Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: Qyp/GEPYb5DeFQVhzYHSShJiXBwuM6nyRrwVegD+zpk=
Subject key identifier: CB:27:EB:2B:77:40:89:6A:FE:AD:10:4F:60:65:BE:36:AF:69:01:08
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0198D6298F92FFAA941ED2C39F61492209E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 14EF
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: iSRkrVsBkZQI6RDxrcC0+WULQPTjcmFn/HoGxmc+VYo=)
2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=)
3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8f:92:ff:aa:94:1e:d2:c3:9f:61:49:22:09:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=cb27eb2b7740896afead104f6065be36af690108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:04:e5:88:c1:d6:df:be:bd:a0:d7:18:99:
fb:87:d3:b0:4d:e3:7d:25:62:14:60:8a:51:38:a7:
7c:d6:57:e6:e5:dc:f4:94:aa:96:03:68:ea:48:7b:
58:37:ba:2f:b0:f8:0d:e1:d6:0c:bb:6d:8c:7b:f2:
e5:9d:49:32:dc:16:8c:89:2b:f2:27:75:56:71:e3:
26:f2:08:59:9a:5a:a4:f5:76:cb:86:83:fa:5e:f1:
7a:c7:e1:e0:b2:fc:14:f1:92:84:b9:50:c3:ea:52:
0d:79:1c:0b:e4:33:c3:60:e8:22:5d:29:98:6f:cb:
31:69:aa:d4:28:32:44:6c:30:60:99:b1:b1:09:62:
e6:30:94:31:20:3c:3f:b5:c8:5b:2a:18:8e:13:1b:
7d:96:90:a0:ff:cf:2c:a0:58:ae:11:10:b3:0b:56:
35:b7:b6:ed:fa:b0:51:02:5b:ba:fb:71:c0:58:c6:
30:0c:5c:65:18:9e:0e:37:c0:fa:b2:82:49:84:a3:
b1:37:17:49:d9:64:4e:09:0c:73:4d:4f:16:94:1d:
54:54:71:96:ea:5d:77:c2:97:0f:4f:ed:0c:43:28:
1b:5e:ae:f6:5e:e7:7b:b4:27:13:26:d1:44:d6:d4:
ec:07:9f:dc:0b:07:87:7d:24:70:e1:72:61:62:3b:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:EB:2B:77:40:89:6A:FE:AD:10:4F:60:65:BE:36:AF:69:01:08
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:78:ab:0d:05:88:86:54:36:2f:97:1b:8a:54:e9:ba:31:bf:
de:42:8c:f0:a1:1f:44:d3:5f:cf:f9:8e:b5:91:08:80:96:ac:
db:81:05:1e:a5:f6:e5:10:d8:bf:e0:68:f9:14:2d:50:75:6f:
a1:40:23:11:3b:fd:2d:47:2e:b7:5d:87:fe:02:7e:2f:3a:85:
27:4f:73:a5:1d:69:fe:81:12:a9:e3:9f:c0:07:40:bd:77:4e:
d9:37:3b:d1:db:1a:e2:b6:d3:4b:90:70:3b:c5:5a:4d:d2:ab:
7a:f6:ed:f0:50:22:14:05:0a:f0:b5:02:c2:b6:9d:62:d7:a9:
65:35:0b:f0:c6:5a:17:83:05:75:48:19:05:1f:69:a7:b7:6f:
72:1f:67:7e:ae:58:98:b8:23:3c:f7:7f:6e:fc:3c:e9:0a:e1:
25:9e:00:07:23:00:fa:90:13:c6:f8:c1:e2:d4:eb:a3:f0:ed:
86:c3:64:73:a2:86:5e:51:fd:b4:f9:9a:2c:27:19:5e:04:00:
12:1a:67:11:d2:d5:fb:fe:af:cc:52:50:a7:3b:59:cd:8a:2f:
b2:f6:6f:4f:4d:e4:f8:79:de:ed:d3:31:a9:5b:df:3f:a7:d1:
fe:51:2e:bf:6c:c5:4f:c5:61:2f:7e:ae:67:61:cf:68:05:92:
43:c5:56:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKY+S/6qUHtLDn2FJIgnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjUwODIzMDkwMTQ0WhcNMjUwODI0MDkwMTQ0WjAzMTEwLwYDVQQD
EyhjYjI3ZWIyYjc3NDA4OTZhZmVhZDEwNGY2MDY1YmUzNmFmNjkwMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGME5YjB1t++vaDXGJn7h9OwTeN9
JWIUYIpROKd81lfm5dz0lKqWA2jqSHtYN7ovsPgN4dYMu22Me/LlnUky3BaMiSvy
J3VWceMm8ghZmlqk9XbLhoP6XvF6x+HgsvwU8ZKEuVDD6lINeRwL5DPDYOgiXSmY
b8sxaarUKDJEbDBgmbGxCWLmMJQxIDw/tchbKhiOExt9lpCg/88soFiuERCzC1Y1
t7bt+rBRAlu6+3HAWMYwDFxlGJ4ON8D6soJJhKOxNxdJ2WROCQxzTU8WlB1UVHGW
6l13wpcPT+0MQygbXq72Xud7tCcTJtFE1tTsB5/cCweHfSRw4XJhYjtBvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsn6yt3QIlq/q0QT2BlvjavaQEIMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnirDQWI
hlQ2L5cbilTpujG/3kKM8KEfRNNfz/mOtZEIgJas24EFHqX25RDYv+Bo+RQtUHVv
oUAjETv9LUcut12H/gJ+LzqFJ09zpR1p/oESqeOfwAdAvXdO2Tc70dsa4rbTS5Bw
O8VaTdKrevbt8FAiFAUK8LUCwradYtepZTUL8MZaF4MFdUgZBR9pp7dvch9nfq5Y
mLgjPPd/bvw86QrhJZ4AByMA+pATxvjB4tTro/DthsNkc6KGXlH9tPmaLCcZXgQA
EhpnEdLV+/6vzFJQpztZzYovsvZvT03k+Hne7dMxqVvfP6fR/lEuv2zFT8VhL36u
Z2HPaAWSQ8VWQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:40 2025 by rpki-client