Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: RQ8w6A1KcCNOhgpxE7BND+IApVlbf5hGLF0JvJ1fIRQ=
Subject key identifier: 5B:B2:DC:44:2D:59:A4:70:C0:8C:3E:A6:EB:79:39:1A:01:01:C0:39
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0199FB4636B6257A463314099A71A4C5BF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 10B4
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: eo868PDWqPG/dTWL0DcOvbj/T88YozkVDe8F2Zxd0s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:36:b6:25:7a:46:33:14:09:9a:71:a4:c5:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=5bb2dc442d59a470c08c3ea6eb79391a0101c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ef:f3:c5:48:ef:d7:81:78:1e:24:de:d9:98:
81:1a:87:af:0b:e7:f9:96:c9:f1:16:4a:44:f6:87:
62:e4:b1:db:fc:04:bf:82:47:eb:30:e8:08:94:6b:
7d:c8:e5:f5:4a:0b:8c:b0:03:1e:94:97:c4:0d:ec:
25:01:98:2e:01:80:b9:c3:5e:7d:ba:91:93:1a:51:
4b:5d:a0:bf:5f:31:25:a3:c2:7d:de:2d:c7:43:7c:
23:62:e8:08:1f:86:c5:23:71:0f:1b:9e:a0:73:c9:
aa:64:fe:82:28:b9:f9:36:44:7c:cd:bd:98:81:0e:
0f:35:7f:c2:d5:56:42:a0:f4:5b:8c:b0:d0:83:73:
82:a0:2c:4c:33:2f:e0:49:19:c4:5e:8e:da:f2:86:
00:27:4a:c3:05:76:89:f3:8c:9d:c9:b4:89:b0:aa:
4d:78:2f:a7:d4:8a:21:45:bc:4c:ab:4c:47:8b:cc:
25:00:1b:85:0b:48:52:17:a1:a1:e5:36:ee:11:a2:
a6:c3:72:96:17:81:73:4b:0b:0a:20:ae:b8:74:38:
d3:fe:21:74:d7:b1:09:ba:06:ef:14:e2:1b:d7:79:
84:6a:9f:8a:56:8c:ad:26:79:42:e8:4d:5f:b4:de:
59:8f:07:89:35:c8:8a:c9:c6:59:21:8a:6e:24:12:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:DC:44:2D:59:A4:70:C0:8C:3E:A6:EB:79:39:1A:01:01:C0:39
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bf:39:f2:c0:dd:ed:8a:ba:e4:bf:e3:27:3f:d8:f1:8a:1f:
df:99:af:ab:05:be:5f:3a:4c:3c:95:f8:5d:a5:4b:a4:ea:e6:
6b:35:46:c7:53:23:bc:1e:58:d1:36:59:25:4e:c2:a4:bd:e5:
b9:ea:d1:96:8c:35:79:54:55:37:24:ff:65:f4:66:da:dd:de:
fa:9c:49:a5:e7:a1:40:5f:4f:47:43:35:69:7d:13:34:22:4a:
0e:c9:3d:8c:f7:c2:81:15:b0:b2:97:d1:06:d5:0c:e8:2e:3b:
3b:09:09:90:56:c2:e4:bc:56:f1:ad:53:9e:31:78:16:68:db:
9e:bc:e9:15:ab:dd:cd:e0:20:9f:7d:bf:84:79:7e:5c:98:27:
0f:4f:84:37:e9:e0:28:8e:1d:51:ab:b0:a7:9d:66:4b:67:2c:
e9:d0:47:01:f1:58:17:9c:cc:82:a0:c1:e6:e9:76:eb:f8:c3:
f7:f8:f7:aa:88:5d:d8:cb:75:f8:d1:2e:cd:ef:fb:d2:8e:7e:
1a:2f:37:cc:c2:0a:5a:a7:9c:8b:d2:08:73:b9:35:19:ba:07:
b6:80:58:b1:6e:29:5f:e2:a1:d3:d5:71:2e:cb:02:26:44:dd:
d0:73:6a:0d:28:24:08:f6:e5:be:b7:cc:9a:91:29:72:e4:6d:
92:f9:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:16 2025 by rpki-client