Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: HmsAiAt02GCp4CHouSL+ArZWrxQX3yI9uazB18VDO4o=
Subject key identifier: 55:27:98:AD:07:83:22:72:BF:1A:46:99:63:80:09:C3:9F:C8:81:E8
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 0198A0BAB00FF12FA0DA30D14C97614E1890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 127F
Signing time: Wed 13 Aug 2025 00:00:45 +0000
Manifest this update: Wed 13 Aug 2025 00:00:45 +0000
Manifest next update: Thu 14 Aug 2025 00:00:45 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: A7/3SPRVQz3e9MEgfPACme8FKs4VXQe49D4ySBk476g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:b0:0f:f1:2f:a0:da:30:d1:4c:97:61:4e:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Aug 13 00:00:45 2025 GMT
Not After : Aug 14 00:00:45 2025 GMT
Subject: CN=552798ad07832272bf1a4699638009c39fc881e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:e8:f7:28:8d:b4:3c:f1:de:4a:9b:a2:69:
b9:6d:0e:20:b3:ab:c3:3c:ca:4e:7d:a3:3c:e5:04:
e3:f5:f0:d4:8d:12:47:01:20:6b:2b:a7:92:ed:17:
e8:f6:5b:d0:0c:9c:4f:29:0b:d8:74:f8:7e:6f:53:
03:0f:cb:82:42:ca:1f:32:18:9d:a7:9b:d9:73:5b:
11:14:48:20:3b:8f:f0:01:b3:1c:85:4f:ac:d0:36:
63:e7:94:6a:e9:3a:52:5f:4b:f8:63:e4:31:b9:1f:
84:d8:ac:d1:f1:8c:43:93:36:2f:6d:d7:4a:21:e1:
98:16:b0:11:84:7f:50:de:b3:9d:e1:09:2a:bd:d5:
80:40:e5:1a:35:c9:c9:08:af:6f:8f:b4:a3:ef:a9:
af:3b:fc:c4:ef:e8:20:61:eb:b3:d1:94:72:ab:cd:
f6:a1:9a:49:b9:37:eb:fc:ba:83:0a:c1:73:ec:99:
12:21:02:98:bd:58:a7:6c:bd:89:05:01:42:cd:54:
23:37:43:48:d9:da:cf:02:13:cc:96:82:81:07:26:
77:ea:8a:58:96:d3:a1:76:6d:ef:21:74:09:78:f8:
4d:41:0f:33:1e:54:d9:4c:da:d8:13:40:ce:a9:b3:
8d:4b:74:d5:4f:a2:49:42:67:40:ce:dc:3b:11:d9:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:98:AD:07:83:22:72:BF:1A:46:99:63:80:09:C3:9F:C8:81:E8
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1a:9f:f0:78:53:8e:b3:7e:c9:18:31:10:75:1b:4b:3f:d2:
fb:c8:90:23:9e:66:df:9c:21:8e:14:06:0c:4a:c6:74:9a:1c:
ae:5d:e1:af:a9:42:bb:cc:1b:05:15:75:3e:31:f9:62:b0:c4:
9e:13:ff:16:39:66:03:d7:69:20:0c:31:34:9f:fc:15:17:ec:
41:91:9b:48:7d:8b:38:ce:98:4d:f7:db:84:b5:53:95:5a:40:
5f:9e:b4:5c:67:a4:47:77:6a:73:64:a4:35:6b:5b:a7:db:99:
15:96:80:b7:ad:83:99:bc:fb:ce:7f:5f:75:63:7d:92:e0:bb:
11:11:f6:f6:57:f9:d3:a2:f8:69:e8:ca:3d:59:45:55:6a:5d:
26:a0:63:2d:a8:be:d6:ea:88:7b:c5:68:c1:79:7f:30:a5:d8:
cd:37:7c:98:fb:98:43:75:8f:e5:66:20:33:a7:fd:aa:5c:1d:
29:33:76:0c:6b:54:66:dc:30:c5:f9:f2:7b:e4:31:7b:31:84:
ba:b1:6e:d5:ac:15:29:88:e6:d5:7c:3f:86:49:31:6d:bd:e6:
47:5b:6b:f4:40:73:e1:38:e0:59:e4:cd:10:6a:49:82:8f:3d:
f1:8a:21:99:b5:b2:17:3e:03:c0:ee:61:9d:aa:f1:66:1b:ae:
55:26:04:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigurAP8S+g2jDRTJdhThiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTNhNGZiMjY4MWRiMjhiNWMzZjVmMWQ0NmEyZDM1OTk2
MGZhYTQwHhcNMjUwODEzMDAwMDQ1WhcNMjUwODE0MDAwMDQ1WjAzMTEwLwYDVQQD
Eyg1NTI3OThhZDA3ODMyMjcyYmYxYTQ2OTk2MzgwMDljMzlmYzg4MWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk3o9yiNtDzx3kqbomm5bQ4gs6vD
PMpOfaM85QTj9fDUjRJHASBrK6eS7Rfo9lvQDJxPKQvYdPh+b1MDD8uCQsofMhid
p5vZc1sRFEggO4/wAbMchU+s0DZj55Rq6TpSX0v4Y+QxuR+E2KzR8YxDkzYvbddK
IeGYFrARhH9Q3rOd4QkqvdWAQOUaNcnJCK9vj7Sj76mvO/zE7+ggYeuz0ZRyq832
oZpJuTfr/LqDCsFz7JkSIQKYvVinbL2JBQFCzVQjN0NI2drPAhPMloKBByZ36opY
ltOhdm3vIXQJePhNQQ8zHlTZTNrYE0DOqbONS3TVT6JJQmdAztw7EdkZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUnmK0HgyJyvxpGmWOACcOfyIHoMB8GA1UdIwQY
MBaAFL3jpPsmgdsotcP18dRqLTWZYPqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMt
ODA4ZmVhYWY5ODdkLzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yMWRlNjctNDk3NS00N2E4LTg0NmMtODA4ZmVhYWY5ODdk
LzEvdmVPay15YUIyeWkxd19YeDFHb3ROWmxnLXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxqf8HhT
jrN+yRgxEHUbSz/S+8iQI55m35whjhQGDErGdJocrl3hr6lCu8wbBRV1PjH5YrDE
nhP/FjlmA9dpIAwxNJ/8FRfsQZGbSH2LOM6YTffbhLVTlVpAX560XGekR3dqc2Sk
NWtbp9uZFZaAt62Dmbz7zn9fdWN9kuC7ERH29lf506L4aejKPVlFVWpdJqBjLai+
1uqIe8VowXl/MKXYzTd8mPuYQ3WP5WYgM6f9qlwdKTN2DGtUZtwwxfnye+QxezGE
urFu1awVKYjm1Xw/hkkxbb3mR1tr9EBz4TjgWeTNEGpJgo898YohmbWyFz4DwO5h
narxZhuuVSYEuA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 09:45:12 2025 by rpki-client