Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: eWcn8J8PcJ8IoVQ27wDUkAL+z5yVf53Qm3SSkA2JAe8=
Subject key identifier: 07:30:10:82:52:C1:9E:C1:CC:39:1E:03:FC:F7:07:7D:EA:8D:F0:82
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0197711AF72A8F440EB85F81320AF80CF6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 04FF
Signing time: Sun 15 Jun 2025 01:01:21 +0000
Manifest this update: Sun 15 Jun 2025 01:01:21 +0000
Manifest next update: Mon 16 Jun 2025 01:01:21 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: 7ASsWCNzdn1eotw5Y3wE5/M8OAbWy9D5EKK7nocJtAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:f7:2a:8f:44:0e:b8:5f:81:32:0a:f8:0c:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Jun 15 01:01:21 2025 GMT
Not After : Jun 16 01:01:21 2025 GMT
Subject: CN=0730108252c19ec1cc391e03fcf7077dea8df082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5b:58:41:fe:40:17:8e:8e:7c:80:81:91:4f:
6e:37:4e:2b:fc:89:7d:11:df:a8:cb:e7:57:59:34:
16:f6:92:3f:b9:e2:2b:68:a9:bb:07:d1:2e:88:5e:
cf:a9:88:b8:4a:69:81:d9:f0:8d:f4:c2:d4:4a:55:
a6:ce:61:8b:df:df:1a:74:41:0a:fc:43:ad:87:40:
53:e6:48:3c:4b:39:7e:42:01:5b:99:19:9e:29:42:
1d:60:8d:ea:e0:2c:af:4f:5f:45:e4:5a:d7:33:70:
95:a0:5c:80:b1:c5:15:73:41:33:12:67:4d:20:3c:
04:67:5d:17:d9:6b:cc:bf:ed:61:68:ec:d9:d8:5c:
5a:a4:54:03:59:bf:9d:1b:27:68:6c:b2:d7:14:94:
05:f1:c3:33:bd:07:8c:53:ba:57:4b:f2:28:e9:e6:
42:a9:a3:40:95:56:c1:25:17:19:65:3e:59:13:88:
ab:34:77:03:fd:32:c0:08:78:af:4a:7c:13:08:f9:
8c:64:af:81:c7:ea:56:8f:50:5b:66:cd:42:cc:d8:
89:38:41:16:93:c9:d0:33:d0:c0:2d:27:3c:b7:79:
b8:47:62:e6:94:ab:09:9e:1e:f2:4f:20:fb:06:98:
57:85:37:49:fb:65:47:e4:2d:43:b2:d4:c6:5b:96:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:30:10:82:52:C1:9E:C1:CC:39:1E:03:FC:F7:07:7D:EA:8D:F0:82
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d4:8d:e3:77:10:c8:85:bd:2d:0c:d8:01:26:42:f4:50:0f:
94:0d:d8:20:05:17:5d:ef:38:bb:ad:40:20:43:12:c2:ae:fa:
5e:81:99:9d:3b:d6:d9:2a:1a:46:ac:0b:4b:2a:35:d7:86:34:
59:23:43:61:31:be:ac:3c:ef:bb:09:5b:78:38:26:e9:28:2d:
9c:1f:bc:9c:7e:78:6e:08:3f:c1:c9:35:0b:99:88:88:09:8a:
cc:62:e9:2c:88:ab:97:9e:d7:6e:ff:6d:2b:f6:47:6d:7b:22:
b9:7b:4b:00:a3:cc:15:ec:07:fb:70:ab:76:46:be:33:08:8a:
cd:60:5a:b0:b8:1a:d7:5d:73:08:6c:df:1f:4d:7b:91:01:b4:
fb:74:b6:87:a0:22:22:2a:a3:e9:ca:b3:51:5b:45:ad:d8:45:
cc:74:4b:9b:bc:7e:5f:8c:57:2b:ea:f5:ab:14:a6:d8:73:8e:
57:15:6b:9d:cf:7b:ea:54:f5:48:eb:68:aa:4a:56:38:f8:9c:
d0:77:98:b9:67:23:fb:d7:fe:03:57:a2:a3:e9:3a:bd:2b:dd:
67:e4:eb:dc:db:22:c8:5f:86:c0:66:a3:81:d2:07:af:89:2e:
a0:05:a1:41:b8:ee:08:a2:53:eb:1d:18:40:94:75:74:a5:e9:
6a:0c:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:08 2025 by rpki-client