Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier: PkFeSx4THRZ0dD0+fvapuJLrtCsBcW1IAhCSQYoRMFs=
Subject key identifier: 70:85:B6:F6:EF:9E:47:43:04:69:6A:A9:EE:84:7D:F9:E7:56:AF:43
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial: 019A348FBB6DA0D0F2E15F8701E20F5C5E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number: 0A32
Signing time: Thu 30 Oct 2025 10:00:25 +0000
Manifest this update: Thu 30 Oct 2025 10:00:25 +0000
Manifest next update: Fri 31 Oct 2025 10:00:25 +0000
Files and hashes: 1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=)
2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: 60P0iCI95ZN3EIKFXdj/Ab2T7p8CI6nwn1CXs6WcU/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:8f:bb:6d:a0:d0:f2:e1:5f:87:01:e2:0f:5c:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Validity
Not Before: Oct 30 10:00:25 2025 GMT
Not After : Oct 31 10:00:25 2025 GMT
Subject: CN=7085b6f6ef9e474304696aa9ee847df9e756af43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:e6:89:69:da:7a:ff:83:ff:7d:70:dc:1f:
f8:59:37:a9:25:51:bd:ba:5e:1e:94:9f:cb:2e:b2:
97:99:bf:ce:59:ab:2a:21:41:40:be:e8:dc:e4:18:
ea:19:11:e7:1d:9e:69:8f:11:a5:46:e0:f5:7f:c8:
83:1f:e9:79:97:02:03:d4:9a:e8:65:e3:31:d7:61:
1f:57:19:7b:ea:ce:b5:59:48:56:42:de:2a:63:0a:
d0:8a:7f:2c:9c:39:8f:7d:aa:f6:e1:33:72:c2:43:
5f:e4:22:76:6d:4b:d1:e2:59:3f:ab:69:37:bb:dd:
ac:d4:e4:da:62:fb:d4:f0:88:15:af:0a:f6:fc:2a:
7c:f2:86:a3:35:d2:80:c4:c6:46:90:1d:49:ab:0d:
5d:bc:28:f2:26:d0:99:05:1f:5d:98:5b:79:ff:0d:
d5:58:c4:2a:74:da:b5:f5:3c:ff:b3:ff:3f:8c:4c:
50:4d:3e:b9:1c:1e:f0:21:11:31:44:1b:43:6b:3a:
8b:8c:67:91:aa:11:69:65:0e:97:a3:2c:9a:04:9e:
78:55:c1:e0:63:d0:7b:1f:cd:4c:6b:fc:1e:32:25:
41:fa:ac:63:70:82:1d:dd:65:45:2a:01:cc:a5:f1:
2d:2a:d1:a9:06:a7:5b:3e:76:99:23:cf:fe:26:22:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:B6:F6:EF:9E:47:43:04:69:6A:A9:EE:84:7D:F9:E7:56:AF:43
X509v3 Authority Key Identifier:
keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:63:a3:18:5f:97:4a:c2:01:d4:75:03:52:99:03:31:a9:c6:
d3:7f:db:89:d1:06:e9:87:a9:fe:fd:a6:55:81:c5:73:af:7a:
1c:72:59:6d:fe:b7:94:27:6e:31:f6:81:3f:96:4b:f6:9b:08:
7f:ab:3b:bf:b3:b5:ea:17:a6:e6:46:80:ca:d7:d9:9a:f9:69:
8a:5a:38:c3:65:bd:e7:a4:8b:2a:86:f1:3e:b2:f0:f2:c5:57:
70:25:ab:b9:12:68:4f:aa:8f:34:cc:f4:b5:4e:4d:eb:a9:7c:
9d:00:fd:e5:e0:eb:d3:75:26:34:76:26:2b:e6:57:23:cf:17:
4a:29:71:81:cc:0a:cf:55:60:f0:6e:f3:b7:dd:e8:f8:3c:32:
2e:96:a0:d3:04:a6:50:66:af:76:e2:43:89:88:38:08:61:a1:
c2:b5:ed:1d:26:5f:3b:78:af:3f:6b:0a:ed:85:bd:2c:8d:9a:
94:f6:92:86:a4:47:dc:ad:40:e9:13:c6:94:3e:19:a7:9c:b1:
b6:2d:da:da:c9:89:7d:10:9f:a2:ea:df:0d:b1:14:2a:7e:e1:
0c:49:8b:61:b2:ff:84:c6:00:53:e4:e6:1f:ad:b5:f3:2e:9f:
88:cc:95:0d:c3:a2:e4:cc:da:18:12:e4:2b:83:ab:40:5d:17:
52:fc:28:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo0j7ttoNDy4V+HAeIPXF4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0
OTNiZTUwHhcNMjUxMDMwMTAwMDI1WhcNMjUxMDMxMTAwMDI1WjAzMTEwLwYDVQQD
Eyg3MDg1YjZmNmVmOWU0NzQzMDQ2OTZhYTllZTg0N2RmOWU3NTZhZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO3miWnaev+D/31w3B/4WTepJVG9
ul4elJ/LLrKXmb/OWasqIUFAvujc5BjqGRHnHZ5pjxGlRuD1f8iDH+l5lwID1Jro
ZeMx12EfVxl76s61WUhWQt4qYwrQin8snDmPfar24TNywkNf5CJ2bUvR4lk/q2k3
u92s1OTaYvvU8IgVrwr2/Cp88oajNdKAxMZGkB1Jqw1dvCjyJtCZBR9dmFt5/w3V
WMQqdNq19Tz/s/8/jExQTT65HB7wIRExRBtDazqLjGeRqhFpZQ6XoyyaBJ54VcHg
Y9B7H81Ma/weMiVB+qxjcIId3WVFKgHMpfEtKtGpBqdbPnaZI8/+JiJ4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCFtvbvnkdDBGlqqe6EffnnVq9DMB8GA1UdIwQY
MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt
MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3
LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGOjGF+X
SsIB1HUDUpkDManG03/bidEG6Yep/v2mVYHFc696HHJZbf63lCduMfaBP5ZL9psI
f6s7v7O16hem5kaAytfZmvlpilo4w2W956SLKobxPrLw8sVXcCWruRJoT6qPNMz0
tU5N66l8nQD95eDr03UmNHYmK+ZXI88XSilxgcwKz1Vg8G7zt93o+DwyLpag0wSm
UGavduJDiYg4CGGhwrXtHSZfO3ivP2sK7YW9LI2alPaShqRH3K1A6RPGlD4Zp5yx
ti3a2smJfRCfourfDbEUKn7hDEmLYbL/hMYAU+TmH6218y6fiMyVDcOi5MzaGBLk
K4OrQF0XUvwokA==
-----END CERTIFICATE-----
Generated at Thu Oct 30 14:59:06 2025 by rpki-client