Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: yDekBnswGWTk7+DYZ0OfhzPYVNLczVNm62tUpoSIx14=
Subject key identifier: 9D:DA:F9:46:4F:C9:E3:28:1C:E9:B8:AD:D3:FB:E2:FA:65:6A:ED:47
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 019880C25FDEA219859F40C76A8B9096D9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0D04
Signing time: Wed 06 Aug 2025 19:01:18 +0000
Manifest this update: Wed 06 Aug 2025 19:01:18 +0000
Manifest next update: Thu 07 Aug 2025 19:01:18 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: /5zhIXPbZivvddoD9+Vu0GZomjQXsmr0mrWreuKBLhM=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:5f:de:a2:19:85:9f:40:c7:6a:8b:90:96:d9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Aug 6 19:01:18 2025 GMT
Not After : Aug 7 19:01:18 2025 GMT
Subject: CN=9ddaf9464fc9e3281ce9b8add3fbe2fa656aed47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:0b:95:16:8d:61:3c:6d:89:51:eb:b0:fa:
c1:ee:50:b7:e4:21:c5:82:01:ee:62:bc:33:65:da:
6c:17:70:f7:c3:95:41:ed:3f:cc:32:c4:af:f0:53:
d3:ce:80:1d:ac:42:65:b5:e5:df:67:fd:a1:b4:14:
4d:e2:45:6d:82:e1:b0:36:44:d0:d9:58:ee:14:69:
7c:f5:c3:b5:2a:85:e0:6e:13:18:48:35:ce:a3:d0:
b7:39:98:e6:35:ee:9b:e2:ad:17:07:15:49:cb:e4:
59:ed:c9:77:d1:55:02:41:7d:4f:93:00:b4:de:91:
56:65:4d:a8:54:dd:64:e0:f3:0d:da:8d:58:15:07:
9f:f0:88:01:f4:9b:f1:61:d9:21:f5:77:1f:b5:a4:
5e:6f:07:ae:d2:36:b3:63:4d:fd:a2:ee:ce:50:15:
33:13:c4:b4:c2:af:d3:6f:18:54:ea:a1:fa:c2:bf:
33:27:8b:37:6a:b7:ba:ec:ad:37:bc:1a:2f:8f:53:
f1:58:db:bc:19:a9:1e:a9:ff:8a:6b:8e:20:3a:bc:
cb:9c:70:25:71:a5:43:17:38:77:bd:0e:17:7c:14:
19:32:fb:d4:66:8d:f2:a8:ed:23:03:31:5b:75:c0:
6a:eb:0a:eb:7f:a2:48:27:c1:af:fd:d5:f1:51:b2:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:F9:46:4F:C9:E3:28:1C:E9:B8:AD:D3:FB:E2:FA:65:6A:ED:47
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a5:5d:9e:6e:16:fc:52:83:fa:43:ad:95:bd:c3:6b:40:72:
a2:7e:84:82:59:dc:7c:03:de:43:fc:1a:46:a8:7c:4e:ea:3d:
1c:55:83:a0:51:62:e7:15:4e:ad:df:30:83:eb:6d:16:92:78:
83:0e:de:6d:c4:e2:b3:a5:eb:f8:10:f8:c2:ea:6d:35:75:6d:
80:7b:e6:67:00:f8:fe:21:38:8c:b2:3d:78:48:41:5e:dd:b8:
b6:8c:e2:f4:eb:b0:77:38:2d:8a:5c:4b:89:0e:79:7d:d0:35:
47:75:a8:25:6c:ac:c2:59:fa:97:ff:a6:4b:35:3f:92:93:e5:
4f:52:79:24:e5:b4:68:19:39:31:db:f4:1c:1b:39:4f:66:4a:
be:68:6c:33:f8:15:c5:cb:f2:e3:d9:06:98:28:95:5f:ef:31:
5e:2c:62:72:0b:f0:b1:b9:8d:0e:74:a1:a4:a6:fd:64:12:e4:
53:e4:4e:fa:c6:14:20:62:aa:60:24:6d:d6:f8:11:bc:2f:7b:
45:13:3f:59:11:38:11:bf:98:95:cd:be:99:df:0d:83:48:55:
23:68:db:21:c3:b9:e7:1f:16:c4:60:f6:e5:59:e0:d0:c3:7e:
bf:ed:ae:83:b7:2a:9b:cb:d6:6e:e1:04:10:8b:b0:88:0f:0e:
98:6b:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:43:50 2025 by rpki-client