Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: 1gy3LGsxQk3WoJQtysf0/Qx05Py25swImzS9hCw0G1k=
Subject key identifier: 2B:A8:47:63:05:2D:EB:2B:D3:91:AD:B5:90:30:1A:FD:AC:53:61:CB
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019671C2186ADC9A47C478015A203FE76A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 13A9
Signing time: Sat 26 Apr 2025 11:01:07 +0000
Manifest this update: Sat 26 Apr 2025 11:01:07 +0000
Manifest next update: Sun 27 Apr 2025 11:01:07 +0000
Files and hashes: 1: 3K2zhAcdKtLzb7_Jnbk2BtRstac.roa (hash: Nhwyd3BNcUeHDaZYJor5anwz5rb2CFfZTtP7ROQybhk=)
2: 6q_G_Z0qExivoFkdxz0SlPRdfWc.roa (hash: 4SryP0DdQLuQOQZ+IBOlNc/zDAm8n4lQ1lbM4SRDA1Y=)
3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: jJ8Wwn1guF/10E73cIBiyph5RhsThlqlGF5/Jz8ULiM=)
4: ifGxlDc1irW7Eg9g-9ztDuocTCk.roa (hash: ZhfDpWXnZEi0EZr5I/ly231LZJr36arOyCqZMKGb1rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:18:6a:dc:9a:47:c4:78:01:5a:20:3f:e7:6a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Apr 26 11:01:07 2025 GMT
Not After : Apr 27 11:01:07 2025 GMT
Subject: CN=2ba84763052deb2bd391adb590301afdac5361cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:17:fd:5c:91:d1:83:5d:cd:c6:96:cf:16:
69:c9:de:4d:df:94:55:62:8c:0d:44:6c:02:cd:90:
33:d8:29:eb:e8:52:c7:27:a8:7f:00:53:3e:a3:e1:
05:9a:51:20:59:08:e0:88:b6:92:54:f4:b5:51:70:
04:83:42:c3:61:1b:cd:3f:28:2e:c1:3e:f7:ca:94:
e9:86:a7:cc:58:74:c4:ed:04:a5:84:bf:b2:be:ff:
f5:bd:88:8c:95:8d:3d:fe:fd:e0:87:49:2e:c4:1d:
0d:5b:39:35:47:12:d5:83:2e:15:b7:07:0a:f2:33:
10:48:3c:63:bf:70:a9:f6:a9:18:a4:22:ba:90:08:
91:5e:43:4f:9e:ab:39:30:31:52:99:8f:2e:3c:c2:
4b:fb:2f:4a:fe:0e:c7:41:62:9b:0d:1b:91:ed:54:
81:03:ae:72:8f:39:c7:f6:46:a8:93:d0:e5:a9:9e:
8e:d0:17:fa:0d:45:73:f0:a9:04:8c:81:be:d4:73:
2d:f1:d7:96:24:15:06:83:6d:6b:e5:fb:e9:95:c0:
e8:32:32:c8:df:8c:b9:11:b1:4a:6b:07:80:ff:3f:
45:24:da:9d:fa:cf:9f:14:c8:69:b8:95:e7:73:c2:
22:45:54:75:47:a2:a6:ca:df:d1:ab:d0:fd:04:ae:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:47:63:05:2D:EB:2B:D3:91:AD:B5:90:30:1A:FD:AC:53:61:CB
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:94:fd:73:86:52:48:e3:1e:00:bd:75:d2:4b:68:8e:14:d6:
d0:0c:f6:bd:1a:9f:45:6e:fc:a5:47:62:eb:39:b0:a4:13:33:
7e:61:12:9e:97:f7:11:34:e5:78:5b:11:17:8b:96:02:f0:f8:
5e:a0:a0:90:00:ca:4e:b4:b5:dd:dd:d4:61:a5:4d:cf:04:59:
22:e4:c9:a2:33:dd:58:04:0a:24:98:ea:ac:0c:b0:40:18:44:
96:4a:d0:65:3e:1b:a7:80:7c:1e:01:65:d8:c5:05:12:07:37:
da:be:98:d9:27:e6:6d:2c:89:ad:67:38:1b:32:78:f4:b8:89:
47:e2:b1:27:bc:4d:cd:c7:84:1b:7d:ed:9a:f7:ea:57:30:4d:
c2:8e:9d:33:7b:e1:3d:75:e5:99:ad:2f:ee:d9:80:f0:69:dd:
0b:88:e0:d4:c7:16:13:af:8b:32:1e:c3:a8:ad:bb:6c:c5:bb:
76:0e:42:6e:af:01:b6:5d:c7:75:bf:bc:f0:d4:7d:b3:15:fc:
e0:82:15:97:63:7b:11:66:ef:89:a8:5c:40:f2:36:dd:51:bd:
39:ed:4f:5f:cd:4c:2a:00:77:99:ef:24:5f:7c:79:f5:59:5b:
7f:1a:8d:5a:62:b1:77:30:f6:b3:8c:13:88:34:98:be:3e:87:
1d:e0:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:51:58 2025 by rpki-client