Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: rSpmNlaBdVIHJdUlaXnYDD2I/GPEkvj30R3f3er3xaQ=
Subject key identifier: E9:2A:FD:C2:B5:63:4A:4C:18:E3:D2:92:83:AA:13:2E:E1:BA:DF:52
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019A4E18ACC2E1CB4C43E1CFC8828A0CCB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 1194
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: JiYBBymHPMt2V9Vea2Z2Nz6o8eYtbdU9iH4c+LfKAn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ac:c2:e1:cb:4c:43:e1:cf:c8:82:8a:0c:cb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=e92afdc2b5634a4c18e3d29283aa132ee1badf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:ad:e0:d4:09:65:08:af:30:dd:7c:49:e1:
d8:f2:ae:03:11:3e:f6:11:92:62:7e:71:61:c3:53:
3b:fc:43:1c:b4:41:33:6b:72:8c:e5:8b:bf:52:45:
b8:9a:5f:9d:4e:18:0d:be:f4:1a:78:75:50:37:98:
de:ae:ee:ff:f0:8c:ce:bc:ea:e3:b5:cd:2d:d6:db:
0f:df:a3:e4:f4:b3:a5:79:3a:e7:2d:5f:fe:d3:bb:
f9:7f:16:20:9b:69:6b:32:17:94:f4:98:d0:ac:0e:
20:cc:f5:6b:e3:a5:c5:4e:05:ff:08:3c:70:49:f4:
b8:99:d8:ae:0c:5a:02:38:70:e0:00:52:a6:d8:f2:
b5:c9:dc:44:81:86:ad:4c:6c:03:6e:c8:2c:87:98:
ba:f0:66:07:e6:e6:b4:23:c4:0f:3b:38:7c:14:ce:
6d:73:dc:77:2c:ae:ba:f9:4f:a3:77:20:86:a8:8a:
97:14:0d:80:10:99:7b:e5:dc:00:ce:e5:69:d4:38:
86:73:12:c8:64:9d:ba:70:7a:72:e1:f6:a5:91:bd:
35:32:98:6a:cb:17:44:57:ee:d6:11:ba:31:b9:f2:
41:8b:10:17:90:d1:dd:4b:7e:5c:df:37:41:8f:17:
a2:d6:85:e1:04:31:d2:d4:bd:04:ee:94:c0:95:54:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:FD:C2:B5:63:4A:4C:18:E3:D2:92:83:AA:13:2E:E1:BA:DF:52
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:57:28:bf:ca:48:c2:7d:41:96:2d:ab:f4:ad:e3:60:2f:30:
3e:04:04:69:82:79:b6:45:d8:d8:64:d5:26:8e:2d:08:11:d2:
a0:65:c8:e3:0e:70:c0:5c:4e:62:5a:be:c9:84:be:6b:73:28:
26:a5:1b:dc:23:71:ab:c8:f7:a1:7b:ff:a5:ae:78:4d:14:54:
95:53:56:2a:05:23:4e:c3:59:37:82:52:90:05:91:90:95:a3:
6c:6a:0a:e1:75:e3:6d:3b:0e:e7:7e:6b:d9:d0:ff:77:2c:9e:
0c:99:20:41:74:a6:83:a2:fd:73:d7:f2:0b:f4:26:3f:63:f7:
8e:3d:05:7e:bc:38:0e:77:55:9f:0f:5a:60:92:e1:b6:dc:42:
ad:c0:63:2b:b7:20:cf:1f:7a:c3:cd:0f:01:a2:65:16:f6:66:
58:89:61:3a:58:45:76:c5:fe:1b:2b:b7:24:8a:6f:32:17:0f:
f3:4b:47:cb:72:b1:e7:ce:a2:1f:cf:83:80:80:3c:c6:8e:3e:
60:4e:1a:31:37:82:74:2d:2e:53:8c:6e:93:c8:f8:60:15:87:
b7:71:e7:d7:80:6d:42:a7:dd:bd:63:55:4d:03:3f:90:7b:cd:
81:cd:d0:17:c0:ce:b7:b3:f5:b0:09:60:15:c8:26:cc:9b:ac:
e5:71:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:47 2025 by rpki-client