Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: 9HUgCQ7E3TE44RytTlhtwQRBjzLhIIPMRJi2IoTVfy8=
Subject key identifier: 9B:77:D6:B1:E7:6D:83:37:C8:1B:91:B4:43:8B:44:EF:91:17:76:E6
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0199FBEAC21DA08358EC99910E8BE0964522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 0650
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: f4FUUvN4hEtamyyOkWHIEni5mHfJS8YyBNGwj2MgwCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c2:1d:a0:83:58:ec:99:91:0e:8b:e0:96:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=9b77d6b1e76d8337c81b91b4438b44ef911776e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:99:62:87:71:08:4a:db:fc:e0:c1:90:72:
68:79:3a:d2:e2:dc:69:b3:c1:eb:25:d8:6d:cb:9f:
5d:e9:70:74:13:91:83:1f:64:92:b8:47:72:4a:2d:
ed:71:80:c1:73:7f:68:6f:13:81:ea:1c:e9:f1:79:
66:ae:c6:14:09:71:88:05:4a:63:c0:97:a9:f1:fa:
2a:59:13:b4:5a:f5:f4:c0:91:ec:eb:9a:07:52:8c:
f6:98:17:43:3f:2d:9a:aa:f2:fd:db:69:b6:21:cd:
d9:c4:af:8a:b1:0f:52:70:23:ae:02:7d:58:d9:ea:
a7:6d:51:f1:22:5f:c8:c0:11:e0:cd:81:19:4a:ec:
a0:1e:be:05:e6:46:6d:b4:01:e2:b3:05:3a:6f:4d:
4d:92:bd:37:6b:45:38:13:8b:2e:0a:02:9b:36:83:
75:1a:4c:1c:f9:cc:e4:4b:2a:59:0b:75:0d:f7:67:
c9:5c:af:ec:76:f5:4e:d6:2a:99:b7:c5:4f:0f:67:
35:bd:05:4b:6e:69:17:ef:1d:49:b6:db:30:de:10:
88:08:79:9a:bc:84:70:06:7c:34:15:ec:f8:60:ec:
d7:04:1c:30:c3:92:e8:80:08:3e:83:f2:f7:1a:80:
75:bb:26:16:35:71:3c:f3:31:10:ad:fa:92:4f:bc:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:D6:B1:E7:6D:83:37:C8:1B:91:B4:43:8B:44:EF:91:17:76:E6
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:66:e5:76:7c:f2:f9:62:09:a1:ec:31:01:84:f2:47:bb:
6f:90:d8:cc:e2:de:1d:00:b6:be:84:20:20:32:51:c2:b5:77:
1f:8b:70:8b:d4:5d:ec:e7:f5:d3:cc:5a:be:a2:83:53:06:90:
22:d7:76:ba:86:33:81:8f:ea:d2:f4:f6:ae:b2:33:8d:82:b5:
f6:e0:09:ad:f1:b7:03:c8:2d:ba:e6:82:ba:32:8f:03:ef:77:
b7:9e:63:19:a2:9c:96:cd:76:e9:43:26:75:2a:32:7c:79:a4:
c8:a7:4f:4f:74:50:dc:2d:56:11:42:84:8f:42:dc:c7:a5:f9:
88:4d:e5:d8:24:6a:83:fb:96:d6:4f:58:56:e2:51:4f:19:83:
b8:65:ba:53:ec:9c:22:f5:87:93:50:aa:2b:66:0a:6b:5c:8a:
e8:c2:3d:f6:16:eb:f0:75:a3:9c:cd:85:b7:38:fd:5b:1e:12:
94:1d:e0:a9:5e:cb:bc:fc:6f:cf:27:e0:f1:d3:9c:f6:0d:d3:
7d:cd:28:8f:3a:0a:83:ea:6d:4e:c0:69:51:ff:4f:5e:0c:4b:
1a:07:54:4b:30:72:14:0d:a2:bb:78:5c:14:70:85:46:78:0b:
d2:ce:16:af:c7:f3:2b:e4:cd:2f:0f:4d:d9:b1:92:7c:75:0c:
8d:ef:2c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client