Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: OAyzM+6qtFXNa2Dn3eiF6GEgTL3jHRfuvIQF5D6W2+E=
Subject key identifier: 6F:E6:36:A0:EB:C3:D6:F5:51:62:14:3A:2B:95:B6:AF:32:CA:3B:F2
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019686C9009D9655402E40505C6D0C1C90F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0EEA
Signing time: Wed 30 Apr 2025 13:00:41 +0000
Manifest this update: Wed 30 Apr 2025 13:00:41 +0000
Manifest next update: Thu 01 May 2025 13:00:41 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: 66BeG8fC4T59906tVkV1/1i7FMByfGtB71o8dA5Q//U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:00:9d:96:55:40:2e:40:50:5c:6d:0c:1c:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Apr 30 13:00:41 2025 GMT
Not After : May 1 13:00:41 2025 GMT
Subject: CN=6fe636a0ebc3d6f55162143a2b95b6af32ca3bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:3a:2d:3a:00:7a:7b:07:ea:c6:6d:53:dd:
5a:36:bd:0c:3a:61:28:ec:98:9b:f7:bf:97:62:b3:
37:d0:00:c1:4c:23:be:dc:46:cd:12:3d:8e:f1:2b:
81:49:2b:f6:09:c4:af:64:76:ac:df:1a:f9:80:32:
7a:4f:2a:40:33:f0:a3:43:1e:f6:b0:fa:7b:44:cf:
08:8f:7d:61:16:84:bc:f8:96:a2:b1:2c:c2:dd:a9:
60:73:72:8f:e7:01:7d:c2:cd:6f:11:f8:10:8e:9c:
f3:56:92:67:77:30:77:cc:ac:e0:d5:86:ac:0a:50:
aa:11:18:39:67:70:09:1b:4d:f3:2c:23:f7:ef:3c:
f4:80:32:eb:d7:31:f2:8f:4b:f8:c9:1f:fd:1e:39:
d9:ba:82:ea:52:71:e2:de:c7:07:96:cb:44:92:28:
27:09:a1:3d:37:d6:54:df:56:89:0b:78:63:c4:58:
ce:2c:1c:49:50:34:70:1d:f3:84:80:86:d2:09:73:
5a:c6:d7:b9:fb:1d:b2:00:d2:58:66:37:59:6f:04:
cd:cd:10:47:a9:ac:e9:a0:39:4a:e9:55:c6:ad:d6:
8d:fb:c1:e3:fa:7a:0c:7d:a9:9b:bb:c5:52:10:11:
43:a3:32:4e:2e:30:7b:b5:5c:6c:ad:86:fd:23:31:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E6:36:A0:EB:C3:D6:F5:51:62:14:3A:2B:95:B6:AF:32:CA:3B:F2
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ae:1f:ee:f2:22:6c:8f:0c:48:1d:8d:15:ac:01:11:dc:c3:
8c:1d:fd:8b:4e:dc:ac:06:03:5d:e6:0f:b9:2f:e8:87:09:47:
3d:77:0b:e3:96:e5:cc:5c:d1:1e:0c:17:53:c8:0a:6d:fa:d9:
96:44:9a:6b:9f:84:d9:bc:94:56:ff:07:1c:97:10:7f:da:ab:
84:56:57:14:ea:a8:6d:a6:25:e0:63:b0:6c:4f:1f:22:34:be:
e8:15:57:eb:53:57:45:09:a7:d0:70:b6:7c:74:07:07:7e:13:
ad:62:b2:63:4d:43:83:59:95:01:9a:38:77:62:95:bc:4f:64:
0c:4a:89:56:a6:85:10:21:19:aa:99:56:bf:63:0a:3f:ea:b0:
91:0a:96:22:56:7d:2c:ca:07:23:d6:f8:1c:c7:7d:2d:ff:5b:
a0:1b:b7:12:45:42:6a:70:40:fe:d2:af:c1:73:68:b5:74:1a:
c2:c8:db:a8:18:19:0d:8a:f7:95:09:bf:37:5e:68:60:0a:f7:
f7:d1:2d:7c:0c:98:30:90:fc:ef:4a:52:11:d8:1d:77:9a:e5:
09:1f:05:87:06:b1:3d:f9:d2:96:07:f8:78:72:34:00:e0:a9:
46:0c:07:ae:b0:36:d2:0a:5e:52:73:1a:c1:02:1a:30:98:6e:
6a:dc:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:21:48 2025 by rpki-client