Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: oKUqVN6JrIdyf057z+iGfepyz6jkZXSZnlX31MR+jOg=
Subject key identifier: 43:58:C2:10:8F:6C:64:26:BA:8A:E9:AD:D6:D6:90:61:B2:9F:32:BA
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 01988B7D718F2065EBC989EBDB903E9A2B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 21:01:50 +0000
Manifest this update: Fri 08 Aug 2025 21:01:50 +0000
Manifest next update: Sat 09 Aug 2025 21:01:50 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: hNHGsqNyMCLTDkNRGElIcbdz/s+MQ2BVqFSjw319yKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:71:8f:20:65:eb:c9:89:eb:db:90:3e:9a:2b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Aug 8 21:01:50 2025 GMT
Not After : Aug 9 21:01:50 2025 GMT
Subject: CN=4358c2108f6c6426ba8ae9add6d69061b29f32ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:be:e3:5e:c8:22:da:16:41:2d:23:28:a5:
55:20:11:40:19:49:f5:dd:09:e4:c0:eb:0e:d9:a7:
8a:2a:a3:51:eb:8f:6f:95:30:12:29:27:b9:6b:9f:
7e:5d:c9:4b:ad:49:42:78:c1:94:7f:b0:3b:2b:54:
49:49:69:8c:65:db:69:fe:7f:fc:ef:cb:3d:02:8a:
63:c4:4d:73:08:f1:b7:b5:74:63:e8:76:65:5e:e5:
17:34:49:7f:ab:86:37:4c:7d:74:56:95:27:ec:40:
23:83:2f:cd:9c:60:82:14:0a:f9:cf:b4:04:8d:f2:
25:e1:22:18:2b:b9:62:e4:d1:e2:b2:61:26:e5:61:
3c:bc:24:0f:a8:be:01:03:49:7d:75:8a:90:c7:0f:
f7:6c:0d:71:a9:a7:ce:4a:77:ee:2e:f9:dc:7b:ad:
de:b3:76:5f:7f:71:d1:01:6d:7f:f9:61:01:1f:45:
68:4f:bf:11:16:b3:cb:06:3f:10:34:d8:7f:a8:05:
35:79:a6:9f:4e:34:ce:81:84:cc:6a:22:dc:52:b4:
fd:fe:d8:04:79:f6:18:e2:2d:34:c1:1d:6f:39:41:
65:3f:9d:02:af:da:76:f4:90:09:3c:6c:01:12:37:
4c:b2:4a:a4:39:1d:ec:21:44:15:ce:e6:56:e5:60:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:C2:10:8F:6C:64:26:BA:8A:E9:AD:D6:D6:90:61:B2:9F:32:BA
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8f:d9:3e:fb:cd:dd:15:71:33:82:d5:9d:e2:73:ab:47:df:
84:b6:b9:b2:69:b5:86:89:eb:a3:c3:f0:f1:dc:d0:60:d6:cb:
f2:ef:ee:d1:6d:39:2a:5d:f2:f5:7a:44:2d:1e:ca:a1:ff:2c:
29:42:20:3d:f3:13:53:ab:bc:7d:a7:41:db:4e:ec:4d:52:76:
27:df:ea:13:1f:db:e2:72:e1:6b:31:9b:29:92:88:d5:3e:2e:
35:17:58:60:92:a7:ba:98:e8:4f:4f:67:7a:55:6c:ac:ca:d4:
4a:d8:d1:7f:18:58:f3:e1:a1:ff:d6:b1:88:10:96:b1:aa:ab:
eb:24:4a:f5:13:27:99:85:0c:75:fa:8f:72:70:8e:05:59:99:
0a:a8:24:e0:27:2a:a2:11:03:c1:6b:70:48:38:22:bc:64:e8:
4a:28:29:be:41:3d:17:7f:bf:c4:d3:c7:ec:c6:e5:6e:51:db:
ba:d8:ea:4f:2e:5c:24:cb:e7:9f:de:d0:55:45:84:24:e7:eb:
c8:89:63:c9:67:25:94:b5:ca:c5:ff:f1:84:1e:0d:68:97:35:
74:b0:13:3a:e1:76:42:fb:7b:df:89:cc:a7:3a:25:ee:f8:9c:
51:14:76:cd:25:df:2f:16:23:8f:9d:8d:05:7e:be:1d:55:f6:
bc:7b:88:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfXGPIGXryYnr25A+mitIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTU5NGUzNDZmMTRkMDk4M2MxYTZiZjRiYjVjNzE0ZmY5
Yjg0NDIwHhcNMjUwODA4MjEwMTUwWhcNMjUwODA5MjEwMTUwWjAzMTEwLwYDVQQD
Eyg0MzU4YzIxMDhmNmM2NDI2YmE4YWU5YWRkNmQ2OTA2MWIyOWYzMmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs86+417IItoWQS0jKKVVIBFAGUn1
3QnkwOsO2aeKKqNR649vlTASKSe5a59+XclLrUlCeMGUf7A7K1RJSWmMZdtp/n/8
78s9AopjxE1zCPG3tXRj6HZlXuUXNEl/q4Y3TH10VpUn7EAjgy/NnGCCFAr5z7QE
jfIl4SIYK7li5NHismEm5WE8vCQPqL4BA0l9dYqQxw/3bA1xqafOSnfuLvnce63e
s3Zff3HRAW1/+WEBH0VoT78RFrPLBj8QNNh/qAU1eaafTjTOgYTMaiLcUrT9/tgE
efYY4i00wR1vOUFlP50Cr9p29JAJPGwBEjdMskqkOR3sIUQVzuZW5WBRRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENYwhCPbGQmuorprdbWkGGynzK6MB8GA1UdIwQY
MBaAFL3llONG8U0Jg8Gmv0u1xxT/m4RCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUt
YzdhMzY2YjkxZjQzLzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYmIzOWUtYmU2Yi00MjhkLWI1MGUtYzdhMzY2YjkxZjQz
LzEvdmVXVTQwYnhUUW1Ed2FhX1M3WEhGUC1iaEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo/ZPvvN
3RVxM4LVneJzq0ffhLa5smm1honro8Pw8dzQYNbL8u/u0W05Kl3y9XpELR7Kof8s
KUIgPfMTU6u8fadB207sTVJ2J9/qEx/b4nLhazGbKZKI1T4uNRdYYJKnupjoT09n
elVsrMrUStjRfxhY8+Gh/9axiBCWsaqr6yRK9RMnmYUMdfqPcnCOBVmZCqgk4Ccq
ohEDwWtwSDgivGToSigpvkE9F3+/xNPH7MblblHbutjqTy5cJMvnn97QVUWEJOfr
yIljyWcllLXKxf/xhB4NaJc1dLATOuF2Qvt734nMpzol7vicURR2zSXfLxYjj52N
BX6+HVX2vHuIXA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:37 2025 by rpki-client