Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: nENVQ65elUxBJzX7uOSYM+WTzhg4YBuGNyMGyHlRHew=
Subject key identifier: 5A:57:CD:55:43:8F:2A:7B:C8:2D:EF:87:89:72:61:A3:43:C7:B8:87
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0198D5BBCB3FEED8EC5A4552E6E1C404E6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 101C
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: u+/FT/YFkWjkeKh/q5305tUc+Oc0wF/Qoiz1d1SEiRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cb:3f:ee:d8:ec:5a:45:52:e6:e1:c4:04:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=5a57cd55438f2a7bc82def87897261a343c7b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:cc:de:17:95:e5:e7:19:ef:9e:1c:49:bb:
87:38:8a:82:b0:36:41:f2:ba:be:76:0f:47:90:0b:
da:e5:be:2f:b9:8b:bd:24:ae:cd:18:86:c9:0a:f5:
23:6e:bc:a5:91:fe:69:f5:cd:3d:d4:f0:1b:d8:e9:
c7:e5:8f:19:b9:f1:6c:47:50:00:d4:20:b2:55:50:
b1:21:6f:bc:b0:c0:04:cc:f4:5a:b4:dd:ec:a5:fb:
42:11:a7:61:38:d4:fc:89:16:51:e2:68:c1:3f:d2:
05:83:d1:48:37:7b:b3:06:76:22:5d:2e:83:98:2e:
ce:3f:ea:ea:c8:5b:0b:c3:0c:97:66:e2:e1:33:0d:
57:d0:0c:1e:14:cb:66:9b:f9:97:87:1a:97:cb:01:
17:6d:ea:c3:a6:96:57:07:cb:cd:65:bf:88:44:b4:
24:9b:2f:77:e7:27:43:8f:13:37:d5:aa:b5:0a:4b:
8f:f3:19:92:71:59:95:f9:a6:4c:7f:67:23:e2:37:
08:81:b3:b9:83:2a:a9:09:82:36:49:60:1a:cc:a8:
44:35:6d:75:3d:5a:ff:1d:1d:bf:d5:a9:2f:fa:81:
99:22:43:4e:ae:41:2b:25:35:5e:e0:65:db:87:05:
45:81:84:19:4e:d8:07:2c:de:93:75:31:e1:80:fc:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:CD:55:43:8F:2A:7B:C8:2D:EF:87:89:72:61:A3:43:C7:B8:87
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7b:84:e5:65:a3:ff:b2:5d:07:e6:d3:c1:66:ba:20:e7:2d:
4f:a0:b1:72:5a:c6:82:ae:6c:66:f9:07:15:16:0d:03:1f:db:
6f:e4:9d:fb:7e:55:9c:93:27:9a:c9:90:05:7d:ba:0b:9c:76:
a5:14:34:ae:49:c0:9c:3f:c0:e0:38:58:93:2a:32:23:52:da:
cf:a5:f5:5e:04:07:5b:fe:db:cf:f4:37:cb:0d:78:18:c5:b2:
3d:e0:27:b2:d6:ba:59:c9:71:9a:78:93:ed:c9:0f:2d:ee:ad:
ca:71:5f:80:1b:50:16:a8:46:f2:65:e5:66:a5:59:1b:8a:6f:
e6:40:08:c3:b6:0d:e7:8e:23:54:45:59:18:7f:04:06:6d:c1:
b9:16:db:f5:37:a4:4f:b1:87:5e:b8:fa:de:ca:29:00:1e:bc:
5b:8e:4d:f2:6e:ca:0a:f1:65:47:6e:14:a1:c3:2c:15:b1:07:
d3:db:c1:1c:43:0a:54:e1:f4:88:f0:7a:81:e8:59:3c:26:9c:
80:e3:e9:39:d8:fc:c5:90:cd:e0:28:4f:c8:a1:40:3e:f0:f8:
91:b5:a9:75:34:3c:43:8b:6a:1e:6f:fd:37:20:a0:17:c1:a1:
a1:18:11:12:e7:42:be:ab:5f:05:65:7b:9e:72:4b:2e:71:b9:
df:a5:5c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8s/7tjsWkVS5uHEBObHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjUwODIzMDcwMTUwWhcNMjUwODI0MDcwMTUwWjAzMTEwLwYDVQQD
Eyg1YTU3Y2Q1NTQzOGYyYTdiYzgyZGVmODc4OTcyNjFhMzQzYzdiODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzHM3heV5ecZ754cSbuHOIqCsDZB
8rq+dg9HkAva5b4vuYu9JK7NGIbJCvUjbrylkf5p9c091PAb2OnH5Y8ZufFsR1AA
1CCyVVCxIW+8sMAEzPRatN3spftCEadhONT8iRZR4mjBP9IFg9FIN3uzBnYiXS6D
mC7OP+rqyFsLwwyXZuLhMw1X0AweFMtmm/mXhxqXywEXberDppZXB8vNZb+IRLQk
my935ydDjxM31aq1CkuP8xmScVmV+aZMf2cj4jcIgbO5gyqpCYI2SWAazKhENW11
PVr/HR2/1akv+oGZIkNOrkErJTVe4GXbhwVFgYQZTtgHLN6TdTHhgPwhMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpXzVVDjyp7yC3vh4lyYaNDx7iHMB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXuE5WWj
/7JdB+bTwWa6IOctT6CxclrGgq5sZvkHFRYNAx/bb+Sd+35VnJMnmsmQBX26C5x2
pRQ0rknAnD/A4DhYkyoyI1Laz6X1XgQHW/7bz/Q3yw14GMWyPeAnsta6WclxmniT
7ckPLe6tynFfgBtQFqhG8mXlZqVZG4pv5kAIw7YN544jVEVZGH8EBm3BuRbb9Tek
T7GHXrj63sopAB68W45N8m7KCvFlR24UocMsFbEH09vBHEMKVOH0iPB6gehZPCac
gOPpOdj8xZDN4ChPyKFAPvD4kbWpdTQ8Q4tqHm/9NyCgF8GhoRgREudCvqtfBWV7
nnJLLnG536VcPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:10 2025 by rpki-client