Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: HS5x8rhzHtZdeBm8J4nPzyT+Ycy3PYXqFBCXHsMSLYo=
Subject key identifier: 01:AC:C1:06:8B:C1:E5:55:71:F1:F0:5E:58:1C:F8:5F:51:51:19:45
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019A4EF498BC0CCE675137B70DD2FE52A8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 067B
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: ql6nB9Xr4Vy5HnUq/WJubMV4sZaAl1KhNMevAn0ZwQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:98:bc:0c:ce:67:51:37:b7:0d:d2:fe:52:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=01acc1068bc1e55571f1f05e581cf85f51511945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:e9:a9:87:4f:af:20:5f:d6:d0:6d:11:88:
59:74:40:db:1d:38:a0:0f:15:31:b4:cf:7f:48:3d:
d1:57:49:ca:5f:bb:2f:dc:69:d1:52:d2:5e:70:c9:
e5:ff:8b:d6:d0:21:ff:56:14:a8:06:6f:d3:95:1c:
8f:69:de:9e:47:86:9b:05:95:ac:9c:6a:52:21:c7:
24:9f:93:0f:54:27:7a:be:4c:55:f6:9d:08:a8:ee:
d1:b9:b8:50:a1:a9:84:9c:57:83:bf:71:3b:a8:fd:
65:b2:50:7f:51:9a:03:d0:36:7d:dd:56:a5:c9:c0:
c6:7c:b4:76:b9:ac:2e:2b:5a:95:66:a4:a6:91:5c:
bd:37:97:4b:1f:08:74:ef:96:ac:23:10:e5:57:d9:
cd:cc:21:03:a2:b7:5d:ee:3e:a7:ac:0e:ae:5a:68:
a2:52:d7:67:7e:f4:9d:92:16:a8:01:8b:40:4e:da:
63:c0:a4:de:89:cd:e5:a1:86:ff:f1:ec:69:17:ae:
0d:8b:17:6a:22:e9:b2:b7:0c:2a:59:1c:fd:43:f7:
ca:07:f1:55:eb:a3:3d:ec:8f:67:17:45:01:2e:25:
55:57:0d:39:5e:79:81:ec:ff:21:78:7c:95:d9:67:
a6:4b:8a:10:6a:ae:e7:43:42:d8:c8:84:ea:12:40:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:C1:06:8B:C1:E5:55:71:F1:F0:5E:58:1C:F8:5F:51:51:19:45
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0d:15:8a:76:95:18:14:d3:12:fd:43:05:b4:0b:5d:46:44:
e2:d2:72:60:73:b2:c1:99:d0:51:a3:52:ba:21:c7:2b:5f:44:
fd:99:4b:01:8e:4c:f5:67:68:ae:05:44:8e:a9:63:41:b8:3a:
0f:69:14:8a:12:af:7b:aa:71:33:33:e1:88:0f:c8:3f:8f:45:
62:7b:ca:0b:b6:39:45:4f:5f:dd:d8:2e:bf:01:3d:d4:4e:d0:
d8:18:32:e0:9f:7f:89:d0:c6:d6:17:74:1b:6c:8a:54:28:03:
24:e2:51:88:b3:26:f0:51:ea:4a:b6:5a:2b:c7:51:9a:2a:fc:
95:8c:22:be:51:12:d8:25:ec:03:ee:89:b2:e3:e5:2b:c3:bf:
19:dc:76:1f:1d:90:96:95:18:bb:82:62:dd:8f:4e:d5:68:e7:
89:be:65:3e:26:7f:25:89:81:9d:18:f7:99:aa:9a:e1:c7:b1:
64:b9:1d:a7:e6:4c:b1:7c:84:ac:01:9d:d9:ce:11:88:b8:61:
7a:cf:bf:3f:43:08:46:48:cb:a2:f1:27:fa:21:9f:2a:f4:28:
ef:e1:7d:e7:af:43:f2:c4:ba:6f:51:20:78:5a:ac:cb:75:da:
ca:52:8b:57:43:61:37:39:70:95:39:0e:9c:ab:3c:12:be:87:
85:d5:89:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ji8DM5nUTe3DdL+UqjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTkyZDZiZmZlMzM5ZmEzMzYxYmY3Yjc1MjM1NjcxNmE2
YWQ4MGEwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD
EygwMWFjYzEwNjhiYzFlNTU1NzFmMWYwNWU1ODFjZjg1ZjUxNTExOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTpqYdPryBf1tBtEYhZdEDbHTig
DxUxtM9/SD3RV0nKX7sv3GnRUtJecMnl/4vW0CH/VhSoBm/TlRyPad6eR4abBZWs
nGpSIcckn5MPVCd6vkxV9p0IqO7RubhQoamEnFeDv3E7qP1lslB/UZoD0DZ93Val
ycDGfLR2uawuK1qVZqSmkVy9N5dLHwh075asIxDlV9nNzCEDordd7j6nrA6uWmii
UtdnfvSdkhaoAYtATtpjwKTeic3loYb/8expF64NixdqIumytwwqWRz9Q/fKB/FV
66M97I9nF0UBLiVVVw05XnmB7P8heHyV2WemS4oQaq7nQ0LYyITqEkBggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGswQaLweVVcfHwXlgc+F9RURlFMB8GA1UdIwQY
MBaAFEvpLWv/4zn6M2G/e3UjVnFqatgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTIt
NTg3MDA2NGQ4MWI3LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTItNTg3MDA2NGQ4MWI3
LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQ0VinaV
GBTTEv1DBbQLXUZE4tJyYHOywZnQUaNSuiHHK19E/ZlLAY5M9WdorgVEjqljQbg6
D2kUihKve6pxMzPhiA/IP49FYnvKC7Y5RU9f3dguvwE91E7Q2Bgy4J9/idDG1hd0
G2yKVCgDJOJRiLMm8FHqSrZaK8dRmir8lYwivlES2CXsA+6JsuPlK8O/Gdx2Hx2Q
lpUYu4Ji3Y9O1Wjnib5lPiZ/JYmBnRj3maqa4cexZLkdp+ZMsXyErAGd2c4RiLhh
es+/P0MIRkjLovEn+iGfKvQo7+F9569D8sS6b1EgeFqsy3XaylKLV0NhNzlwlTkO
nKs8Er6HhdWJyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:01 2025 by rpki-client