Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: hUWw7L0CZ4mui77dWUEDL8fO1FFSwhFgGX5S4YDVdr0=
Subject key identifier: 40:49:BB:7C:A9:52:6A:6B:E5:22:97:D2:54:04:07:27:1A:05:24:63
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0197481E5CDE3CF77E9010A5D304BB88FA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 02:00:38 +0000
Manifest this update: Sat 07 Jun 2025 02:00:38 +0000
Manifest next update: Sun 08 Jun 2025 02:00:38 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: oQnRfldEJF/pv3qDue5ZHsN82in1+43+R4E08zkfxns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:5c:de:3c:f7:7e:90:10:a5:d3:04:bb:88:fa:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jun 7 02:00:38 2025 GMT
Not After : Jun 8 02:00:38 2025 GMT
Subject: CN=4049bb7ca9526a6be52297d2540407271a052463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:bb:d4:34:b8:fa:1f:80:9e:41:3c:2d:22:
29:fd:5f:4d:12:8d:b7:bd:8d:ba:5f:25:95:ae:6a:
a5:d9:70:e5:71:dd:10:62:cc:11:13:e3:15:10:0e:
3e:63:6c:03:5c:4d:90:37:83:e3:45:da:34:3f:7b:
ae:73:0e:6b:f1:79:61:50:2f:be:d5:7a:6b:77:61:
3b:f7:4f:c7:15:85:81:01:fe:2a:c0:13:9d:3c:3b:
06:bc:2a:62:d9:46:c4:82:5f:75:d4:86:0a:58:a5:
9c:ce:3a:75:cf:42:53:78:ce:d8:4d:cc:d4:cc:23:
0d:e3:6b:17:37:13:c6:fa:f5:27:69:ec:0f:5e:37:
09:37:bf:82:45:c1:a2:71:dd:83:0e:45:38:84:39:
76:0c:47:9e:bb:67:22:d2:94:ec:23:ec:00:be:40:
44:df:da:7d:7b:0d:11:8d:8b:ea:ba:71:8e:44:02:
f9:79:37:7f:f9:3f:97:55:42:1f:b9:52:a0:84:6e:
5a:7c:2f:06:e3:74:0e:4b:38:29:1f:74:3b:cd:66:
c9:c5:77:86:3a:8b:79:c6:17:0a:dd:57:dd:2a:19:
47:de:e9:fc:1e:f9:e9:ae:fa:b3:72:82:1b:4b:ed:
af:8b:10:31:6b:47:5f:5d:9c:d6:c7:df:0e:4e:30:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:BB:7C:A9:52:6A:6B:E5:22:97:D2:54:04:07:27:1A:05:24:63
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ca:04:ed:ca:06:1f:da:7c:2d:73:62:c0:a0:b4:b2:bd:1d:
17:b4:aa:dc:57:69:df:7b:a9:de:b5:53:39:16:6f:7d:0a:25:
da:65:8f:fa:24:ad:15:fc:1f:47:b0:52:28:bf:1c:3e:f7:58:
42:a9:97:87:4c:d3:b8:ce:41:6a:26:76:88:91:af:9a:a0:19:
b1:38:47:00:9e:fe:b9:f9:40:b6:28:4c:f1:7b:9f:fc:7a:cb:
c4:92:aa:5e:ab:ea:40:fe:ab:d8:06:76:28:f3:6a:7e:a2:c2:
3d:3c:05:dc:ea:60:7d:29:59:c4:7d:61:3c:fb:04:4b:21:16:
6f:97:67:13:8c:00:03:dc:1b:e3:e8:c6:08:f6:73:b0:91:b7:
ab:ed:df:0e:db:7e:be:17:6b:81:30:02:4a:d4:d9:9c:ff:c6:
4a:1f:bf:be:36:e9:ff:51:93:89:11:ab:32:5a:18:6a:6b:aa:
87:bd:2e:94:71:4e:f1:42:93:37:56:7a:ae:ed:a2:2d:b4:a4:
76:59:af:d2:51:5b:69:a6:6e:bc:c6:fe:4b:84:6a:44:79:3a:
3d:b0:6e:ca:14:f6:0c:c8:2c:ba:37:81:1d:c4:fe:b6:1b:5a:
f1:26:1f:ba:fe:71:03:ca:25:70:29:d1:d5:c7:6b:bc:ce:18:
41:89:d8:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHlzePPd+kBCl0wS7iPocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUwNjA3MDIwMDM4WhcNMjUwNjA4MDIwMDM4WjAzMTEwLwYDVQQD
Eyg0MDQ5YmI3Y2E5NTI2YTZiZTUyMjk3ZDI1NDA0MDcyNzFhMDUyNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTK71DS4+h+AnkE8LSIp/V9NEo23
vY26XyWVrmql2XDlcd0QYswRE+MVEA4+Y2wDXE2QN4PjRdo0P3uucw5r8XlhUC++
1Xprd2E790/HFYWBAf4qwBOdPDsGvCpi2UbEgl911IYKWKWczjp1z0JTeM7YTczU
zCMN42sXNxPG+vUnaewPXjcJN7+CRcGicd2DDkU4hDl2DEeeu2ci0pTsI+wAvkBE
39p9ew0RjYvqunGORAL5eTd/+T+XVUIfuVKghG5afC8G43QOSzgpH3Q7zWbJxXeG
Oot5xhcK3VfdKhlH3un8HvnprvqzcoIbS+2vixAxa0dfXZzWx98OTjBwiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBJu3ypUmpr5SKX0lQEBycaBSRjMB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMoE7coG
H9p8LXNiwKC0sr0dF7Sq3Fdp33up3rVTORZvfQol2mWP+iStFfwfR7BSKL8cPvdY
QqmXh0zTuM5BaiZ2iJGvmqAZsThHAJ7+uflAtihM8Xuf/HrLxJKqXqvqQP6r2AZ2
KPNqfqLCPTwF3OpgfSlZxH1hPPsESyEWb5dnE4wAA9wb4+jGCPZzsJG3q+3fDtt+
vhdrgTACStTZnP/GSh+/vjbp/1GTiRGrMloYamuqh70ulHFO8UKTN1Z6ru2iLbSk
dlmv0lFbaaZuvMb+S4RqRHk6PbBuyhT2DMgsujeBHcT+thta8SYfuv5xA8olcCnR
1cdrvM4YQYnYAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:07 2025 by rpki-client