Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: KFvxSKi4e0nLbTEemAmhK3XY7D2joW0dkHOIvS/Abtc=
Subject key identifier: BC:D2:66:AE:5B:D2:25:09:62:99:22:95:DC:81:41:97:B4:1D:EE:3E
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 01983EE19F2520E1D758C47DFE46E85F79FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 149F
Signing time: Fri 25 Jul 2025 00:00:30 +0000
Manifest this update: Fri 25 Jul 2025 00:00:30 +0000
Manifest next update: Sat 26 Jul 2025 00:00:30 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: n8zXYtL3L1dKJbo9xbiU3WftRvDsUj+KwRlhLLRstWQ=)
2: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
3: uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa (hash: cZuNjtIzgSPmn/E68ilOlNr7prIJYzZ8c4gKBp8qr+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:e1:9f:25:20:e1:d7:58:c4:7d:fe:46:e8:5f:79:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jul 25 00:00:30 2025 GMT
Not After : Jul 26 00:00:30 2025 GMT
Subject: CN=bcd266ae5bd2250962992295dc814197b41dee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:c7:6b:ae:c4:9a:2a:c6:9a:a7:d5:db:5e:
93:d8:9a:0f:2e:79:58:fa:e1:28:6a:07:16:5c:c2:
17:b9:e6:41:24:6f:1f:38:ce:7f:1d:20:90:bb:da:
51:57:ed:cf:96:a5:4d:56:5b:1f:2a:b4:69:7e:e6:
a5:30:8e:14:76:b1:f5:b1:4c:bf:18:f6:38:8e:c3:
b1:c3:13:99:db:1a:95:1c:c6:49:35:1c:9f:f7:b2:
99:82:9a:b0:ee:a4:94:97:6f:d0:57:f4:ca:da:17:
bf:8e:b2:12:ec:5e:76:7d:e2:47:e3:2b:8c:f2:08:
49:bf:16:de:e3:61:44:a3:d4:9c:40:ff:0f:e2:fc:
40:89:25:d6:cd:71:9d:5d:97:77:33:8d:21:80:53:
e9:6b:0b:7c:61:4f:5a:05:ae:38:cd:f3:99:ad:4c:
3d:c5:df:4c:a6:0f:02:da:10:e9:fc:0d:4c:bf:8f:
55:1d:46:9c:ea:0b:29:6c:7c:7a:bd:20:e8:71:80:
5b:1e:c7:8a:df:7c:83:d2:30:23:ce:28:dd:3d:47:
50:cc:c7:f1:a5:ae:27:38:a2:64:23:fc:59:45:9e:
d1:6f:dd:c9:93:c2:70:22:7b:64:ef:0b:31:37:85:
cb:ba:87:07:7a:dd:a9:cc:67:dc:43:ca:14:19:29:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:66:AE:5B:D2:25:09:62:99:22:95:DC:81:41:97:B4:1D:EE:3E
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:40:f4:fe:36:fc:fd:e0:fa:cf:c0:c2:c5:60:3d:5c:d7:73:
c6:d1:16:48:20:89:15:70:e2:ea:ce:92:1f:c7:c6:38:7b:60:
73:c0:05:83:89:74:9f:fa:39:7c:6f:62:ec:79:74:f3:a7:e0:
61:18:cb:c9:d9:90:ec:b8:ef:34:04:be:88:db:38:02:5c:d8:
8a:fe:bf:7f:b9:6f:39:7e:11:68:d8:12:e3:44:90:78:56:8e:
ba:00:95:fb:8c:0d:05:b8:40:58:da:bf:9f:65:03:cc:c5:ab:
9d:3b:5f:5d:a2:dd:3e:95:21:c1:04:39:40:c3:fa:87:e2:08:
ea:35:29:32:bc:83:71:07:2a:9f:16:33:e5:7c:6e:a3:a8:ff:
02:b4:7b:3a:bf:80:46:b8:55:c9:72:86:14:1d:f5:d4:d7:95:
a8:79:8c:c4:95:6f:97:97:da:42:25:f1:18:3d:c6:86:db:a4:
de:2f:9b:c6:61:8e:9c:f6:b4:17:34:90:5f:9f:f2:ee:e0:84:
9e:77:75:30:fa:5f:8a:14:7d:b6:ef:a7:56:25:1b:63:19:12:
81:81:97:ad:45:d3:76:0b:ed:d6:34:0c:02:42:65:39:9d:81:
66:76:b3:4d:a2:37:60:8d:1e:ea:17:56:f3:fd:57:0f:bd:b8:
d8:1a:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:03:18 2025 by rpki-client