Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: UVa6dRC4T1y/wEBR86+gdXCr5VzH2xxFh3Megp8h1Jc=
Subject key identifier: BA:84:68:22:F7:EA:7A:43:95:E5:19:B9:92:2E:B7:F1:A7:BD:8C:CB
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0199239F21483ADC6F74CBC31A768F160C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 05E0
Signing time: Sun 07 Sep 2025 10:00:55 +0000
Manifest this update: Sun 07 Sep 2025 10:00:55 +0000
Manifest next update: Mon 08 Sep 2025 10:00:55 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: nuZJgjey8LiE0aJbB7F/IiQYIEJ1alDQ16wLUbEoYxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:21:48:3a:dc:6f:74:cb:c3:1a:76:8f:16:0c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Sep 7 10:00:55 2025 GMT
Not After : Sep 8 10:00:55 2025 GMT
Subject: CN=ba846822f7ea7a4395e519b9922eb7f1a7bd8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:32:f0:35:6c:74:20:22:5a:90:c7:46:cf:
29:fc:b9:3e:b4:be:ec:eb:12:82:2f:a7:66:ec:83:
be:67:84:3d:1a:6b:0d:08:56:7c:88:41:1a:0c:b3:
82:c8:50:3d:51:db:f9:82:5b:3e:4e:2d:f1:93:16:
6d:57:1c:82:0e:35:27:9d:1a:46:bd:d1:d6:e3:54:
45:fb:a1:dd:44:1b:e0:33:0f:ce:8d:96:98:bf:ee:
d7:fa:51:37:4b:ad:77:6a:83:eb:fa:de:2b:df:41:
dd:6b:11:c3:de:21:a4:0f:e2:29:ec:a8:88:f1:c3:
32:02:b1:cf:a0:e0:71:8f:3d:d7:2d:cc:e2:9d:ad:
5f:a9:24:1b:e6:f7:84:e2:fd:21:c0:4b:b6:6c:df:
ba:19:46:b8:2b:10:81:97:0c:e5:fa:0c:9f:b1:43:
f5:91:b0:fc:2d:a2:45:d2:0a:08:ed:3e:ab:98:5e:
3b:d0:40:15:7c:e8:49:dd:06:29:f7:0d:02:4b:ea:
13:c5:0b:3e:68:5e:3b:e6:a2:18:fd:3d:f3:b9:c9:
ac:57:03:8c:15:b5:08:70:4a:94:57:88:98:f8:ce:
1e:e7:c9:db:57:68:da:64:3c:67:a3:eb:a4:16:9a:
0a:f0:62:56:b6:b0:17:41:f1:f9:1a:7b:af:d1:bf:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:68:22:F7:EA:7A:43:95:E5:19:B9:92:2E:B7:F1:A7:BD:8C:CB
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cc:49:e3:50:7f:90:d2:58:1f:af:07:2e:16:82:73:41:18:
31:de:e7:53:96:0a:dc:f7:37:c3:b4:51:b7:df:e7:a7:f7:69:
bc:f6:99:ad:c7:cc:69:e7:8b:21:83:d1:be:fc:98:4c:61:78:
92:7a:41:6a:29:46:8c:56:c7:f7:87:d0:fb:85:1c:e8:87:e0:
e8:8d:cb:50:ad:4f:2f:6c:a2:21:7b:d3:a0:4a:d7:1e:b5:9a:
94:bd:a8:36:a4:ca:8b:f6:27:8e:ae:58:6c:57:af:df:5b:1d:
7e:9d:78:ef:ef:06:e5:79:ea:e3:a9:d4:e1:57:7d:55:5b:8c:
94:69:92:51:3c:23:ad:f6:0b:bf:50:f8:eb:e9:37:f8:7a:de:
4c:1b:13:bb:20:80:dd:a8:32:6e:63:6b:eb:df:b3:30:da:3c:
d3:07:29:23:86:a6:bd:a5:38:e0:bd:99:19:f1:c6:d4:99:e6:
ee:cf:53:e2:e8:14:b3:6c:68:90:c6:a5:86:b3:f2:d5:93:04:
1c:1b:15:21:8b:ec:ea:9c:db:85:5f:b9:67:7e:9a:ca:89:4a:
7b:6f:e1:15:57:62:2b:83:09:41:b9:a5:f7:c0:66:bf:f8:32:
16:f5:c5:18:46:6b:13:75:3e:2b:47:45:31:f3:bb:7d:bc:ee:
88:bb:05:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client