Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: 7VRS+uVsqSQjaNHO9pmYVAdElhm5TX7xrvDBYSHNzN0=
Subject key identifier: E0:7E:A4:71:BF:CF:33:07:4B:16:1B:DD:A2:D8:21:BD:1E:7A:23:FE
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 01984AAEA6EC8FC94FA88BCD7B0B947CA25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0CE8
Signing time: Sun 27 Jul 2025 07:00:16 +0000
Manifest this update: Sun 27 Jul 2025 07:00:16 +0000
Manifest next update: Mon 28 Jul 2025 07:00:16 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: aPDYi/s27xGG+FCIX02eWc2EZEzSOlckf2Qs8mFon4A=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:a6:ec:8f:c9:4f:a8:8b:cd:7b:0b:94:7c:a2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Jul 27 07:00:16 2025 GMT
Not After : Jul 28 07:00:16 2025 GMT
Subject: CN=e07ea471bfcf33074b161bdda2d821bd1e7a23fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6d:eb:da:1c:b8:11:7d:51:f3:75:4a:f3:02:
45:4d:4d:b2:5c:5e:81:77:6f:ed:fc:34:ab:7b:74:
1d:d6:a2:53:e8:83:ea:f5:22:42:de:8d:53:f4:21:
11:23:55:ce:3d:99:e6:eb:a5:e6:49:a6:f5:cf:f7:
2d:54:fd:49:0d:18:64:24:a6:82:2c:0d:e2:00:63:
40:c8:85:26:aa:fa:fe:f2:be:e6:dc:0f:ec:b1:98:
d3:c7:67:63:52:8e:32:77:31:16:f0:c4:bf:07:69:
80:91:73:38:77:92:ce:2d:f1:95:be:43:1d:4b:09:
fc:70:88:f4:74:d3:10:69:5b:cc:40:12:53:da:52:
6f:38:1a:bd:b9:a8:a9:1f:1a:6e:51:f0:ff:a7:2c:
c8:89:64:67:04:02:b0:81:c4:57:00:64:79:2e:53:
6a:7e:30:c7:ec:16:0f:ba:8f:50:90:63:0e:0c:e3:
55:e5:ed:77:7a:20:63:59:d9:2f:c8:62:e6:07:8c:
27:85:38:60:f4:74:52:f5:5a:89:a1:1b:45:f2:27:
28:b2:9f:b4:ae:1c:d1:47:06:ed:90:9a:c3:bf:1b:
92:48:69:12:6c:9e:74:18:8f:58:18:e9:3c:9c:a7:
d9:2b:58:41:7c:b1:e4:5c:c2:fc:af:6b:94:ed:68:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:A4:71:BF:CF:33:07:4B:16:1B:DD:A2:D8:21:BD:1E:7A:23:FE
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d8:10:df:0b:89:2c:82:a5:d7:a0:7d:8b:be:4a:e0:a3:8d:
54:c6:08:06:ef:c3:49:42:1e:16:53:8d:55:a8:0b:76:fc:dc:
16:57:7f:2e:8d:12:bf:90:41:e9:b2:40:a1:64:c8:b7:1d:ca:
60:74:2d:ea:bf:e1:e7:5b:ca:80:9f:06:97:7b:0a:fa:bd:15:
48:a4:ba:e8:4a:1a:a1:26:99:e0:26:87:6c:0c:38:87:bc:82:
9f:84:a1:a3:41:d7:93:3b:ae:85:85:34:f9:ec:b9:03:e8:2c:
77:82:60:76:c1:4d:30:f2:dd:e6:29:7e:82:f6:e3:45:41:29:
0f:7e:14:d4:e7:11:55:5c:2c:79:bc:b8:72:d8:5c:9c:21:97:
75:80:4b:96:b0:aa:0a:46:e0:78:7d:b1:4a:58:09:a5:87:91:
f2:40:73:f6:43:58:fe:8e:d1:47:6e:6b:aa:84:f5:49:37:7d:
0d:31:dc:e1:37:d7:2e:78:bd:55:0a:3b:67:eb:e8:98:7d:2d:
20:50:f5:26:cb:39:a8:05:97:f8:16:63:3f:0e:ef:1e:07:fd:
4f:0a:35:31:ef:43:5e:b2:1a:0c:67:22:7e:62:b7:4d:63:df:
ba:51:89:f3:ef:2a:2a:32:b9:9e:9f:58:1b:26:be:7a:3b:21:
41:06:cf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:31:20 2025 by rpki-client