Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: a2YSDtF69UjLmYu2RdNAApEqOFahSbPuIullfUwgGmE=
Subject key identifier: 93:1B:77:C7:5E:2D:B7:01:F9:A8:50:AD:52:83:72:42:5D:4F:8C:CC
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019A71B8FA40AE594B516505AF112A0816AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 068D
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: HUJphXyF5+3DvXeSs6v++2TuihQRn7gsYn8mI0RnmV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fa:40:ae:59:4b:51:65:05:af:11:2a:08:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=931b77c75e2db701f9a850ad528372425d4f8ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:b7:36:e8:3c:48:82:9e:a5:66:28:21:8b:
65:5f:ae:16:06:84:8d:bc:68:32:d4:da:0f:a2:08:
15:62:b9:7e:3a:5b:b3:93:5f:48:5a:aa:49:f5:07:
11:94:e7:63:ad:9b:af:60:62:b3:3e:0d:d1:d8:a9:
7b:e2:b7:f9:dd:77:39:82:46:ce:15:ce:32:18:c7:
42:ae:ce:61:24:1f:7f:ad:47:c2:7e:d9:94:63:ce:
eb:e5:33:6c:76:5e:f2:ed:c5:08:d3:f5:c8:10:8a:
8b:df:fe:1e:dd:0f:c4:c3:bf:c2:13:7a:9d:5f:89:
a2:e3:3b:63:50:a2:07:df:ba:40:67:4f:dc:a2:ad:
2d:53:8f:94:64:d7:d4:34:57:4a:3d:17:f3:b9:bd:
2d:40:ca:1e:51:3d:27:c0:c7:99:cf:3f:e9:f6:82:
a3:95:c9:b4:2e:fb:d6:a3:bd:f6:ee:95:b1:43:50:
02:8c:2b:98:cd:84:39:eb:43:e9:3b:0f:d7:0f:d4:
79:79:75:d5:41:b7:41:be:8f:94:0a:71:6f:c4:f3:
79:dd:c5:96:a7:2c:b7:44:13:9f:24:2f:6c:56:a6:
be:76:9c:3e:50:19:d9:8b:dd:5d:96:0d:2e:c6:1b:
08:8f:5f:92:54:26:10:3f:c8:a4:7d:7a:de:91:92:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:77:C7:5E:2D:B7:01:F9:A8:50:AD:52:83:72:42:5D:4F:8C:CC
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:eb:0e:36:00:31:59:45:a1:57:e5:51:b5:d9:99:51:90:ed:
9b:60:fd:24:15:6b:d2:97:39:64:75:9f:19:36:db:c3:02:4b:
d8:13:7e:4d:cb:00:56:d7:48:b5:9e:9a:29:59:45:0c:3c:5e:
3d:14:2d:0c:26:8e:36:2a:db:c4:9f:6c:9b:74:17:69:fd:63:
8e:bf:f4:29:33:67:2c:1b:05:a9:01:26:c4:ec:00:17:f9:9a:
88:b4:c1:59:6d:88:ea:ee:db:a5:1f:62:a9:6a:e3:8a:ea:ec:
a9:a4:90:55:dc:e0:6a:bf:dd:76:21:53:ad:eb:09:11:b6:85:
b2:b5:fa:8d:cd:2f:7a:68:fc:48:30:8b:9b:6d:a4:4f:43:be:
d0:d1:7a:05:b4:19:6f:2d:5a:16:39:b6:d7:e7:5f:33:09:07:
31:45:e0:0d:87:cd:c9:7c:35:fa:f8:fc:59:be:97:26:4a:5a:
28:85:60:8e:4a:81:f2:2e:30:45:60:75:3e:0f:df:f7:c0:75:
5a:23:04:2e:9d:02:4d:7e:ae:8e:f0:a9:49:e6:90:7c:83:a5:
14:d6:7b:57:f8:23:04:32:d8:37:1f:18:0f:61:8a:d2:06:33:
70:44:90:a3:27:cc:4e:c8:e4:bb:32:ea:23:33:52:fb:d2:a5:
37:09:62:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:53 2025 by rpki-client