Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: QRtkpigDDw7UuUPenslZWlaD+bfBg5WytjLwdhgtvyo=
Subject key identifier: 76:4F:98:1B:56:EF:FD:A7:5F:0B:88:2A:08:BA:6E:6C:C5:97:A8:DB
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 019A722632EEC623B6B5EEBE3A1B4DBA31CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0E17
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: bjqby1nzPz2vjDJcx/1Cb8vtMD/oJLXf9ScalDTbuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:32:ee:c6:23:b6:b5:ee:be:3a:1b:4d:ba:31:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=764f981b56effda75f0b882a08ba6e6cc597a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:c6:8a:61:f0:90:25:25:59:5c:41:63:f2:
b3:3f:43:1f:e7:b7:00:5e:54:dc:ba:dd:0a:49:79:
52:bb:f6:ad:77:78:2f:29:1a:67:e9:0d:88:cb:a5:
1c:a6:3e:37:50:3d:ba:f4:f9:67:52:18:fb:5a:fc:
a2:cd:72:62:64:d3:3a:40:ae:32:ba:e6:b5:30:b7:
c8:0e:4f:52:b9:77:a5:ec:1c:5c:6c:9c:d4:55:0e:
fd:cd:21:e5:22:0b:ed:36:2e:e0:50:90:d4:b2:c1:
16:54:fb:e5:e6:00:7c:4d:c7:5c:82:9c:0e:39:f3:
39:eb:b5:cb:cf:2d:37:e1:2d:86:bd:ae:95:cf:1a:
fd:b3:23:02:be:89:32:87:78:e5:8c:4c:88:1a:5e:
5b:35:ce:19:02:36:58:ea:70:8a:c1:be:bf:06:45:
1e:2c:01:38:9c:06:ab:90:55:e0:0f:3e:07:bc:ee:
13:59:42:16:02:31:32:29:24:fb:bc:2e:a8:b8:9b:
8f:81:4a:fc:66:59:a7:e1:f5:ef:37:75:16:ae:d3:
d5:06:51:45:bd:e0:92:b0:46:62:16:97:1a:b0:23:
20:30:13:62:b6:0e:85:4c:2e:33:12:8c:bc:65:d5:
8b:58:03:e9:3f:0c:42:c7:de:c8:8d:d9:a5:80:bd:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:98:1B:56:EF:FD:A7:5F:0B:88:2A:08:BA:6E:6C:C5:97:A8:DB
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:cc:ed:cd:d6:d0:b0:8e:fa:51:f8:4a:23:a7:46:ea:3c:
38:a9:1e:f0:51:d9:57:c4:06:63:80:de:75:eb:7b:68:df:1a:
d4:a4:ad:a8:c3:77:7c:57:64:ee:a1:81:53:b7:fa:b1:75:98:
95:10:96:fe:46:47:80:36:17:2d:46:57:7b:81:59:48:6e:de:
e5:d6:b5:88:86:f0:0d:c1:b8:fa:66:d0:4b:55:b9:9d:d3:c7:
6d:d3:d9:f4:f1:35:54:69:db:17:e9:1e:e1:c6:52:70:47:38:
cc:70:57:00:29:73:9d:6c:2a:0b:c5:57:92:9e:25:99:e6:1b:
b6:9c:7f:80:e9:03:95:37:f3:50:1c:19:da:3d:e5:3f:33:d5:
6c:b3:97:06:c4:52:3b:5d:ca:5e:93:e9:1f:db:ae:62:7f:3d:
86:2c:65:ba:00:ed:a7:26:ef:b5:96:d6:68:67:66:95:e4:0e:
50:43:27:2b:46:12:0f:29:d0:d7:39:78:c6:81:48:44:b8:79:
4c:1a:19:9e:d3:4c:a5:d0:23:a2:e2:e1:60:e4:c4:ef:b5:ad:
89:2a:65:b9:29:5e:8f:c8:1d:f5:bd:1f:f7:6d:6b:98:ae:63:
76:dc:e2:33:b6:4a:87:fb:53:69:aa:c0:cd:64:91:b4:83:0d:
55:7f:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:26 2025 by rpki-client