
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: 32dbnObsxB0nuA097VlCRf0z3wyRKzm48BtnC3f/qEQ=
Subject key identifier: F1:17:07:3B:9F:BC:69:7F:9C:D0:F9:E2:2A:0A:D8:D8:73:2B:75:E1
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 01988242E5E3CDF75001A99EB7F41888EF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 141F
Signing time: Thu 07 Aug 2025 02:01:18 +0000
Manifest this update: Thu 07 Aug 2025 02:01:18 +0000
Manifest next update: Fri 08 Aug 2025 02:01:18 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: ubQAyZLOi/VZxOSSax+Xz7n3nyqencDLe8a/vi/1uaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:e5:e3:cd:f7:50:01:a9:9e:b7:f4:18:88:ef:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Aug 7 02:01:18 2025 GMT
Not After : Aug 8 02:01:18 2025 GMT
Subject: CN=f117073b9fbc697f9cd0f9e22a0ad8d8732b75e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:52:e2:86:a9:84:f8:aa:f2:e2:1f:af:a1:
31:a8:91:28:72:dd:d0:a5:b2:64:f9:66:e0:52:fd:
b4:65:79:63:33:f9:11:de:13:11:c9:96:e8:6b:27:
c3:b2:8c:37:06:22:6e:a4:88:16:18:35:fd:c7:33:
bb:e6:9c:07:7a:e5:5f:67:b5:89:56:62:5c:b6:e3:
b7:39:16:21:5f:5d:e2:c7:3f:f1:a5:fb:bf:c5:66:
1a:66:ac:27:5d:d7:79:42:0e:9f:54:b3:45:0f:8f:
0f:2d:5c:1d:ac:01:9e:1c:66:b3:35:a6:ab:21:2c:
01:28:bd:75:3f:1b:60:14:8b:b6:85:a9:e2:2d:2b:
a9:7d:e6:88:48:2c:45:b7:b7:6e:cb:ff:ab:25:5f:
c3:43:80:60:c0:f7:31:f5:8a:20:f7:8d:58:fb:2d:
7d:3f:c7:a3:f3:3f:39:80:b5:58:cd:1f:df:64:31:
84:16:63:37:6e:2b:29:60:6a:0a:2f:53:1d:ef:b7:
d9:1d:35:9b:df:bb:91:fa:29:db:7e:c6:26:32:fc:
4b:16:c6:00:90:74:c9:19:af:c7:5f:92:2b:28:20:
e0:be:dd:35:7b:ac:7c:a2:6a:28:c5:98:7b:5a:b6:
c5:eb:4d:4c:23:9d:8c:ee:3f:e6:7f:ae:07:81:bf:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:07:3B:9F:BC:69:7F:9C:D0:F9:E2:2A:0A:D8:D8:73:2B:75:E1
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:15:5d:16:b2:9d:d7:be:53:75:b0:94:4f:46:ab:a7:b9:19:
e4:51:6a:19:77:34:54:da:90:38:4f:93:b8:0f:31:e3:09:d6:
06:c8:d8:c7:a2:bd:9b:04:23:27:8a:c9:51:65:bb:4a:cb:51:
84:11:79:c1:42:74:a6:88:53:6d:1f:24:f9:01:02:21:b9:e6:
da:43:4c:20:cd:ea:db:d2:3b:f6:ca:1a:e1:98:a4:28:f4:97:
25:d7:f7:20:c4:f4:3f:56:db:da:21:3d:d5:29:e6:2d:a7:24:
74:59:00:09:db:1e:a5:10:f9:7d:1b:6e:db:55:95:94:de:99:
d4:68:e4:0d:d3:ab:95:2f:86:ea:a0:ee:08:94:9a:ae:b7:bc:
6c:1a:23:d6:12:e3:46:c9:d2:25:13:46:91:a8:d4:b4:d7:6c:
b2:34:03:1e:65:b4:20:fd:39:63:d4:05:a7:87:9a:52:42:72:
48:2d:7a:5a:1e:79:a0:a3:6a:7b:09:ef:b5:e4:d2:17:a0:bd:
00:51:4c:0e:a5:69:47:ea:c7:dd:86:c6:e5:b4:c4:26:fc:d8:
8f:f9:67:06:56:f9:c2:f2:5a:09:cf:a6:b0:63:71:d7:10:3f:
1f:ec:14:48:7b:61:4b:35:3c:9a:fc:f1:20:97:84:e3:60:34:
e0:70:f3:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQuXjzfdQAamet/QYiO9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUwODA3MDIwMTE4WhcNMjUwODA4MDIwMTE4WjAzMTEwLwYDVQQD
EyhmMTE3MDczYjlmYmM2OTdmOWNkMGY5ZTIyYTBhZDhkODczMmI3NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwJS4oaphPiq8uIfr6ExqJEoct3Q
pbJk+WbgUv20ZXljM/kR3hMRyZboayfDsow3BiJupIgWGDX9xzO75pwHeuVfZ7WJ
VmJctuO3ORYhX13ixz/xpfu/xWYaZqwnXdd5Qg6fVLNFD48PLVwdrAGeHGazNaar
ISwBKL11PxtgFIu2haniLSupfeaISCxFt7duy/+rJV/DQ4BgwPcx9Yog941Y+y19
P8ej8z85gLVYzR/fZDGEFmM3bispYGoKL1Md77fZHTWb37uR+inbfsYmMvxLFsYA
kHTJGa/HX5IrKCDgvt01e6x8omooxZh7WrbF601MI52M7j/mf64Hgb8EnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEXBzufvGl/nND54ioK2NhzK3XhMB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRVdFrKd
175TdbCUT0arp7kZ5FFqGXc0VNqQOE+TuA8x4wnWBsjYx6K9mwQjJ4rJUWW7SstR
hBF5wUJ0pohTbR8k+QECIbnm2kNMIM3q29I79soa4ZikKPSXJdf3IMT0P1bb2iE9
1SnmLackdFkACdsepRD5fRtu21WVlN6Z1GjkDdOrlS+G6qDuCJSarre8bBoj1hLj
RsnSJRNGkajUtNdssjQDHmW0IP05Y9QFp4eaUkJySC16Wh55oKNqewnvteTSF6C9
AFFMDqVpR+rH3YbG5bTEJvzYj/lnBlb5wvJaCc+msGNx1xA/H+wUSHthSzU8mvzx
IJeE42A04HDzvA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:21 2025 by rpki-client