Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: V+9c4pi9sCPC4lurivoda49b6M+XejJKb93LP/CsT3k=
Subject key identifier: 2E:41:3A:A0:34:09:81:82:5C:67:C2:AE:39:A1:03:E6:04:FA:27:3E
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 019A4D73D98D05CF47701253B6C8E8E6BD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 135D
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: Xpj+MqSpu8r7Duzdnh01t0srIAh0r9pJDCor2gzfUXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d9:8d:05:cf:47:70:12:53:b6:c8:e8:e6:bd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=2e413aa0340981825c67c2ae39a103e604fa273e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:27:2f:bf:53:7e:da:c3:3d:41:2e:67:b7:
21:8c:ee:78:09:0a:e6:ec:02:6a:9c:27:22:9a:56:
5b:3f:ff:54:5b:82:9d:b6:20:25:d6:29:3b:e5:d5:
f6:9c:9a:1c:05:89:81:42:5d:71:11:e7:e8:98:77:
0d:99:f1:a9:76:11:36:e8:3c:08:b9:e3:19:24:e7:
4f:b5:fe:5c:48:af:bb:55:ea:e6:cf:48:7c:0b:5a:
39:c7:bf:a3:f8:1c:32:de:34:bf:ba:4e:2c:b6:3f:
34:f3:b3:55:35:0d:23:36:76:a2:b1:00:b3:ec:2d:
c5:0e:02:c8:ca:ce:00:09:65:82:76:79:24:82:e1:
76:78:bf:06:ff:79:51:93:ff:c9:77:f5:3a:fc:53:
36:aa:a3:6f:72:72:ca:cf:d3:fa:e6:3a:98:80:24:
a9:82:ce:4d:ab:08:9b:3c:8c:66:db:c6:22:24:1d:
1f:12:d1:a4:3f:cd:e0:b7:d4:9b:36:de:6d:09:d2:
c3:56:63:45:1e:32:59:12:a8:0e:4b:5f:d0:83:7d:
41:94:b8:66:ba:23:c9:d4:97:f3:cd:82:e0:11:ca:
b1:cb:b8:86:80:fb:24:ff:af:6f:ea:5a:33:ec:fb:
1d:6c:4a:4f:ef:28:ca:19:6f:8b:6a:d3:62:4e:ed:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:3A:A0:34:09:81:82:5C:67:C2:AE:39:A1:03:E6:04:FA:27:3E
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b5:a2:ac:f3:96:86:41:93:90:3d:ee:d7:20:14:ac:fa:07:
b9:2d:65:78:35:72:d7:3d:7d:d4:81:a4:1f:ca:d8:6a:31:aa:
6f:44:81:29:64:97:53:c6:e1:41:a4:cf:11:77:e0:4e:db:5d:
54:d2:39:6c:8f:5e:30:19:50:20:fb:66:4c:6b:b1:35:1a:01:
79:77:c7:f0:2d:b0:c0:4f:77:29:92:22:0d:6b:ec:76:c2:61:
9c:70:ea:0c:0e:35:93:98:08:49:09:53:ff:5e:47:4d:be:d3:
3f:ed:8e:90:60:b5:d8:f8:c7:af:9c:9b:0e:d1:df:18:96:ce:
3b:6e:69:15:6b:86:f0:89:f9:60:a6:96:a6:14:b4:dd:73:0c:
1d:4f:c4:0b:b6:cd:a1:c2:40:98:58:e8:d9:fd:b4:0d:1f:a2:
1e:df:dd:c1:fe:9b:d3:54:a7:33:08:fb:44:bf:91:0c:cb:73:
64:b9:01:fe:44:6a:0d:de:e0:ac:d9:06:d2:89:ff:37:92:a1:
32:36:34:8f:85:6f:45:51:61:24:bb:bc:0c:b9:09:04:99:83:
7b:01:de:9a:64:b1:68:d6:ee:99:e0:cc:f8:89:f7:9c:91:fe:
f2:39:82:4a:b6:53:69:dd:b0:89:68:71:fc:b0:6b:e1:90:49:
3a:2a:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client