Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: GF9hsjdzAdHTesLJI4UJOqstojeL3j9GD4qWqA0f3YI=
Subject key identifier: EC:DA:65:95:84:67:08:3D:55:C4:43:DE:F0:1A:40:5A:CC:F7:FC:FB
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019A4E4F55B3BDCB0ACD2FEA35E03DD0D7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 10DF
Signing time: Tue 04 Nov 2025 10:00:13 +0000
Manifest this update: Tue 04 Nov 2025 10:00:13 +0000
Manifest next update: Wed 05 Nov 2025 10:00:13 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: EbvB03/WxlaOFYIgPaXbTEs5pug75YK1iS3TNsvVhts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:55:b3:bd:cb:0a:cd:2f:ea:35:e0:3d:d0:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Nov 4 10:00:13 2025 GMT
Not After : Nov 5 10:00:13 2025 GMT
Subject: CN=ecda65958467083d55c443def01a405accf7fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:e4:b9:4f:b2:04:91:c4:e8:56:74:d2:79:
74:08:fa:fe:94:85:93:f9:08:d0:a0:53:f0:dd:06:
48:59:81:97:61:af:19:33:89:08:6c:07:78:96:b3:
b5:47:5c:6f:7a:3f:39:b2:38:4c:40:a3:64:cb:86:
b8:da:aa:ca:c0:38:ec:cb:ce:6b:39:77:7a:2d:fc:
13:5a:bb:5b:9d:1b:2a:04:66:21:c4:13:3a:38:b5:
91:91:83:85:9a:8a:48:52:cc:c8:60:0a:4b:c9:c9:
d0:1b:27:c5:7a:25:ef:88:fb:40:d9:56:72:fa:61:
12:cc:51:48:53:c1:c8:2c:5f:34:06:ba:c1:72:5c:
68:72:fe:20:bd:b1:2f:90:23:c4:6f:a1:05:6d:29:
19:c4:ef:54:2b:e3:69:25:59:13:aa:75:95:0b:27:
36:26:97:55:0a:ae:b4:c2:76:b1:3e:85:78:45:72:
55:15:44:3e:13:bf:b6:8f:82:ee:f2:44:f8:97:67:
12:dd:02:fa:67:ec:51:af:28:23:75:cf:23:01:52:
da:0f:d0:d6:cd:af:99:8c:ef:33:36:6a:29:7f:2a:
c3:21:39:61:28:2f:b7:5b:6a:7d:1f:c2:1f:88:f4:
65:d4:d2:33:1e:e8:7c:ee:ba:51:65:43:bd:90:98:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:65:95:84:67:08:3D:55:C4:43:DE:F0:1A:40:5A:CC:F7:FC:FB
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b9:c1:fb:32:0d:24:4b:36:59:f7:1d:21:19:35:5c:66:84:
96:7e:c0:66:1e:a2:8b:1a:a2:44:1e:69:ed:b2:53:35:00:a6:
cb:6b:71:c6:a1:8e:13:8b:1d:46:83:a2:c8:67:9f:3a:01:bd:
5e:2e:a0:6a:cf:34:2b:b5:83:a1:28:bb:f3:66:c2:03:a6:e0:
7e:07:07:2d:fb:14:6e:8d:5e:a5:96:5e:e1:0b:c6:87:ba:6b:
25:af:db:d5:5d:ce:d9:0c:d2:2b:6e:e2:1f:56:2e:7e:0d:2e:
99:6f:42:24:22:89:3d:35:4d:21:47:0f:19:bb:67:f6:49:81:
2d:80:67:26:21:a9:2a:fb:3d:b4:cf:cb:eb:96:e7:6e:e4:6f:
ab:3d:1e:ce:83:c3:b7:99:a3:d0:03:52:03:e2:ff:48:ab:49:
1a:65:3d:5e:92:88:08:dc:44:96:b2:8c:9e:9e:c6:59:42:c8:
2f:45:e8:14:3e:80:a3:3e:75:fd:22:10:db:9a:49:03:d0:83:
12:be:44:f6:81:32:fd:77:a0:23:d4:20:b4:e7:3c:fb:0b:29:
de:2e:30:1b:6f:44:f6:1c:9c:63:ed:80:a4:c9:ca:cf:40:db:
b4:0c:a6:c4:af:da:e5:53:b0:99:84:42:be:ea:11:9d:07:a7:
7a:45:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:33 2025 by rpki-client