Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: Xssfo4SreXDC4y8D+jvBlxf4rsHRekDK01nQKhpkKOk=
Subject key identifier: 94:1E:B3:E1:54:C8:FE:88:AC:D2:E6:87:97:C3:DC:0F:9C:B4:20:F8
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0197C56ED39D35826EC26C066B745FA25F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0F8F
Signing time: Tue 01 Jul 2025 10:01:04 +0000
Manifest this update: Tue 01 Jul 2025 10:01:04 +0000
Manifest next update: Wed 02 Jul 2025 10:01:04 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: XAeTvuDxXHxGMZJqhpIgU0hkbR4uG7w+Npmi/o1V+2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:d3:9d:35:82:6e:c2:6c:06:6b:74:5f:a2:5f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jul 1 10:01:04 2025 GMT
Not After : Jul 2 10:01:04 2025 GMT
Subject: CN=941eb3e154c8fe88acd2e68797c3dc0f9cb420f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:64:b9:8b:8b:af:9d:a3:f9:a6:9f:45:1f:
2a:43:f2:db:66:fb:40:4f:9d:40:b9:50:60:9f:e3:
56:6c:25:39:3e:a9:2c:6c:ad:cb:c8:12:1e:9b:06:
9d:8a:ec:e4:3a:ab:cd:05:39:fa:fa:d0:ba:c4:4b:
90:7f:eb:35:ba:d3:c7:8f:7f:3e:d4:ae:22:fd:82:
ea:24:60:bb:0b:32:54:d9:2b:2b:8d:0d:51:16:4e:
54:23:31:c4:3e:74:b8:26:dc:43:0c:f3:a2:29:c3:
d4:30:7c:1b:4a:09:cf:64:bf:48:1e:ef:d3:93:51:
4a:4a:47:6f:96:06:85:a1:bc:1d:a4:7d:4c:ef:21:
08:49:60:6a:4e:6b:7c:94:09:0c:8a:c3:12:13:0b:
9a:e4:b2:64:d1:44:1a:bc:0f:19:71:65:0b:6a:15:
81:55:f7:3e:86:0e:a5:70:6e:46:86:e7:90:1b:7b:
f2:1e:9b:ab:b1:a5:c7:55:e3:93:4b:33:a6:46:56:
83:d8:cb:8b:da:e7:19:e6:77:27:d1:58:23:dc:e2:
17:29:dd:1e:22:0b:8c:fe:8f:76:5d:5b:bf:1b:39:
c8:95:cd:77:27:6d:43:61:b8:d7:22:f6:a2:c7:ae:
7a:75:db:1f:fb:ed:9f:c5:3f:1a:74:a4:b0:0e:52:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:B3:E1:54:C8:FE:88:AC:D2:E6:87:97:C3:DC:0F:9C:B4:20:F8
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:87:93:f2:47:7b:85:f8:bd:ee:50:56:31:95:77:8a:92:74:
10:c7:b5:89:dd:4e:91:8b:07:3a:98:24:87:a2:20:01:95:0c:
5f:a6:33:bd:00:42:ac:52:cd:01:9d:d0:d5:73:1c:96:ca:fb:
cd:30:a9:32:41:ae:65:02:13:5e:c2:09:6e:e8:48:b3:a3:d8:
42:4a:1a:ad:e1:0f:18:88:f3:dd:43:b7:e5:92:7c:56:85:b7:
ba:49:42:17:d5:b5:78:5e:05:6d:a0:d8:6a:b8:06:3b:71:6c:
2f:cc:60:1f:e5:f3:eb:a2:ee:95:c1:af:09:e6:fe:78:3c:3b:
72:65:74:8b:d6:73:34:1e:7e:a0:72:33:fb:71:f1:97:b2:39:
3f:bd:d1:78:70:5b:46:a8:86:44:92:6f:39:a7:18:63:47:b5:
fb:b1:56:69:cb:7a:13:02:00:84:63:20:2a:81:f4:36:5a:74:
9c:e2:78:18:ce:a0:e1:73:d0:3c:e3:06:8e:43:07:26:5a:c8:
6c:3f:bf:98:ac:c7:1c:75:10:75:64:c4:c5:97:03:99:f4:c8:
f6:bd:e7:09:92:f2:11:f1:23:6d:89:84:0a:96:06:d5:81:73:
4d:0c:a4:0e:38:9c:2e:11:29:52:87:b1:01:48:85:d1:77:9f:
5b:ff:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:11:30 2025 by rpki-client