Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: XP6ywgN5PpoLGpmcsUpnPe5DLoO4d6iBJ9Rm9MPs0PM=
Subject key identifier: 1D:CF:7D:32:7E:7B:48:6A:D7:25:64:0B:C8:F7:BD:C5:70:42:8C:73
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 01974A7A9821ED7B57D44C76CECBDA894EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 04EB
Signing time: Sat 07 Jun 2025 13:00:37 +0000
Manifest this update: Sat 07 Jun 2025 13:00:37 +0000
Manifest next update: Sun 08 Jun 2025 13:00:37 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: DUrmUlnTu757ri2dRnBo/CqAy67kEmkgs+AZ3SnosrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:98:21:ed:7b:57:d4:4c:76:ce:cb:da:89:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Jun 7 13:00:37 2025 GMT
Not After : Jun 8 13:00:37 2025 GMT
Subject: CN=1dcf7d327e7b486ad725640bc8f7bdc570428c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:3d:38:3b:3b:18:81:b8:ef:d1:27:58:d2:
cf:be:ce:4f:0a:a8:0d:86:3f:3b:6c:a2:49:ec:e7:
54:51:31:75:0a:b2:0e:5b:4a:37:22:bc:27:7c:a1:
ea:7d:ea:b2:68:d8:0a:8b:57:a0:d2:c5:fc:76:4e:
9f:cc:d2:ab:79:ae:6c:7f:5b:b9:f8:bb:b0:60:67:
3a:e3:6c:0c:82:80:04:95:30:a0:f8:03:b0:a5:6a:
34:ea:bd:5a:7b:e0:3d:b9:8e:64:57:e3:f7:29:6c:
10:56:be:5b:6f:dd:06:40:f6:63:7c:6f:1a:b9:a4:
f8:a8:2c:4d:73:b6:00:b7:b6:6d:38:cd:75:31:d4:
6e:45:f3:d0:59:e9:02:f1:b2:4e:b1:96:fb:60:7a:
ab:87:2e:15:90:03:30:1e:9a:f7:d2:b8:c2:8a:2b:
2d:25:5c:86:89:60:10:28:80:a2:d1:18:5c:be:3d:
a0:f9:de:75:55:56:59:ec:fa:41:9d:62:b7:de:24:
4f:de:4f:e7:c0:14:a4:6a:11:84:5a:b5:7d:f6:89:
68:4d:f9:19:4a:07:4c:81:19:91:b2:d0:a7:d5:86:
d5:30:76:0b:94:9b:ac:46:db:80:4f:37:ba:7e:33:
87:14:85:c9:4e:38:de:c7:00:63:f2:2f:83:92:54:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:7D:32:7E:7B:48:6A:D7:25:64:0B:C8:F7:BD:C5:70:42:8C:73
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:72:5a:88:2f:65:e1:8d:69:5d:6f:9b:5e:fe:cd:ae:8a:
61:d5:27:b2:54:9e:e8:37:56:ba:9f:2b:20:6a:a1:cf:ac:2a:
ea:da:a3:b1:95:ce:31:c9:cf:e1:ac:63:7b:c5:65:9d:4b:9e:
ad:b7:8b:82:6b:ea:bf:3d:06:ab:a1:68:cf:e9:d2:df:43:6a:
90:fe:e1:93:ba:b9:92:ae:31:24:9e:9e:8f:5e:80:62:ac:72:
99:e6:ad:ed:46:9d:8e:b4:9a:8a:e9:b6:fc:16:73:0a:58:c1:
55:7f:b4:1a:98:d4:52:2e:a2:99:0b:4e:c2:9d:d7:43:f5:ea:
80:ac:1d:6d:c5:4a:25:02:51:be:e0:d0:de:59:96:d3:ed:38:
4a:6e:b7:ce:70:9d:d4:05:60:ea:2a:f7:2c:87:00:3b:b0:82:
d1:19:5a:ed:b5:c2:3e:26:82:87:44:b5:20:05:d4:09:e2:46:
f1:df:d2:ef:cf:81:53:83:0b:e0:e9:4b:86:51:bc:ed:13:d6:
cf:9e:31:bf:ae:b7:dd:99:4b:fc:c8:7b:68:9a:c9:4b:71:09:
7f:5f:aa:ff:1f:3e:76:7e:cd:0c:9b:2d:93:f0:cb:da:78:ee:
cf:f7:0e:a2:3e:92:e2:5e:97:1c:4e:45:1c:97:c2:c7:60:1d:
14:0e:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:43 2025 by rpki-client