Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: 2zD8ULkW+RzP9ELqFI/ISrTlVxxUFPmt+N5RI2i451w=
Subject key identifier: D7:29:84:28:78:76:0E:5F:55:18:51:DD:40:A3:A8:0C:D5:A9:72:77
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0197722D08E50B0043AEE0BC35BABB7ABEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1435
Signing time: Sun 15 Jun 2025 06:00:43 +0000
Manifest this update: Sun 15 Jun 2025 06:00:43 +0000
Manifest next update: Mon 16 Jun 2025 06:00:43 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: 6qqrCJ9bLsoUEj0cQflXrcoz+p0FKLesExYS/oBG2eg=)
2: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
3: uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa (hash: cZuNjtIzgSPmn/E68ilOlNr7prIJYzZ8c4gKBp8qr+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:08:e5:0b:00:43:ae:e0:bc:35:ba:bb:7a:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jun 15 06:00:43 2025 GMT
Not After : Jun 16 06:00:43 2025 GMT
Subject: CN=d729842878760e5f551851dd40a3a80cd5a97277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:dc:fa:0e:23:d4:50:43:e1:a3:9d:89:21:
5c:bc:04:0c:e9:6b:91:00:7a:e2:47:54:89:7b:cc:
0d:15:30:33:55:61:c5:4a:90:5e:97:35:bf:f3:42:
dd:5d:ad:45:bf:7f:40:76:2e:9b:e8:b8:68:3f:54:
5b:c1:e1:61:e4:de:8d:dd:c2:7c:54:8f:78:db:dc:
5e:ff:7d:60:10:f5:a6:71:70:d5:aa:76:b9:ad:e8:
59:87:9b:63:71:2b:0f:a7:46:42:a2:e9:ce:d5:ee:
32:4e:92:65:68:4a:3c:a3:ef:6d:6d:b0:9b:23:55:
4e:e6:dc:8f:d1:81:0e:f0:e8:0b:ee:2e:8a:e1:35:
4f:75:c4:af:2a:60:a3:22:ce:ca:22:0a:95:8b:d4:
5a:ea:1d:dd:db:f7:86:05:c9:2d:97:5e:07:bc:b8:
ac:88:21:cc:8d:c5:5b:5e:42:5b:90:51:73:41:02:
86:d0:06:06:f7:9d:18:f3:82:48:53:cc:57:a3:4f:
04:0f:13:3e:c7:22:d5:09:93:61:12:64:6b:e2:6c:
33:12:98:94:35:22:18:cf:3d:11:e2:00:e5:aa:bd:
dd:2b:2d:bd:87:ce:81:87:c8:4b:ae:e4:13:bf:bc:
26:c0:15:eb:62:a6:7c:bc:8a:98:a9:7b:7c:2e:1a:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:84:28:78:76:0E:5F:55:18:51:DD:40:A3:A8:0C:D5:A9:72:77
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ab:f0:f6:6c:d0:a8:42:e4:c4:a3:08:51:8f:a2:3f:9a:66:
09:c1:a4:6d:9b:f8:93:e3:df:0c:dd:0d:51:2a:a0:5f:25:fe:
3f:f1:ad:63:92:57:42:d1:c9:8f:df:e1:86:25:27:db:47:8d:
14:2b:04:44:b5:2e:4d:88:c1:36:18:84:10:41:3a:23:3f:2e:
68:26:69:67:f9:b9:d9:c1:0b:6d:25:88:0b:89:64:ac:5c:cc:
1d:df:fc:6b:f1:1e:44:e2:a1:36:b8:05:ed:62:59:49:08:3a:
48:bf:c2:c1:8c:74:99:06:a3:89:48:ac:ff:06:a5:ac:69:7c:
ea:03:57:6d:04:a0:ad:89:52:4a:c5:00:64:85:e3:4c:e9:e4:
ee:cb:69:01:50:f4:99:2c:c4:68:f8:ef:92:6b:77:d7:84:b0:
6b:8c:97:fb:19:6d:f3:84:08:0e:6b:ba:b8:5f:e7:00:f7:54:
5f:c6:1d:06:0e:74:e8:08:54:d4:c2:85:f7:0d:2f:cd:7f:e5:
12:89:15:91:80:a5:82:bc:1a:b6:9d:c6:5c:9d:ad:c5:47:5b:
4e:96:3a:c4:1d:ca:9f:c6:2a:3c:91:d2:19:54:77:ef:44:16:
f0:2c:5e:5f:b3:13:b5:c2:87:f8:91:b8:f3:78:04:b8:29:87:
f1:fe:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:54 2025 by rpki-client