Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: FIhh4pqFwBHOm7keSQJvOww/WtMGC4K1Dsdy9OCFpnc=
Subject key identifier: 67:96:ED:EB:28:80:A2:ED:52:A9:51:DB:05:13:E5:D6:91:4F:E2:64
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019A718087F58EE094CE6215B432A14D4EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 15C4
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: bSt5ibREp0BgDy9QhiQwgTVW7Y3XUQ8wvMRkEQrIaGo=)
2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=)
3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:87:f5:8e:e0:94:ce:62:15:b4:32:a1:4d:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=6796edeb2880a2ed52a951db0513e5d6914fe264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:54:20:81:4e:92:e0:35:3a:37:38:97:80:
32:ed:ab:dc:c7:ee:35:f0:8d:3b:d6:b6:ea:28:73:
31:af:77:e1:10:41:7a:be:3a:3d:43:13:e0:ab:09:
db:e5:a0:fe:ad:7a:2c:1a:e3:68:c5:d5:23:5d:f1:
68:07:97:83:4a:4a:09:2c:6f:89:bb:dd:ad:c7:d8:
45:af:89:20:80:06:d5:df:6b:95:ed:81:2e:be:c8:
41:b7:67:4f:9a:65:bf:3f:4d:50:aa:58:4c:ef:07:
ae:50:94:c1:eb:87:8f:d8:fa:d7:ba:f1:76:27:f2:
5e:b2:f6:a8:3d:33:30:97:95:d0:57:ab:bd:22:50:
e7:7d:02:bf:dc:15:45:4e:cc:67:40:61:40:c9:70:
29:c3:e3:e2:1e:1c:2d:e6:29:57:68:af:38:d9:11:
f1:16:40:f9:3e:53:15:c0:2c:a5:54:a7:20:dc:3d:
86:52:8f:de:4c:9b:5d:04:10:41:cd:8e:25:5e:db:
b7:0d:d1:cb:c1:cb:11:88:a2:66:aa:69:da:92:a9:
1e:e9:1b:59:b1:1d:8b:fc:fa:57:f9:b0:7e:11:0a:
13:cf:0b:ab:39:73:6c:74:49:23:70:e4:50:6c:99:
5f:07:13:ec:fd:84:36:e2:31:94:29:67:40:70:29:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:ED:EB:28:80:A2:ED:52:A9:51:DB:05:13:E5:D6:91:4F:E2:64
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:05:96:b2:98:0a:5a:4c:3a:ea:77:3d:91:59:53:63:ed:
f6:1d:87:d9:90:07:2f:3f:01:27:4e:be:1f:d8:cc:7b:3f:b3:
35:d7:1d:27:8a:f1:57:a5:49:2f:ab:0c:b8:f9:f3:78:1e:14:
cb:85:1f:f4:2b:63:b7:09:e1:bb:2f:fb:cb:5b:48:00:67:2f:
48:10:b7:ec:83:ba:2e:bd:07:bd:0d:66:e7:29:b8:e4:aa:83:
75:b1:b3:52:4f:9a:94:78:b2:c5:5b:84:e0:ee:7a:a1:01:9b:
98:60:22:3c:3f:60:6a:9e:73:6e:38:1b:4f:f2:c7:60:ca:42:
5e:b2:28:5d:eb:a0:55:d8:b9:3c:30:33:87:df:97:0c:43:44:
bb:b3:e3:1e:29:13:8c:72:12:6b:12:91:cf:c5:6d:a3:aa:85:
9a:77:0d:e0:bc:57:a6:e7:74:24:0f:68:c6:95:20:70:e5:04:
5f:ef:b9:2a:9c:f5:91:0c:85:31:7e:a2:83:18:58:d7:6d:a6:
85:69:ea:e7:a7:7c:b5:84:1c:1e:de:e9:ad:92:f8:d0:19:68:
3e:ae:16:71:32:2d:96:48:c8:93:a8:1d:e7:e0:49:e6:e9:55:
c4:d4:9b:92:71:21:d3:90:32:10:0b:e8:c2:2d:20:36:05:98:
1d:fe:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:18 2025 by rpki-client