Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File: VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier: vHi6K6n2FvDKaGkZ5DTl7SVmTKkC0kwSum2iNu5M+II=
Subject key identifier: 95:CC:29:73:B5:98:3B:F8:D9:D0:27:E2:D8:AF:0C:FB:89:5B:A2:2D
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer: /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial: 019848528A3BCE86B774B58157B2D5479D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number: 1401
Signing time: Sat 26 Jul 2025 20:00:25 +0000
Manifest this update: Sat 26 Jul 2025 20:00:25 +0000
Manifest next update: Sun 27 Jul 2025 20:00:25 +0000
Files and hashes: 1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: xzM2aGmqD6qsIM2XkAN4RNcT70AcFnPBTxf/01TDMuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:8a:3b:ce:86:b7:74:b5:81:57:b2:d5:47:9d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Validity
Not Before: Jul 26 20:00:25 2025 GMT
Not After : Jul 27 20:00:25 2025 GMT
Subject: CN=95cc2973b5983bf8d9d027e2d8af0cfb895ba22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:25:2c:7a:2c:50:44:d9:d5:e2:3e:c6:b5:
08:36:45:49:70:7e:46:e0:6c:1f:7e:76:cb:50:3d:
7e:19:69:2d:74:5a:b6:ab:32:40:c7:51:1b:77:14:
ee:94:19:4b:fe:e2:ec:9d:af:95:cd:3b:5b:03:24:
a7:80:d2:6e:2d:2a:7a:ef:b6:bd:d3:06:1f:c3:40:
ce:b2:1c:74:92:77:37:d2:8c:0c:16:b3:3a:04:2e:
82:34:20:f6:84:89:6f:4f:9a:64:fb:e8:fb:ba:af:
06:72:1c:2b:fc:80:8f:c3:fc:19:2a:dd:c4:55:18:
97:d0:be:59:4a:a6:b9:78:bc:2f:d2:59:d2:96:e5:
f7:b0:b3:ca:ee:35:96:f9:ab:cb:9b:a2:59:cb:b0:
99:1a:1c:cf:ff:b0:37:6f:96:5d:bf:5e:dc:24:0f:
7b:05:a8:fc:ca:14:16:59:76:0e:b2:a0:e3:8c:16:
a5:02:0f:9f:34:3d:6e:a9:a4:13:02:36:8e:4a:f1:
39:43:b9:a7:b4:5b:3b:be:a6:1c:ad:94:9a:69:e6:
0e:a3:13:98:81:7e:0b:75:38:6a:f3:6b:c4:ab:82:
5a:f0:7d:de:7d:cd:05:ab:a4:c3:58:5e:87:15:e3:
e9:9e:0b:51:ef:39:f6:11:13:0e:ec:a9:a8:27:3b:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:29:73:B5:98:3B:F8:D9:D0:27:E2:D8:AF:0C:FB:89:5B:A2:2D
X509v3 Authority Key Identifier:
keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:9b:c4:b4:af:c1:f9:c9:32:20:56:11:97:70:b5:23:41:
60:c4:f0:87:f9:d0:76:91:59:87:c4:5d:93:e7:d3:92:59:31:
47:d6:d4:45:85:cf:3a:a5:7c:b5:44:3f:62:8b:63:15:2e:79:
08:60:a7:40:b1:dd:bd:e7:5d:48:68:38:e4:ef:6f:2e:49:c9:
f2:f1:06:14:11:81:cf:57:ed:cf:3b:77:20:b6:3b:16:29:b2:
84:70:49:eb:c7:ed:9f:61:55:03:1e:50:24:a2:21:8c:2a:75:
0a:44:85:15:d2:1e:a9:73:4a:71:9d:6f:35:63:a4:8c:b4:cf:
e9:30:0f:e3:20:ad:47:26:bb:4f:7f:05:35:c0:13:18:92:63:
14:ea:a2:db:8e:4e:0e:36:9c:f9:7c:73:ec:8d:25:ab:52:2e:
ac:fa:71:c1:e6:dd:b4:10:ed:22:2e:ec:c4:b5:c1:3c:2f:fb:
43:bb:b5:80:c0:6c:01:20:ef:84:14:e9:a6:6a:3e:24:11:9d:
41:76:0c:fa:d6:46:4a:e1:d7:8f:8c:4f:bc:94:d9:6f:92:c6:
bc:6d:94:0b:d4:84:f8:fe:69:b1:a0:35:91:af:57:92:f9:7e:
5b:e1:53:c4:d8:80:5f:c1:2b:df:1e:23:89:4a:1f:7b:02:81:
38:f2:e8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:18 2025 by rpki-client