Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
File: ve-KitAHqk3IHXc2GJoYKwKCvBg.mft (raw, json)
Hash identifier: ivoanie03fEyrJvIw1Ny1b0rLWoMPDMoyFrb15akJ/E=
Subject key identifier: 5C:32:E3:04:58:D3:B0:89:61:C3:BE:94:FD:59:4C:69:C4:09:BA:75
Authority key identifier: BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
Certificate issuer: /CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Certificate serial: 0199172D2793326BD201CE36D5BA4F60E73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
Manifest number: 10F3
Signing time: Fri 05 Sep 2025 00:00:59 +0000
Manifest this update: Fri 05 Sep 2025 00:00:59 +0000
Manifest next update: Sat 06 Sep 2025 00:00:59 +0000
Files and hashes: 1: ISEq5Jc3mcHJhz4aDH-xuHtSZiA.roa (hash: 5V3F3veSNqjElcaO54NDNwqMbaaLZDnx9QHLI0mjLV0=)
2: ve-KitAHqk3IHXc2GJoYKwKCvBg.crl (hash: NXi+EgdfD/36pLTyw/ouEwR4aJH8rUnHGLG7QgxdNjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:27:93:32:6b:d2:01:ce:36:d5:ba:4f:60:e7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdef8a8ad007aa4dc81d7736189a182b0282bc18
Validity
Not Before: Sep 5 00:00:59 2025 GMT
Not After : Sep 6 00:00:59 2025 GMT
Subject: CN=5c32e30458d3b08961c3be94fd594c69c409ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:08:ed:e8:17:be:c4:d1:01:e0:ee:01:64:
f5:ad:cc:6e:47:2c:8c:73:8b:7c:1e:75:da:28:f4:
e4:2a:23:e7:0a:ce:4a:7d:99:86:2b:ea:4d:e0:99:
c2:87:49:74:a9:6c:14:f2:9e:94:01:74:48:c4:50:
3d:a8:fa:14:75:41:4d:62:67:cc:96:c1:e6:09:4f:
a0:62:98:03:61:8b:48:f5:98:aa:01:b1:d4:7e:ba:
b6:f9:16:f5:fd:c7:1c:09:c0:27:2c:06:e7:ab:53:
5f:25:fa:67:6b:80:21:8a:ee:ee:89:f1:cd:6e:f1:
0a:39:c7:8d:78:9d:cc:15:6b:1d:e2:71:3d:5c:be:
7d:c6:8f:9e:a9:ac:2d:8f:a6:9e:0c:42:ff:84:06:
91:d7:b2:68:ca:09:a2:33:32:a9:16:45:d1:7f:ee:
a0:da:f5:16:ff:4c:01:5a:0a:16:fb:0b:f1:11:94:
f5:89:0d:07:37:f7:5f:ea:9f:c3:2f:0f:9a:e1:68:
94:4c:0b:7b:a1:c6:4f:b4:18:5b:00:8c:86:13:c5:
08:18:15:1f:ce:e5:51:6b:4c:26:ae:11:4c:91:8f:
f4:3b:04:c0:56:01:12:2c:7a:28:df:9a:e8:3a:22:
95:8f:96:5b:93:67:2c:14:b3:98:b0:41:1d:ce:93:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:E3:04:58:D3:B0:89:61:C3:BE:94:FD:59:4C:69:C4:09:BA:75
X509v3 Authority Key Identifier:
keyid:BD:EF:8A:8A:D0:07:AA:4D:C8:1D:77:36:18:9A:18:2B:02:82:BC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ve-KitAHqk3IHXc2GJoYKwKCvBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/955340-f801-41a7-a9d4-01b7e262eff1/1/ve-KitAHqk3IHXc2GJoYKwKCvBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9c:e4:4b:d3:75:0d:8a:94:21:aa:ab:ca:60:bd:7b:ae:7c:
04:92:c3:94:4a:8a:1e:cc:97:a6:6a:c9:99:e2:ea:2b:61:25:
a4:27:c4:b3:1d:7a:a8:46:a3:ea:d8:99:fc:45:0a:e7:c7:7f:
0d:51:fa:d4:a6:bd:d8:11:bd:51:75:b2:a5:5f:21:70:a1:1c:
9d:93:0c:70:a3:96:d0:71:ac:2c:20:f5:db:0a:ea:8d:5e:cb:
8a:41:24:5e:28:f5:a1:bb:10:db:33:ff:5a:a6:53:37:02:9d:
6a:fe:3b:59:a3:da:ff:77:ae:16:c4:10:e5:42:f3:33:82:b2:
43:74:0e:89:ad:d6:8e:d2:8e:b0:d6:fc:c6:f5:4a:5b:d8:b6:
f6:d2:43:3f:53:37:e6:94:39:6e:f8:b2:88:80:21:61:a7:d2:
57:e9:68:5e:b6:7d:d8:dd:b6:18:62:d5:19:35:a7:66:ef:05:
b8:d8:66:29:7a:f8:26:f3:02:db:94:e4:ec:e7:18:89:3c:b1:
08:00:e4:79:30:0e:83:23:7c:ab:9c:37:d5:ff:18:24:f3:80:
1c:c4:02:de:8b:30:05:0c:f3:14:fd:04:18:9c:81:73:d4:52:
b4:d1:90:2d:9a:90:7a:56:a4:02:76:d0:85:f0:35:90:d7:2e:
15:44:5d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLSeTMmvSAc421bpPYOc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZWY4YThhZDAwN2FhNGRjODFkNzczNjE4OWExODJiMDI4
MmJjMTgwHhcNMjUwOTA1MDAwMDU5WhcNMjUwOTA2MDAwMDU5WjAzMTEwLwYDVQQD
Eyg1YzMyZTMwNDU4ZDNiMDg5NjFjM2JlOTRmZDU5NGM2OWM0MDliYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8I7egXvsTRAeDuAWT1rcxuRyyM
c4t8HnXaKPTkKiPnCs5KfZmGK+pN4JnCh0l0qWwU8p6UAXRIxFA9qPoUdUFNYmfM
lsHmCU+gYpgDYYtI9ZiqAbHUfrq2+Rb1/cccCcAnLAbnq1NfJfpna4Ahiu7uifHN
bvEKOceNeJ3MFWsd4nE9XL59xo+eqawtj6aeDEL/hAaR17JoygmiMzKpFkXRf+6g
2vUW/0wBWgoW+wvxEZT1iQ0HN/df6p/DLw+a4WiUTAt7ocZPtBhbAIyGE8UIGBUf
zuVRa0wmrhFMkY/0OwTAVgESLHoo35roOiKVj5Zbk2csFLOYsEEdzpO/JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwy4wRY07CJYcO+lP1ZTGnECbp1MB8GA1UdIwQY
MBaAFL3viorQB6pNyB13NhiaGCsCgrwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQt
MDFiN2UyNjJlZmYxLzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NTUzNDAtZjgwMS00MWE3LWE5ZDQtMDFiN2UyNjJlZmYx
LzEvdmUtS2l0QUhxazNJSFhjMkdKb1lLd0tDdkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJzkS9N1
DYqUIaqrymC9e658BJLDlEqKHsyXpmrJmeLqK2ElpCfEsx16qEaj6tiZ/EUK58d/
DVH61Ka92BG9UXWypV8hcKEcnZMMcKOW0HGsLCD12wrqjV7LikEkXij1obsQ2zP/
WqZTNwKdav47WaPa/3euFsQQ5ULzM4KyQ3QOia3WjtKOsNb8xvVKW9i29tJDP1M3
5pQ5bviyiIAhYafSV+loXrZ92N22GGLVGTWnZu8FuNhmKXr4JvMC25Tk7OcYiTyx
CADkeTAOgyN8q5w31f8YJPOAHMQC3oswBQzzFP0EGJyBc9RStNGQLZqQelakAnbQ
hfA1kNcuFURduw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:31:13 2025 by rpki-client