Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: IcqJ2y+FMaBusvDI8L3675S/M3wj44aoSDcc/Ynu8AE=
Subject key identifier: DC:D7:F7:94:3B:B0:F7:01:BB:73:C3:50:9F:D6:AC:B4:9D:4F:AE:C6
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 0197684E12A03915566E77880761E94509F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 138D
Signing time: Fri 13 Jun 2025 08:00:36 +0000
Manifest this update: Fri 13 Jun 2025 08:00:36 +0000
Manifest next update: Sat 14 Jun 2025 08:00:36 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: 0WFmLiDm8m5TI0z2iG/rBTXQ0qKm+mF0K1+qBLNbeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:12:a0:39:15:56:6e:77:88:07:61:e9:45:09:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Jun 13 08:00:36 2025 GMT
Not After : Jun 14 08:00:36 2025 GMT
Subject: CN=dcd7f7943bb0f701bb73c3509fd6acb49d4faec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:1a:86:84:0f:53:fb:1c:ca:39:5f:49:d6:
33:99:c4:65:8b:95:67:42:ca:a5:75:c5:ed:e0:e6:
6a:ee:22:6e:7e:62:de:fd:18:dd:db:76:54:8d:c0:
40:33:ad:6b:30:69:b7:7b:e8:fb:e5:7f:9c:69:41:
e1:bd:c4:66:f7:b9:9b:aa:3c:ab:88:c7:ab:3e:57:
49:f8:36:a0:d8:2c:a9:0e:0b:49:31:0a:e2:12:81:
c0:4e:ab:3a:cf:3b:72:11:83:cf:10:52:8f:6a:59:
db:8d:a1:03:a6:47:48:c0:d5:56:c2:1e:9b:45:1f:
96:0c:6f:17:3f:00:0f:46:8f:57:96:8b:db:de:19:
ca:13:b4:7d:b3:41:d0:4a:4d:e0:55:99:64:e3:27:
e2:09:5d:86:68:a6:08:56:d1:09:3f:3d:e7:12:a4:
1c:69:a7:e2:d2:e3:ba:18:53:29:18:3d:a1:5d:4c:
c8:b2:2a:a3:5d:48:e9:42:74:9c:cf:fa:99:d9:34:
03:05:ef:5c:f0:48:26:ef:f6:d9:58:7d:f6:b6:7e:
1e:2c:c1:f3:ca:8d:ba:e0:d2:d0:9a:fe:c0:88:ef:
93:2e:73:43:36:4f:a6:7a:59:79:a2:60:ee:e3:28:
e9:2f:ed:ca:50:55:8f:81:75:e8:c2:aa:f0:d0:6f:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:F7:94:3B:B0:F7:01:BB:73:C3:50:9F:D6:AC:B4:9D:4F:AE:C6
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:31:fa:a1:11:d4:c8:4f:f3:7a:95:5b:d9:cd:b1:2b:69:29:
26:5d:11:7b:56:95:11:60:a6:d2:e8:35:ab:4c:48:7a:79:1a:
ef:6e:5a:af:f0:eb:b2:ba:5e:44:ff:28:a6:a2:6e:0d:32:f7:
45:5f:71:ec:d9:c1:fa:78:3b:fc:8b:0c:10:94:29:17:94:11:
ec:fb:14:3e:c1:36:79:56:ac:f1:2e:97:75:10:0c:b6:27:3f:
2a:fe:a5:66:2d:00:b4:85:f6:88:10:1a:ff:7b:78:0d:2d:e5:
9a:48:1a:f0:ce:53:9f:87:76:e3:bb:61:b6:b4:cc:b7:6e:6a:
8a:ff:26:92:06:7b:59:54:4c:1c:23:89:8a:ca:45:66:ec:a9:
d0:98:7c:19:84:e4:7d:84:d2:56:6c:7b:92:09:6d:e5:dc:9b:
f3:af:83:6c:37:94:8b:06:f7:b9:d6:44:61:07:9b:10:49:45:
5a:a9:da:b0:50:44:94:ba:bc:05:07:8a:b7:f6:b1:49:dd:8c:
a3:8f:f6:62:ee:50:f3:91:5d:de:9c:f3:dd:b1:23:a6:6b:e3:
53:d2:5c:6f:37:2f:ff:73:71:d5:59:6c:32:15:01:33:31:fc:
75:5d:00:ff:58:90:81:4a:ed:b5:4d:f3:af:dd:bf:d5:43:52:
47:25:5d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoThKgORVWbneIB2HpRQnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUwNjEzMDgwMDM2WhcNMjUwNjE0MDgwMDM2WjAzMTEwLwYDVQQD
EyhkY2Q3Zjc5NDNiYjBmNzAxYmI3M2MzNTA5ZmQ2YWNiNDlkNGZhZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qoahoQPU/scyjlfSdYzmcRli5Vn
QsqldcXt4OZq7iJufmLe/Rjd23ZUjcBAM61rMGm3e+j75X+caUHhvcRm97mbqjyr
iMerPldJ+Dag2CypDgtJMQriEoHATqs6zztyEYPPEFKPalnbjaEDpkdIwNVWwh6b
RR+WDG8XPwAPRo9Xlovb3hnKE7R9s0HQSk3gVZlk4yfiCV2GaKYIVtEJPz3nEqQc
aafi0uO6GFMpGD2hXUzIsiqjXUjpQnScz/qZ2TQDBe9c8Egm7/bZWH32tn4eLMHz
yo264NLQmv7AiO+TLnNDNk+mell5omDu4yjpL+3KUFWPgXXowqrw0G+ilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzX95Q7sPcBu3PDUJ/WrLSdT67GMB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjH6oRHU
yE/zepVb2c2xK2kpJl0Re1aVEWCm0ug1q0xIenka725ar/DrsrpeRP8opqJuDTL3
RV9x7NnB+ng7/IsMEJQpF5QR7PsUPsE2eVas8S6XdRAMtic/Kv6lZi0AtIX2iBAa
/3t4DS3lmkga8M5Tn4d247thtrTMt25qiv8mkgZ7WVRMHCOJispFZuyp0Jh8GYTk
fYTSVmx7kglt5dyb86+DbDeUiwb3udZEYQebEElFWqnasFBElLq8BQeKt/axSd2M
o4/2Yu5Q85Fd3pzz3bEjpmvjU9Jcbzcv/3Nx1VlsMhUBMzH8dV0A/1iQgUrttU3z
r92/1UNSRyVdiA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:52 2025 by rpki-client