Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: QNvkCrPI34+aO2wkSteyJax4w1Y2xv6T/bB4NyiwEC4=
Subject key identifier: E7:9B:C0:44:98:C5:1E:39:CC:33:32:83:DA:F5:A3:82:66:2E:A6:A7
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 019A72CA37A077D48723AD4C5C7A562FBD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 11A7
Signing time: Tue 11 Nov 2025 12:00:46 +0000
Manifest this update: Tue 11 Nov 2025 12:00:46 +0000
Manifest next update: Wed 12 Nov 2025 12:00:46 +0000
Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: AVMfgsBgbysUexDcTMjeb8lEaMIRxoc8h+7uMnN0rvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:37:a0:77:d4:87:23:ad:4c:5c:7a:56:2f:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Nov 11 12:00:46 2025 GMT
Not After : Nov 12 12:00:46 2025 GMT
Subject: CN=e79bc04498c51e39cc333283daf5a382662ea6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:e9:9a:2b:87:71:39:ad:5f:8b:4f:18:9e:
44:bd:0b:1d:60:cd:3d:f2:1b:f1:85:af:2a:70:26:
64:37:62:d6:be:95:86:2b:18:28:3e:77:b1:43:fd:
e6:9f:dc:bb:d9:e0:cf:9b:2e:fe:1a:4a:c8:2c:37:
a5:ae:60:c7:e7:c4:72:03:32:a0:59:55:e0:30:75:
cb:fe:9e:75:7a:78:43:11:fb:07:47:a9:92:a5:a1:
1a:ab:9c:dd:50:14:5c:7a:4c:9e:16:38:a4:36:17:
68:80:c5:69:fc:25:e1:f6:a4:b2:52:a2:b2:61:9c:
c9:f5:91:f3:31:89:28:aa:d1:13:70:69:66:0f:36:
e7:e0:0e:ae:f2:a1:35:69:2c:a7:98:3c:29:c8:9a:
7c:86:10:51:00:72:80:9f:46:1f:93:fa:a2:62:88:
71:30:1f:46:8a:98:d3:ab:22:fc:e4:aa:04:d8:f8:
68:83:a1:59:6a:03:a6:96:cf:ba:45:78:f3:c5:33:
2b:d1:6a:79:6d:b7:e7:51:a4:ee:8d:23:71:29:47:
2e:e6:7d:f7:55:69:aa:06:80:c1:cf:eb:a7:9a:4b:
ce:9e:38:e5:f6:1f:e5:3a:1c:8c:6a:c7:9a:19:24:
0d:d6:39:ca:22:64:c1:78:ba:0d:03:76:60:ab:ac:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9B:C0:44:98:C5:1E:39:CC:33:32:83:DA:F5:A3:82:66:2E:A6:A7
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0d:7c:e8:3b:6e:59:c6:26:3a:05:61:99:ba:f0:c6:88:ff:
de:d5:5c:16:4b:1a:31:d6:e8:1f:7b:78:ff:41:93:6e:93:5f:
56:5a:cb:27:52:13:62:b9:d7:a8:c9:a9:56:fd:6b:47:80:53:
b8:17:b8:16:39:5a:2d:1a:1e:70:42:7a:43:45:e8:8e:ba:83:
0f:9a:df:c4:14:42:a4:1c:68:6c:85:5b:1b:6c:34:1b:11:15:
72:85:81:94:a0:72:d0:87:a9:c1:06:54:3e:92:19:b8:b9:42:
0b:8e:98:ad:37:be:b1:70:87:10:9d:cd:9a:12:c9:17:07:c2:
14:7d:f7:59:9d:da:5a:cc:29:ea:16:d3:2e:40:79:17:41:ae:
99:92:e9:a8:ab:dc:a2:b5:f1:9b:f8:c1:4e:ee:b5:19:16:8c:
5c:60:e1:ee:d6:34:5c:31:4d:0b:e7:6e:8b:9c:e0:7d:66:1c:
f1:83:7f:66:d3:c1:2b:bc:86:a2:75:5a:9b:de:4a:29:a1:c1:
fa:55:e4:b1:f0:c1:49:2c:87:4e:9d:ae:84:16:54:ff:22:1a:
8f:f1:34:ce:3c:02:16:08:21:57:60:0b:f7:ae:15:50:f1:9f:
a4:8b:54:b0:63:17:04:65:47:da:40:5a:e0:16:f4:97:b6:ab:
34:4d:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:26 2025 by rpki-client