Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json)
Hash identifier: /CC77TJHmUl7Cv3+J5ESLRH/RVvHklwnJ1S6sfIJXuI=
Subject key identifier: EB:12:79:8F:6F:12:8C:5C:AD:A1:19:2A:50:D8:40:D1:5E:92:00:9A
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0199FBB375543553143BBEE88073FFF6C236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
Manifest number: 1587
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: RGm9Nb4CiscfVMKdZUGKBCzN5HVlE801afCiBJ/n2pA=)
2: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (hash: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=)
3: bpiD9ucTecBBE3TJJ9Iit8XyfKI.roa (hash: a30fF/e1NIb5BTw9GaFbOi6f9wpsiPjnGgIJtIOyQak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:75:54:35:53:14:3b:be:e8:80:73:ff:f6:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=eb12798f6f128c5cada1192a50d840d15e92009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:1e:34:35:4a:bc:85:3f:24:e8:a0:be:8a:
4e:1e:06:ee:75:0e:5a:d6:7d:d5:e1:cf:72:e6:2f:
14:e8:8e:07:87:54:61:b6:3e:6c:04:c3:3e:bc:9d:
96:0e:1d:6f:a9:74:80:ec:d8:1a:fb:a9:15:42:7e:
10:16:ee:8a:14:7c:18:1d:4a:a2:89:4c:dd:f0:25:
b7:18:e6:38:93:e5:ac:7e:ec:f7:19:99:95:16:0b:
b8:84:91:34:b0:5e:9d:90:cf:07:7b:f1:10:d8:04:
98:34:f8:bc:63:7f:d6:ef:4d:61:f9:5f:56:98:49:
43:89:82:82:e7:7c:f8:a3:08:fc:48:3a:45:57:8a:
c5:30:b0:2b:08:9c:29:c3:fd:3b:29:b8:d4:98:20:
e5:87:03:0d:79:25:18:8f:99:9d:24:ad:aa:4f:8e:
aa:eb:0a:56:59:4f:63:2e:19:c7:c7:8c:42:5d:d4:
b5:16:83:ae:1c:91:08:10:28:61:15:b4:4e:96:3e:
8f:08:aa:02:bd:82:ac:fe:08:f4:6b:6e:c5:67:bf:
18:ce:5a:f4:20:27:59:a2:35:6d:21:4f:f5:58:15:
62:f2:9b:44:a8:48:28:5e:45:f9:6d:22:b4:68:03:
85:de:48:54:64:40:3b:ae:91:ee:92:42:e0:0b:19:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:79:8F:6F:12:8C:5C:AD:A1:19:2A:50:D8:40:D1:5E:92:00:9A
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b0:f7:14:5a:f8:97:a9:fb:79:91:0a:9a:73:d3:9f:0d:97:
98:cc:1e:46:ad:cb:0c:ea:07:ca:31:49:50:c9:0f:82:18:6d:
4b:cd:03:de:a9:10:b4:4a:bb:b6:66:a8:85:9e:01:96:1f:cf:
21:85:1c:a6:66:a0:55:65:f5:b1:70:1a:27:9a:33:1a:2e:f2:
a2:c7:25:2b:c2:85:bb:82:ab:c9:ce:7f:dc:12:2a:bb:5a:ee:
10:fd:ec:c4:80:47:15:ad:57:77:7e:81:78:fc:20:91:2b:1c:
02:50:14:70:4e:d2:34:05:57:0c:f7:39:e9:61:c4:c3:7c:69:
e1:75:0e:65:64:24:0a:e8:e8:8a:f1:ed:73:61:cc:2a:d2:46:
fa:64:89:40:d3:6c:93:b9:b3:83:aa:52:e1:23:42:7e:5e:6c:
8f:c3:1a:15:50:3f:ff:f3:cc:f0:3c:05:07:7e:45:fb:87:7d:
f3:be:10:12:1a:c0:ec:c2:ea:7a:2d:b4:bd:b3:2d:cf:c0:0c:
26:e8:75:62:ae:d6:0c:8b:49:77:e0:df:36:2a:8f:78:b7:4a:
b9:2e:bd:8f:cd:94:6d:ef:8f:16:b0:46:8d:0d:b2:d8:fc:9d:
62:ce:ea:38:06:c2:76:c9:7a:e9:a1:12:4b:21:47:1d:7a:e0:
52:d5:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:39 2025 by rpki-client