Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: i9s4UpbFoRXe8yi885IHuRQ8/TfPVPLvkfonfptWO5w=
Subject key identifier: 59:ED:B5:63:81:B0:7B:FF:AA:A6:2F:6C:43:F2:49:F6:16:06:3C:1A
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0198868CFE4574659DEB891A33AEA83DDDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0FF3
Signing time: Thu 07 Aug 2025 22:00:43 +0000
Manifest this update: Thu 07 Aug 2025 22:00:43 +0000
Manifest next update: Fri 08 Aug 2025 22:00:43 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: 8t/EwQ+2w5KjM9x3FOQ4n1MkHqI61eL5fZCnshxznK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:fe:45:74:65:9d:eb:89:1a:33:ae:a8:3d:dd:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Aug 7 22:00:43 2025 GMT
Not After : Aug 8 22:00:43 2025 GMT
Subject: CN=59edb56381b07bffaaa62f6c43f249f616063c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:ef:40:3a:75:84:3b:d6:89:39:c9:80:85:
73:a8:d5:71:2d:ad:b9:a9:85:ed:8f:44:b5:de:2c:
12:b1:62:18:c6:5b:c9:85:99:4d:d1:8f:40:8e:ab:
59:55:b1:2f:70:51:1d:77:f0:0c:7b:fd:0a:0f:1b:
36:4e:60:c5:5c:4e:31:83:58:55:0d:da:f5:97:cf:
8e:e3:59:b0:db:14:4f:83:13:0e:06:41:5f:ff:b0:
46:03:fe:37:56:31:34:9f:33:d5:57:88:a5:8d:67:
de:32:ce:e3:7b:bb:ab:90:7c:68:5e:84:16:09:47:
f0:7d:14:1a:9c:d5:d5:04:fe:c8:e4:3a:fb:5c:0a:
eb:38:19:a9:19:d6:71:9e:51:c6:cb:01:1e:d7:c4:
ce:68:fe:a5:ed:07:c4:cf:3f:3d:71:48:02:e1:b9:
88:37:8e:8b:15:0b:ec:a2:45:ce:d0:ae:c8:13:b1:
7d:0b:ce:d1:15:ad:33:dd:fe:8b:1d:8d:0e:68:be:
f6:d0:bb:b7:d0:8c:47:6c:bb:e9:8d:85:01:b7:a3:
0d:d2:38:cc:23:9e:db:fa:d2:55:72:bc:a3:d4:87:
08:fb:5e:1e:50:1d:f4:43:8f:af:9c:c9:3b:c4:15:
46:42:3d:a0:8a:40:a5:59:b3:cc:53:52:62:5d:70:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:ED:B5:63:81:B0:7B:FF:AA:A6:2F:6C:43:F2:49:F6:16:06:3C:1A
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2f:a7:57:cf:4c:ca:bf:a8:2f:30:43:64:fc:d0:4c:a1:51:
97:d5:df:b4:f4:a9:d4:50:7d:7a:73:61:ff:e1:c6:da:0e:a3:
b8:da:36:68:2e:f3:05:7e:ce:78:73:c2:c0:69:22:7f:9c:80:
65:9c:d4:2d:6d:16:39:06:d3:0d:da:44:aa:80:ce:70:d3:3b:
61:9f:46:ef:19:ef:03:37:a2:2f:6f:3c:c4:e3:44:1b:4e:ef:
67:af:12:06:3d:61:d4:03:2e:bf:87:a5:92:f6:2f:5d:b8:62:
7e:07:85:fb:b7:a9:1e:77:d4:a2:bb:73:4b:f9:0c:9d:3e:89:
0d:83:57:e2:92:b9:b2:c1:ef:6d:26:b4:0a:f6:51:6c:5f:92:
cd:6f:9a:38:a5:fb:da:4f:0d:8f:98:a5:66:7f:ed:71:ea:2d:
a3:f4:84:2d:08:99:f2:7f:7a:f4:2d:72:eb:e8:93:ff:d8:c8:
73:6f:fb:6f:24:fb:f0:37:98:5d:80:2c:3b:fd:0f:26:1c:b7:
f9:03:79:03:b6:c4:b4:8b:08:ce:ed:dc:67:42:7e:9f:7b:a8:
20:8d:d7:da:e6:ac:db:ac:9e:03:7b:aa:ff:a9:6e:30:b8:37:
a7:dd:8b:2a:4e:87:a3:54:80:ef:16:71:6a:8a:aa:0b:d8:1e:
e8:67:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:44:10 2025 by rpki-client