m4RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUt
YzdhMzY2YjkxZjQzLzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUtYzdhMzY2YjkxZjQz
LzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3OQPiIg
FvZTwsWfwJjFaZ7dBzX64hOHlxurqKN84qWQ1fft53MndVqdfWquo5D8SI8VT156
fJWLU/S9zB8+IqqqXS9/r9ZSlTbx2xkD20BDKGkW3lxI5OO3Zg809PXfQi8oii+x
Ave+9LNR67MmbSn4IcOUWhDaPBRyjG1NIaGg66rclbFpHwcohUhiJW0sW+2sqaoi
MhS5B/vaAfSaK8vBkalCjcLXLYYB0kxywF4P9NqI9ODRpaVR6Ygw8ke0T85s8iiE
JnYdmF5mK5rky8NOmYqUFS7+y240hEYoD75jsqs/M6ShW/WXikZzoBBLcWYIKiA5
2Yyaaq2AcYiP1g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:30 2025 by rpki-client