Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: nMJXdCtzXc0QYCVNfMUSkHJVzA2WALCOHLCWWgd5yF0=
Subject key identifier: 3C:6B:CA:29:10:14:F7:15:6D:5C:5C:65:CC:5F:B5:3C:DF:F7:68:B4
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0196760C5AB7021B7C66448BCBDC04837614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 047D
Signing time: Sun 27 Apr 2025 07:00:43 +0000
Manifest this update: Sun 27 Apr 2025 07:00:43 +0000
Manifest next update: Mon 28 Apr 2025 07:00:43 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: m8h5ckeSY4yI9Nj6f4Y2fnJtTgW5Trjo4QRUuAR7xag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:5a:b7:02:1b:7c:66:44:8b:cb:dc:04:83:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Apr 27 07:00:43 2025 GMT
Not After : Apr 28 07:00:43 2025 GMT
Subject: CN=3c6bca291014f7156d5c5c65cc5fb53cdff768b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:fc:3d:a1:8e:f1:5c:f0:77:e9:a7:64:43:
06:7e:23:8b:49:e1:62:b8:17:06:b2:e6:f7:72:45:
df:a5:b6:6e:ea:5f:fc:e4:e5:32:fc:18:b6:22:83:
f8:ec:eb:62:fa:a2:92:67:f5:12:a2:da:41:c9:57:
81:93:aa:c9:ad:5c:1a:74:93:a5:8b:05:33:e8:e2:
ab:89:f8:d8:d2:dd:db:9a:24:5f:69:bc:83:62:c2:
d2:c0:c5:1c:a9:e8:46:6f:69:4f:e6:d8:0a:69:54:
70:f3:4b:39:86:c4:8f:89:05:27:31:c5:46:2e:6a:
90:b7:1f:d4:2d:bc:54:c4:18:1d:0c:1d:12:64:12:
ed:54:71:4b:62:61:6f:bc:0c:87:7e:ca:61:e7:ac:
67:8e:f2:cb:98:ed:4b:3c:b9:86:dc:7b:f1:3c:af:
00:89:6b:2e:2f:30:80:af:94:f5:43:0a:da:b1:a4:
4d:12:1d:d3:fd:e2:59:85:b3:be:63:07:48:87:fc:
52:d4:87:e8:e4:fc:b9:bb:e5:90:fa:ae:d9:2a:34:
fa:91:19:15:1c:b6:06:b3:88:32:88:30:e9:33:e8:
bd:6d:43:76:52:04:f1:6c:37:1d:df:c5:98:60:65:
7f:16:50:7c:cb:e4:08:94:1c:ac:c1:00:55:20:af:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:CA:29:10:14:F7:15:6D:5C:5C:65:CC:5F:B5:3C:DF:F7:68:B4
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:8d:cd:ff:5c:ba:7a:18:2f:b1:6f:f8:25:d6:6d:1c:8b:
99:4b:60:79:a3:a3:91:93:4a:c1:93:4c:0c:bb:5f:26:f6:03:
84:e2:52:27:62:8e:5d:1b:db:dd:ae:4a:64:b6:d3:af:5d:0c:
98:54:d9:2e:49:48:97:30:89:4f:25:63:83:81:ba:41:5c:a5:
ff:36:52:f8:cd:be:f7:dd:d7:68:c3:8a:0f:bf:8b:29:e1:c4:
14:90:72:6f:86:3e:ff:9b:4c:6b:eb:26:70:49:ff:d7:f5:5a:
03:b7:a2:d8:4e:1f:a6:42:eb:81:cd:c1:26:69:bd:dc:f9:1e:
4a:ea:09:37:67:6b:0d:f4:a8:be:ac:36:84:4f:65:a9:60:f7:
7e:03:61:2d:c8:32:d6:6b:7e:1c:19:7e:99:d6:e9:e4:61:4c:
07:39:6f:59:3f:67:1f:8c:02:ea:76:c5:a4:a0:b0:b0:d6:8c:
ea:50:09:2c:68:31:9e:33:fb:32:7b:3e:f1:be:a9:07:bd:f8:
03:a2:04:e3:a8:b8:56:e2:c2:a4:c5:8d:b8:7a:e0:b4:0e:20:
6a:a2:4c:15:d7:0f:2c:ab:cb:5d:a3:15:a9:82:2f:78:c3:e7:
b1:a9:be:e5:7c:49:b0:8c:f6:91:cc:c2:50:e1:5a:7f:b4:79:
57:ba:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:21:07 2025 by rpki-client