Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: nnCnz41WKury18deBQcZMfS7VrQjeNCCsMn4HMk+dUc=
Subject key identifier: 7C:A0:98:C2:AF:16:7D:ED:71:B0:AA:64:22:99:9E:82:73:FB:3D:EC
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0197B7B2F9339647E90250B59C73DFCD7092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1459
Signing time: Sat 28 Jun 2025 18:00:48 +0000
Manifest this update: Sat 28 Jun 2025 18:00:48 +0000
Manifest next update: Sun 29 Jun 2025 18:00:48 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: cojkNx+bGWyoa+o5FAvTbg5RQe8fVMCAW9u8XLDXQgc=)
2: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
3: uiBYyAxZZ-IWX8_b8BuzwE0QcVo.roa (hash: cZuNjtIzgSPmn/E68ilOlNr7prIJYzZ8c4gKBp8qr+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f9:33:96:47:e9:02:50:b5:9c:73:df:cd:70:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jun 28 18:00:48 2025 GMT
Not After : Jun 29 18:00:48 2025 GMT
Subject: CN=7ca098c2af167ded71b0aa6422999e8273fb3dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:51:72:43:77:4f:ee:f9:f9:94:c5:22:08:
f8:cd:3f:14:94:74:7b:c8:e7:47:cb:cf:1a:04:70:
b4:a3:2c:b4:86:14:17:7b:aa:98:1c:06:95:1d:39:
c5:fe:d0:ab:7d:c0:72:df:e9:14:d4:75:c9:fd:b0:
eb:e4:06:2c:bc:e0:88:ba:1c:22:bc:58:e7:59:4b:
71:40:a9:2f:46:9e:89:5f:5b:61:4e:06:ed:a5:2f:
f4:90:3a:ba:0e:73:51:30:5a:19:f5:65:e7:37:71:
06:3f:63:d7:8b:86:f0:07:bd:3e:f3:22:d0:f9:22:
f3:81:ae:5d:86:0d:55:39:d0:8d:93:16:ae:0b:df:
6c:fb:7f:32:6b:2a:ea:e6:c3:01:e6:e9:b3:6a:06:
6e:66:82:ec:b3:94:27:cc:2e:a1:bf:5a:5b:5b:ab:
95:a2:9c:e3:6a:bb:07:95:17:ca:c6:28:16:01:53:
2a:83:6f:b1:c5:08:5b:4e:13:5e:04:0f:ee:50:a6:
ff:de:34:60:66:b7:8c:7a:e3:71:46:dd:c4:64:5b:
27:b8:e7:49:36:51:9a:54:3b:40:39:9d:8e:3d:7f:
38:d4:87:cf:8e:00:d1:a9:70:37:e2:a7:c2:b1:e0:
14:f0:09:14:da:29:52:84:b7:6d:45:db:f1:3b:42:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:98:C2:AF:16:7D:ED:71:B0:AA:64:22:99:9E:82:73:FB:3D:EC
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:45:d1:84:4b:85:b2:34:26:c8:42:b3:81:9c:b0:8a:5f:b7:
5a:41:46:85:5b:18:4a:6b:d0:c5:ba:df:83:38:8d:a7:6a:9d:
c0:4c:69:23:5f:16:ac:78:f9:e0:9d:d1:31:38:17:24:f3:5c:
0b:99:f2:19:2a:d5:1b:89:26:ca:5a:68:50:11:10:26:b2:e8:
f1:41:0d:17:65:9f:b6:01:6d:59:fd:4d:79:f6:0a:52:c6:e9:
e9:e1:27:9e:d3:5d:cb:a3:5b:41:c5:bb:b8:f2:c9:d6:f8:d6:
94:54:3d:a5:e2:49:3f:e7:a1:61:4b:52:f6:0f:73:90:86:1e:
c3:66:0e:39:4c:a7:8f:8b:e7:f5:62:ae:3a:ce:c0:07:80:81:
c2:cc:ac:28:e4:9e:7f:af:26:6f:40:30:7a:4f:29:87:32:04:
1e:f9:0a:4e:16:e7:4e:e8:68:20:e6:4a:89:0f:3d:5d:43:9e:
9e:c0:60:64:20:6f:ba:d3:36:79:19:5c:ba:95:5b:1e:64:de:
c2:a7:f3:b9:7d:5b:97:99:f8:a6:fb:78:7e:32:b5:3b:5b:1d:
d0:2a:2f:49:ca:57:4f:c1:d2:9e:0c:a2:ed:f7:ee:35:8b:b5:
95:1b:79:fd:59:e0:95:bc:84:a5:aa:84:2f:5f:58:c6:b4:7c:
d3:0e:76:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3svkzlkfpAlC1nHPfzXCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjUwNjI4MTgwMDQ4WhcNMjUwNjI5MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg3Y2EwOThjMmFmMTY3ZGVkNzFiMGFhNjQyMjk5OWU4MjczZmIzZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ydRckN3T+75+ZTFIgj4zT8UlHR7
yOdHy88aBHC0oyy0hhQXe6qYHAaVHTnF/tCrfcBy3+kU1HXJ/bDr5AYsvOCIuhwi
vFjnWUtxQKkvRp6JX1thTgbtpS/0kDq6DnNRMFoZ9WXnN3EGP2PXi4bwB70+8yLQ
+SLzga5dhg1VOdCNkxauC99s+38yayrq5sMB5umzagZuZoLss5QnzC6hv1pbW6uV
opzjarsHlRfKxigWAVMqg2+xxQhbThNeBA/uUKb/3jRgZreMeuNxRt3EZFsnuOdJ
NlGaVDtAOZ2OPX841IfPjgDRqXA34qfCseAU8AkU2ilShLdtRdvxO0LphQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHygmMKvFn3tcbCqZCKZnoJz+z3sMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEXRhEuF
sjQmyEKzgZywil+3WkFGhVsYSmvQxbrfgziNp2qdwExpI18WrHj54J3RMTgXJPNc
C5nyGSrVG4kmylpoUBEQJrLo8UENF2WftgFtWf1NefYKUsbp6eEnntNdy6NbQcW7
uPLJ1vjWlFQ9peJJP+ehYUtS9g9zkIYew2YOOUynj4vn9WKuOs7AB4CBwsysKOSe
f68mb0Awek8phzIEHvkKThbnTuhoIOZKiQ89XUOensBgZCBvutM2eRlcupVbHmTe
wqfzuX1bl5n4pvt4fjK1O1sd0CovScpXT8HSngyi7ffuNYu1lRt5/VnglbyEpaqE
L19YxrR80w52cA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:47 2025 by rpki-client