Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: oa2yAoz174TAmX+JEw8MSU8KiVkv0wYf2Af9HPwZq6Q=
Subject key identifier: 93:A5:8C:4F:2C:22:58:9B:57:B8:95:02:B1:18:27:89:09:78:56:15
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0198CC4AA32070A9A03EFBC8FEE7307A99E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1647
Signing time: Thu 21 Aug 2025 11:01:40 +0000
Manifest this update: Thu 21 Aug 2025 11:01:40 +0000
Manifest next update: Fri 22 Aug 2025 11:01:40 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: Pz6MWSVrHzjo1NqlRfPqKxfnncym7TtV7R+cvz16+/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:4a:a3:20:70:a9:a0:3e:fb:c8:fe:e7:30:7a:99:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Aug 21 11:01:40 2025 GMT
Not After : Aug 22 11:01:40 2025 GMT
Subject: CN=93a58c4f2c22589b57b89502b118278909785615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:1e:19:bc:63:da:c2:91:d3:41:d9:e4:61:
57:31:97:ce:82:0f:54:47:0a:cd:a3:87:2b:ed:03:
4e:44:82:ed:c5:c1:e0:b5:1b:4f:06:7e:9b:4d:5a:
8b:ae:0e:2c:3e:7a:02:46:d7:3f:4c:91:6a:d4:94:
78:13:42:47:3c:3c:5d:d9:1e:e0:52:a2:c1:7e:18:
ed:fa:2b:93:70:00:83:4d:a5:af:24:35:92:29:78:
c1:1b:4f:ee:94:28:7b:2c:11:54:2d:a0:fc:b5:79:
07:ac:00:28:ef:ac:1b:11:92:1c:3f:92:57:f0:9f:
87:a3:f2:a1:df:74:46:fb:35:bf:85:76:d1:7f:33:
e4:99:ce:b6:56:74:b4:80:bf:08:cc:c3:d7:2d:0c:
9a:58:9e:8b:f3:35:6f:fd:90:51:cc:5e:53:de:41:
30:d5:24:cb:fe:4f:7a:c1:87:fd:b3:46:a6:37:15:
da:70:0d:ca:15:50:e5:50:6a:41:46:32:22:e0:27:
ca:b4:d3:47:33:17:a6:13:fa:02:9c:40:de:6e:58:
d4:ca:46:e5:5e:42:a7:7f:03:b8:c8:11:f6:14:e6:
dd:55:1f:65:92:31:16:29:86:ef:fa:51:d3:65:24:
34:19:55:e1:7a:94:13:56:e4:14:55:da:8a:d9:f9:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:8C:4F:2C:22:58:9B:57:B8:95:02:B1:18:27:89:09:78:56:15
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7e:e8:0d:73:af:42:4e:70:f8:cf:46:bf:77:d6:2f:74:57:
b7:50:7e:f7:19:55:ab:cb:a5:d6:8c:34:bd:6c:70:bb:be:9b:
c0:bd:81:8e:ae:d2:95:06:5e:e5:7f:8d:de:07:74:82:18:85:
39:ea:40:3d:64:b2:6a:f9:3e:7a:b1:ce:47:0d:42:8f:8f:9a:
cc:fe:74:7c:c7:e9:f5:a9:71:90:68:2d:01:51:ca:41:bc:9b:
89:ca:68:d8:3c:d0:d4:49:f5:ec:94:a3:77:d1:7f:dc:74:8d:
12:12:44:2e:c4:59:f4:97:2d:97:56:76:83:dd:4b:e6:f1:f2:
26:86:17:2a:7c:a8:bf:7a:dd:21:3c:20:42:32:ab:fd:82:a2:
67:1a:07:2b:96:e1:8f:7a:13:7b:b2:5c:80:cb:90:e7:28:3d:
0f:b4:c4:59:9a:df:7d:6f:a7:cb:40:8f:7c:65:b4:59:7a:67:
99:d8:87:00:9f:fb:51:58:08:8c:30:e0:d0:2d:e3:e7:91:da:
56:01:8a:75:d4:8c:54:6d:4d:a3:22:8a:00:2d:89:65:15:fa:
72:de:3d:b8:2a:43:3f:7b:b0:86:57:c0:e0:51:0a:d4:66:24:
0e:4f:c1:8f:4d:88:a3:90:b7:55:a6:9c:0b:70:22:fb:9c:1f:
83:8a:ba:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjMSqMgcKmgPvvI/ucwepnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUwODIxMTEwMTQwWhcNMjUwODIyMTEwMTQwWjAzMTEwLwYDVQQD
Eyg5M2E1OGM0ZjJjMjI1ODliNTdiODk1MDJiMTE4Mjc4OTA5Nzg1NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLkeGbxj2sKR00HZ5GFXMZfOgg9U
RwrNo4cr7QNORILtxcHgtRtPBn6bTVqLrg4sPnoCRtc/TJFq1JR4E0JHPDxd2R7g
UqLBfhjt+iuTcACDTaWvJDWSKXjBG0/ulCh7LBFULaD8tXkHrAAo76wbEZIcP5JX
8J+Ho/Kh33RG+zW/hXbRfzPkmc62VnS0gL8IzMPXLQyaWJ6L8zVv/ZBRzF5T3kEw
1STL/k96wYf9s0amNxXacA3KFVDlUGpBRjIi4CfKtNNHMxemE/oCnEDebljUykbl
XkKnfwO4yBH2FObdVR9lkjEWKYbv+lHTZSQ0GVXhepQTVuQUVdqK2fk66wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOljE8sIlibV7iVArEYJ4kJeFYVMB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX7oDXOv
Qk5w+M9Gv3fWL3RXt1B+9xlVq8ul1ow0vWxwu76bwL2Bjq7SlQZe5X+N3gd0ghiF
OepAPWSyavk+erHORw1Cj4+azP50fMfp9alxkGgtAVHKQbybicpo2DzQ1En17JSj
d9F/3HSNEhJELsRZ9Jctl1Z2g91L5vHyJoYXKnyov3rdITwgQjKr/YKiZxoHK5bh
j3oTe7JcgMuQ5yg9D7TEWZrffW+ny0CPfGW0WXpnmdiHAJ/7UVgIjDDg0C3j55Ha
VgGKddSMVG1NoyKKAC2JZRX6ct49uCpDP3uwhlfA4FEK1GYkDk/Bj02Io5C3Vaac
C3Ai+5wfg4q6lg==
-----END CERTIFICATE-----
Generated at Thu Aug 21 16:27:35 2025 by rpki-client