
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: 0xX3aZaGdcUr9Eh8Vg4xWNtrUXb292UljrfERZDI2KY=
Subject key identifier: 7D:2F:30:0B:54:22:C9:C7:6E:F6:17:C0:41:73:C6:42:1B:9B:46:36
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019A4FCFFC052641D706968DBAC6AAB0D920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 150E
Signing time: Tue 04 Nov 2025 17:00:21 +0000
Manifest this update: Tue 04 Nov 2025 17:00:21 +0000
Manifest next update: Wed 05 Nov 2025 17:00:21 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: jIA+p26otd4FCATs73TUPV2E1eraTxaEJ4sHFm1OqUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:fc:05:26:41:d7:06:96:8d:ba:c6:aa:b0:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Nov 4 17:00:21 2025 GMT
Not After : Nov 5 17:00:21 2025 GMT
Subject: CN=7d2f300b5422c9c76ef617c04173c6421b9b4636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:86:a0:96:ce:57:27:ae:95:52:38:de:3c:
32:58:de:41:1b:22:0a:ab:43:66:1c:c7:10:37:59:
3b:4a:5c:98:65:2d:b0:d0:8d:b0:86:1d:ab:2a:3d:
67:5b:0f:37:73:6b:9d:4e:93:3e:75:e4:84:ea:dd:
6c:20:07:a7:a6:c1:d5:ca:de:55:f7:83:2d:98:16:
ff:b1:b6:98:7d:84:94:25:9c:50:99:24:97:c9:25:
fe:d1:bf:f1:8b:5a:56:88:fe:81:f2:e6:74:6c:f1:
26:a2:94:d6:ab:c5:7f:dc:c6:bf:10:3d:87:98:9a:
30:86:32:54:68:f9:f9:fd:9c:3b:61:08:17:c7:8f:
3f:ff:67:9e:6d:f3:da:39:a0:89:01:ac:fc:62:7e:
af:8a:2f:43:51:87:98:d8:a5:09:5a:12:ad:5d:b2:
b6:40:a4:83:64:41:03:eb:5d:5f:34:d6:a2:6a:2d:
db:c9:46:c2:37:49:65:0f:9d:e5:e9:44:a9:05:2e:
9e:4e:a5:c7:44:ab:34:9f:6b:c2:30:66:77:dd:f6:
55:b7:0b:d8:b0:85:a5:82:96:2e:fc:41:80:b9:14:
d1:19:9b:3f:8c:41:6a:2a:30:c4:db:27:88:88:f8:
36:ca:10:c2:4d:a2:2b:36:61:81:9e:95:bb:96:30:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:30:0B:54:22:C9:C7:6E:F6:17:C0:41:73:C6:42:1B:9B:46:36
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:a4:da:5d:da:b3:4b:a2:85:67:15:39:e5:93:cd:12:5a:
63:ee:8a:e4:54:8d:3f:9f:bc:c6:b0:1f:81:6a:b4:08:d8:12:
67:36:e4:64:5d:82:0d:18:69:00:b6:00:55:53:f8:57:20:99:
1f:37:3b:02:f5:a5:3a:39:1a:28:bd:10:55:e5:b3:c3:02:14:
34:5e:98:a8:dc:11:80:58:04:ad:dd:c6:43:fd:77:42:51:81:
4f:51:c8:28:57:08:6c:78:be:43:08:72:01:92:b6:d5:84:6f:
da:2d:f7:38:05:b8:1a:90:cf:85:3e:c7:b7:2a:9e:80:d8:fe:
99:9b:43:01:84:0a:0f:b7:61:f0:03:4a:56:9f:6d:85:32:29:
9f:66:5a:47:40:11:c0:fb:a4:8e:a1:82:c6:3f:4e:71:4f:2b:
65:4e:12:fb:21:9f:72:c9:17:44:52:42:d1:45:f6:44:30:2f:
06:3b:09:fb:2e:1d:53:04:73:5c:ff:91:66:ff:f6:7b:3f:f7:
18:28:64:27:a3:f3:b0:ca:2c:1e:6c:d6:db:5a:c7:9f:f8:02:
9e:50:84:96:42:82:38:2a:2d:0e:c9:93:61:43:b2:43:f3:3c:
a9:00:a6:6c:94:0c:0c:28:6e:94:25:42:b1:e5:45:ee:43:d9:
37:cb:bb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz/wFJkHXBpaNusaqsNkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUxMTA0MTcwMDIxWhcNMjUxMTA1MTcwMDIxWjAzMTEwLwYDVQQD
Eyg3ZDJmMzAwYjU0MjJjOWM3NmVmNjE3YzA0MTczYzY0MjFiOWI0NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyyGoJbOVyeulVI43jwyWN5BGyIK
q0NmHMcQN1k7SlyYZS2w0I2whh2rKj1nWw83c2udTpM+deSE6t1sIAenpsHVyt5V
94MtmBb/sbaYfYSUJZxQmSSXySX+0b/xi1pWiP6B8uZ0bPEmopTWq8V/3Ma/ED2H
mJowhjJUaPn5/Zw7YQgXx48//2eebfPaOaCJAaz8Yn6vii9DUYeY2KUJWhKtXbK2
QKSDZEED611fNNaiai3byUbCN0llD53l6USpBS6eTqXHRKs0n2vCMGZ33fZVtwvY
sIWlgpYu/EGAuRTRGZs/jEFqKjDE2yeIiPg2yhDCTaIrNmGBnpW7ljCLVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0vMAtUIsnHbvYXwEFzxkIbm0Y2MB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgek2l3a
s0uihWcVOeWTzRJaY+6K5FSNP5+8xrAfgWq0CNgSZzbkZF2CDRhpALYAVVP4VyCZ
Hzc7AvWlOjkaKL0QVeWzwwIUNF6YqNwRgFgErd3GQ/13QlGBT1HIKFcIbHi+Qwhy
AZK21YRv2i33OAW4GpDPhT7HtyqegNj+mZtDAYQKD7dh8ANKVp9thTIpn2ZaR0AR
wPukjqGCxj9OcU8rZU4S+yGfcskXRFJC0UX2RDAvBjsJ+y4dUwRzXP+RZv/2ez/3
GChkJ6PzsMosHmzW21rHn/gCnlCElkKCOCotDsmTYUOyQ/M8qQCmbJQMDChulCVC
seVF7kPZN8u7QQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:46 2025 by rpki-client