Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: oKZO/OBU3iL76aS46B9wdLbiCflfPYAeumT4m47ypI8=
Subject key identifier: 9A:1F:A5:40:D4:B7:1F:3B:48:00:CC:FF:09:36:8B:17:59:C0:BD:F6
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019A7338618B1AE4FE127ED55992775CB10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: T039XzQnApHvV+1MUfPHRqo0B+vkHT/ElA/71+srI4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:61:8b:1a:e4:fe:12:7e:d5:59:92:77:5c:b1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=9a1fa540d4b71f3b4800ccff09368b1759c0bdf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:49:c2:9d:ce:9f:88:2d:74:f4:d1:47:2c:
84:f5:07:79:6d:2a:76:bd:7d:aa:74:3b:3d:4a:83:
30:bb:85:ee:85:af:8c:ff:34:65:3e:1c:66:1a:a5:
77:21:44:95:44:69:5d:03:b8:46:40:6d:f6:43:92:
82:ba:bb:9f:0f:ce:55:54:db:48:09:0a:37:04:c3:
dc:c2:8e:40:a4:78:6e:fd:05:2c:35:27:e5:18:e7:
cc:02:3e:d9:30:69:cd:77:c2:02:dc:98:ea:65:46:
24:36:42:37:2c:96:9d:40:67:99:da:33:51:44:de:
b6:2e:8c:fa:d5:c1:b2:a8:da:6c:53:fb:83:91:f2:
d6:3f:3d:60:fc:09:14:d8:da:02:74:3c:9b:0a:02:
a2:80:ea:48:22:c8:c7:d8:ee:f7:41:91:71:28:38:
f9:a1:4b:48:84:20:e8:b6:ca:65:42:28:6a:42:69:
05:7a:bd:93:5f:2a:6b:8f:df:ba:31:f4:87:9b:1c:
1b:07:22:18:d8:0e:bc:40:29:c0:9d:bc:d7:6e:1a:
c3:1d:42:d2:0a:71:24:44:14:a0:45:1a:c9:8d:b8:
ee:a0:7a:ef:b3:73:03:88:d1:26:3d:69:ea:df:48:
52:a9:63:1a:bb:a0:d8:d8:98:b1:f4:c8:ed:67:94:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:A5:40:D4:B7:1F:3B:48:00:CC:FF:09:36:8B:17:59:C0:BD:F6
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:fb:b9:4d:d0:8c:88:b6:02:49:c1:59:76:03:fa:22:ee:
f9:84:d5:bb:87:c2:91:07:19:32:71:9b:98:80:a6:21:77:e0:
ce:9a:f9:dd:a1:38:48:39:7e:37:5b:55:8b:1e:b1:23:04:83:
4e:a6:01:62:65:31:d4:03:ef:23:96:bc:80:fc:5c:b2:87:08:
9e:a6:7d:26:b7:6b:6c:b1:89:f0:f5:52:ef:d2:d8:e6:79:0a:
9a:90:02:2b:cc:41:5e:8c:60:38:f4:04:00:c1:bc:a1:29:78:
61:ef:c5:4a:09:dc:ee:4b:39:c8:be:ff:49:a4:8c:34:1c:2b:
ba:73:b4:3b:b1:a5:b2:22:0e:44:bd:80:69:a5:b8:91:58:42:
22:e6:bd:d5:77:93:c3:61:ac:b4:a0:32:19:12:0a:03:e9:c1:
06:a7:56:48:19:f7:f0:65:20:a8:3b:3f:30:09:9a:ff:e7:b0:
f9:01:c8:f6:64:d1:b8:11:d6:bc:1f:d8:bb:80:27:93:93:5b:
bd:02:74:6b:f3:63:2d:6a:7d:d3:1c:c1:8f:4c:37:0f:74:18:
c8:78:72:d0:4a:02:ba:69:8c:7c:80:38:2d:c4:af:d7:d4:fc:
4d:f5:b3:1d:d7:72:2f:d2:7a:af:4e:d4:5e:06:7a:ed:6b:4b:
5b:c5:26:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:35 2025 by rpki-client