Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: FDcVyGXPqRgAX/cncNqgMgVvWeaZpHjtegbtd3VJdmI=
Subject key identifier: AB:C9:C9:5C:09:EE:E9:CB:A7:4A:14:C4:D7:B6:CB:98:5D:60:77:EF
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0198334BAA89DB6097336A5CDC150C50333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1499
Signing time: Tue 22 Jul 2025 18:00:53 +0000
Manifest this update: Tue 22 Jul 2025 18:00:53 +0000
Manifest next update: Wed 23 Jul 2025 18:00:53 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: uQd6xhpwalz5ZfGnzZHodyt+LxCSEixqfq2c1ikm5Z4=)
2: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
3: uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa (hash: cZuNjtIzgSPmn/E68ilOlNr7prIJYzZ8c4gKBp8qr+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:aa:89:db:60:97:33:6a:5c:dc:15:0c:50:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jul 22 18:00:53 2025 GMT
Not After : Jul 23 18:00:53 2025 GMT
Subject: CN=abc9c95c09eee9cba74a14c4d7b6cb985d6077ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:37:85:fe:ac:6e:ce:c1:14:6f:8e:71:cd:
5e:04:81:57:e8:b3:bd:1c:8d:38:42:17:8a:3a:f0:
2f:c1:9d:cd:a2:b1:b7:e4:8a:f9:30:dd:52:51:d5:
65:83:78:7e:f5:77:74:3d:db:f7:8c:43:82:b4:3c:
7d:51:ac:71:d3:8d:29:61:70:f8:fd:56:ed:1a:71:
ac:be:c6:af:ce:8d:e8:71:cf:e3:a8:80:5d:f7:2a:
5f:79:08:47:41:ea:63:a7:6e:a9:30:e8:65:4a:82:
b8:c4:32:2a:2b:cd:78:d3:ff:f9:73:57:00:57:21:
d8:3d:ed:53:3d:f2:26:27:0b:b1:c7:cd:29:72:b2:
13:17:fc:98:4c:4c:c9:93:8a:f9:60:78:6c:80:21:
66:5b:1c:c4:d8:de:b4:6b:2f:02:48:ee:86:21:b7:
bd:0a:d3:ca:11:a8:5a:94:61:6a:ed:74:9b:4e:39:
e4:76:ee:1a:91:79:db:94:e2:a1:35:70:d3:8a:ab:
56:e7:67:10:46:3c:5f:42:a1:6d:07:53:fa:76:8f:
83:4f:f6:31:57:4f:75:37:e0:ff:8e:7e:91:ef:97:
dd:83:74:fe:be:04:79:5c:58:c6:9e:0a:7c:52:74:
62:9e:0d:f7:01:18:95:03:e6:36:7d:ed:91:3c:e4:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:C9:5C:09:EE:E9:CB:A7:4A:14:C4:D7:B6:CB:98:5D:60:77:EF
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:d4:55:3b:94:26:2d:0d:bf:91:a1:1a:10:85:58:a8:6d:
2d:e6:ab:f0:51:4f:08:cd:c3:bd:72:73:92:71:19:16:06:1e:
28:8b:81:03:e4:96:56:96:8b:2c:1b:8a:97:bc:6e:2f:39:ac:
91:49:3d:6b:24:a0:1b:d2:bd:0d:e3:dd:a7:82:54:df:7d:6c:
29:51:6e:a9:94:44:ed:a0:90:ad:51:de:42:bf:61:e5:7d:0a:
bb:f3:60:13:0c:6e:40:0e:26:44:43:67:90:73:c2:1c:ab:a4:
f2:ff:68:17:31:4a:c8:e2:3a:f0:79:73:49:8e:9a:42:3e:34:
73:cc:1d:52:ae:18:a8:56:57:89:66:ec:05:6b:35:50:dd:f2:
5d:2c:be:3b:7d:6f:b7:87:e9:72:ff:1b:05:69:de:72:c1:68:
d6:26:fe:7c:2f:a4:19:35:7e:89:d1:d0:48:b3:59:89:a8:b0:
4d:a8:4a:69:e1:88:17:9f:60:5d:7c:c6:a5:62:db:2d:08:87:
9f:b8:ff:24:f4:7d:24:88:25:af:10:02:71:87:1a:6e:64:5b:
45:61:5d:1c:1d:39:8e:54:d1:75:6c:ab:8a:3c:0d:63:39:7b:
8e:16:9b:49:90:64:f0:ea:48:19:5b:26:9e:9a:9f:c9:46:1c:
b1:e7:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:17:08 2025 by rpki-client