Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: rvRlep+GmpgoHUDTjxXrkf6yqHmRsvUszN3oRt9S64U=
Subject key identifier: E5:2D:F4:E0:84:EF:EA:64:F0:74:4B:86:0D:75:A1:E1:B5:1B:D9:5F
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 019873E1DE3A39D03503E9368332B12062AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 0585
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: HCGD986Og+NVxIDn+W+h3+NrmR6EES5GE83VsydUeOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:de:3a:39:d0:35:03:e9:36:83:32:b1:20:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=e52df4e084efea64f0744b860d75a1e1b51bd95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:bc:2c:8c:e7:15:58:6b:ec:e1:66:ae:69:
59:1e:db:e0:af:7e:fb:6d:26:d2:14:88:c5:34:9d:
45:50:0b:43:0a:66:bb:9f:8c:ea:ca:08:0b:cb:a0:
63:cb:4b:ab:7f:2b:6e:7a:18:af:92:c1:96:39:70:
ce:53:12:0c:f3:79:1e:f7:75:88:3b:18:7a:2d:bb:
88:ea:d6:19:fe:7a:e8:36:5f:16:13:be:73:16:59:
fb:24:1a:ed:61:92:89:7b:9c:c8:d6:c9:9b:c1:63:
60:e6:f8:c9:fc:86:3a:bd:3a:bc:8a:a9:32:04:70:
e0:c5:6d:c5:53:e6:98:9c:4f:76:ff:b0:51:86:67:
ea:5f:c6:01:0f:37:a7:23:79:1f:72:66:bb:91:69:
f9:df:2b:04:0c:bb:45:61:04:4f:80:6c:e8:8e:6e:
71:9b:52:3e:c3:9f:fc:eb:b6:ae:77:88:30:27:93:
04:99:c6:3c:47:54:94:2d:b5:2e:99:81:d0:27:30:
eb:09:dd:61:51:2a:09:02:f0:dd:36:b1:ee:0b:75:
69:51:18:d5:a7:88:c8:c7:a4:52:bb:68:80:40:3b:
b3:37:a8:20:38:b8:a5:fe:19:9b:7e:be:16:92:39:
a9:ed:b8:45:db:19:97:18:db:95:13:d2:5d:11:8f:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:F4:E0:84:EF:EA:64:F0:74:4B:86:0D:75:A1:E1:B5:1B:D9:5F
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:df:ac:a5:67:bb:cd:9d:81:9a:55:96:69:34:08:a2:e0:9d:
50:ec:ca:2c:c4:bf:56:38:4b:68:89:c6:69:1b:65:e3:64:84:
d7:d6:3f:55:66:a9:d7:31:db:1a:c2:15:16:29:c7:13:11:dc:
2e:3e:82:ac:03:a2:a4:fd:8f:30:a2:8f:ad:7b:ab:6f:1b:42:
d0:ec:9e:cc:bc:aa:d9:99:66:52:19:cc:6a:88:5d:96:62:25:
73:0f:51:c2:20:03:5a:3b:84:b5:b1:35:55:6f:28:47:1f:1f:
41:3b:c8:91:06:c3:db:53:1a:d1:e1:70:21:a3:14:b3:be:6d:
1b:38:45:c6:64:b7:12:4a:77:66:24:bd:8f:dd:f7:0f:59:b4:
25:ae:5b:14:ca:25:6f:cc:6d:ba:e9:80:2f:ea:13:50:d2:14:
fd:df:fd:79:36:16:18:4d:49:89:43:ea:f5:2e:61:9d:53:94:
06:75:0a:78:19:d1:90:09:d6:7e:f9:99:6c:fc:ad:af:fd:10:
c3:fa:73:0d:49:92:93:85:f4:04:3a:63:2b:ee:dd:d4:54:7d:
92:d8:16:58:72:c1:73:3b:09:01:e8:1e:a0:e6:27:27:dd:d6:
16:df:c9:a6:02:89:14:57:48:b3:41:ea:92:a4:d0:b2:80:b2:
39:96:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:14 2025 by rpki-client