Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
File: S-kta__jOfozYb97dSNWcWpq2Ao.mft (raw, json)
Hash identifier: lmY13qEhljYWObzqxOC35vakKGwUEMIXvzpXYq4CBdE=
Subject key identifier: CA:18:F0:1C:F7:94:46:D3:E3:3A:AB:46:F5:A5:C8:87:C7:1E:27:71
Authority key identifier: 4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
Certificate issuer: /CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Certificate serial: 0198D65F36AA42CB53A240F3B9FA8CF7D906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
Manifest number: 05B8
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: S-kta__jOfozYb97dSNWcWpq2Ao.crl (hash: Vs+ju+TwyiiTLNb1LSrtCJ8DQeBfbfFFEZZqVRQF6Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:36:aa:42:cb:53:a2:40:f3:b9:fa:8c:f7:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be92d6bffe339fa3361bf7b752356716a6ad80a
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=ca18f01cf79446d3e33aab46f5a5c887c71e2771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:20:05:b5:e4:13:29:88:39:1c:f4:00:6f:
ad:89:b2:ec:60:09:46:c9:c2:14:8d:77:48:39:74:
37:12:f5:6a:ae:16:03:b6:22:a2:5f:09:27:4a:5e:
9b:28:62:5a:f4:ae:c2:b8:aa:8c:0d:7c:28:1e:77:
cb:46:cd:f5:b1:2d:3b:51:4c:68:74:0c:a7:01:5d:
98:a2:04:07:e6:72:6a:41:6f:84:72:71:51:bc:19:
8b:cb:e5:8f:8c:9d:79:24:50:70:e2:22:03:0b:c6:
27:f9:ab:82:24:34:a6:01:a8:4e:cd:99:0d:86:04:
1c:c3:87:a7:f7:1e:8c:05:d7:c3:04:85:70:e7:8a:
dc:55:f1:4f:7b:5e:c3:e1:02:56:4b:ea:13:3e:e3:
7d:bb:d8:a4:2a:0f:5c:81:6e:3f:41:f9:e7:26:98:
2d:59:f8:f2:e7:04:a6:a1:48:9d:71:27:87:98:86:
e6:13:63:b4:8d:e8:c8:79:16:c2:71:31:7a:ac:18:
6a:03:75:10:88:74:59:4c:19:2e:c5:61:b7:32:29:
85:fd:f1:28:83:fd:37:73:ea:8e:c3:3a:4f:dd:1a:
a2:ea:85:56:fc:40:94:45:fb:26:4c:bf:1d:bd:75:
5c:82:9b:ca:43:3c:9f:11:ff:1c:80:c2:cf:1f:95:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:F0:1C:F7:94:46:D3:E3:3A:AB:46:F5:A5:C8:87:C7:1E:27:71
X509v3 Authority Key Identifier:
keyid:4B:E9:2D:6B:FF:E3:39:FA:33:61:BF:7B:75:23:56:71:6A:6A:D8:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kta__jOfozYb97dSNWcWpq2Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cc7058-95c4-490b-9f12-5870064d81b7/1/S-kta__jOfozYb97dSNWcWpq2Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:86:56:9b:5b:11:ef:26:2b:56:b9:65:e1:4f:05:06:b1:
1c:60:22:bf:0f:1f:02:81:7b:c3:66:0d:56:97:b2:3e:f4:08:
2d:1d:c7:b2:fc:ab:36:5d:de:6d:d5:98:7a:15:f2:6f:fa:12:
ac:9a:9c:5c:4c:68:8a:bd:7f:e9:f8:46:b4:5a:92:bf:db:61:
bb:c8:f9:63:11:a4:57:97:12:73:91:5b:d5:f6:66:e1:71:bf:
2b:d2:0a:df:c2:0f:69:b6:22:53:49:5e:15:47:0f:18:ca:d2:
e3:d5:6b:1d:2f:fd:fa:08:c4:5a:aa:11:ac:c0:18:57:fa:31:
1e:ee:82:52:3b:ac:b6:24:b0:db:dd:e0:4f:48:a6:1e:ec:9d:
b0:dd:4f:7d:d6:07:40:e5:6a:a6:cf:d9:58:9c:3f:07:1a:df:
b1:57:23:bd:4f:c3:06:03:af:74:fc:06:6b:a7:d9:23:2c:63:
47:dd:f0:9c:d4:f1:c0:9b:a9:4b:b2:59:4f:c8:e6:b5:86:1d:
10:48:35:af:ad:3f:c8:31:60:95:10:fe:7d:20:26:d3:47:2c:
aa:9b:4e:1c:37:d8:56:66:35:1c:b8:ae:58:2c:39:a9:82:c1:
c3:13:b0:d7:f9:74:db:85:10:92:c1:07:62:53:c4:e7:89:7e:
91:bb:98:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzaqQstTokDzufqM99kGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTkyZDZiZmZlMzM5ZmEzMzYxYmY3Yjc1MjM1NjcxNmE2
YWQ4MGEwHhcNMjUwODIzMTAwMDIwWhcNMjUwODI0MTAwMDIwWjAzMTEwLwYDVQQD
EyhjYTE4ZjAxY2Y3OTQ0NmQzZTMzYWFiNDZmNWE1Yzg4N2M3MWUyNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ggBbXkEymIORz0AG+tibLsYAlG
ycIUjXdIOXQ3EvVqrhYDtiKiXwknSl6bKGJa9K7CuKqMDXwoHnfLRs31sS07UUxo
dAynAV2YogQH5nJqQW+EcnFRvBmLy+WPjJ15JFBw4iIDC8Yn+auCJDSmAahOzZkN
hgQcw4en9x6MBdfDBIVw54rcVfFPe17D4QJWS+oTPuN9u9ikKg9cgW4/QfnnJpgt
Wfjy5wSmoUidcSeHmIbmE2O0jejIeRbCcTF6rBhqA3UQiHRZTBkuxWG3MimF/fEo
g/03c+qOwzpP3Rqi6oVW/ECURfsmTL8dvXVcgpvKQzyfEf8cgMLPH5WKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoY8Bz3lEbT4zqrRvWlyIfHHidxMB8GA1UdIwQY
MBaAFEvpLWv/4zn6M2G/e3UjVnFqatgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTIt
NTg3MDA2NGQ4MWI3LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jYzcwNTgtOTVjNC00OTBiLTlmMTItNTg3MDA2NGQ4MWI3
LzEvUy1rdGFfX2pPZm96WWI5N2RTTldjV3BxMkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdASGVptb
Ee8mK1a5ZeFPBQaxHGAivw8fAoF7w2YNVpeyPvQILR3HsvyrNl3ebdWYehXyb/oS
rJqcXExoir1/6fhGtFqSv9thu8j5YxGkV5cSc5Fb1fZm4XG/K9IK38IPabYiU0le
FUcPGMrS49VrHS/9+gjEWqoRrMAYV/oxHu6CUjustiSw293gT0imHuydsN1PfdYH
QOVqps/ZWJw/BxrfsVcjvU/DBgOvdPwGa6fZIyxjR93wnNTxwJupS7JZT8jmtYYd
EEg1r60/yDFglRD+fSAm00csqptOHDfYVmY1HLiuWCw5qYLBwxOw1/l024UQksEH
YlPE54l+kbuYEA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:10 2025 by rpki-client