Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: +iRcoHCp1VP+A9d5fYz7/nj3+kHw6M2WxuGuuOCy5Hk=
Subject key identifier: FD:1E:A4:9F:56:3B:D4:BD:BE:34:E1:0C:96:98:47:86:84:34:F8:25
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 01983B3BDB83E6312DC67389B54546EDCD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0FCC
Signing time: Thu 24 Jul 2025 07:00:35 +0000
Manifest this update: Thu 24 Jul 2025 07:00:35 +0000
Manifest next update: Fri 25 Jul 2025 07:00:35 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: +swNcMUmx4E2VOkm8MKFvFQd8b3AwytOPCjI/5Mf2os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:3b:db:83:e6:31:2d:c6:73:89:b5:45:46:ed:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jul 24 07:00:35 2025 GMT
Not After : Jul 25 07:00:35 2025 GMT
Subject: CN=fd1ea49f563bd4bdbe34e10c969847868434f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:15:dd:dd:fb:78:23:dc:89:a1:b0:90:c8:
cc:f6:83:fe:0e:13:b1:ee:ba:24:25:60:01:ce:81:
db:58:7e:3f:5b:3b:5a:e4:06:8e:69:15:94:aa:05:
9a:93:fe:bd:d2:cf:82:5b:05:2c:67:94:a9:b4:a0:
5d:aa:cc:68:d7:51:da:71:b7:a3:45:96:ae:b4:70:
02:fd:9d:bf:f7:ca:04:6c:7c:6d:fc:46:74:8a:14:
2b:ce:bd:42:7f:e3:01:db:de:77:3f:f1:41:b4:f7:
98:e5:9c:b4:e1:14:01:37:2e:10:9e:06:49:84:09:
85:80:14:df:c1:6c:7d:73:2d:0c:ad:fc:36:3b:d9:
c3:94:c1:60:26:e9:14:b8:77:65:ae:89:53:ec:bf:
82:df:31:a1:6f:5f:74:dd:6e:24:ab:01:f5:f0:ac:
c6:2a:6c:85:4e:f1:02:89:11:8d:0e:3f:0c:0c:a1:
7f:0a:66:7b:36:bc:ab:52:59:10:33:fb:0d:2d:29:
86:8d:80:30:42:3f:cd:ed:36:00:f3:d4:7d:70:ac:
6c:d8:0a:b6:60:3b:0b:21:98:dd:1d:7c:1e:22:e8:
0c:0b:40:be:d3:fe:b6:78:8b:d0:2b:e3:5d:61:7a:
63:52:3f:d3:33:6c:81:98:d8:4d:0d:5b:4b:72:97:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1E:A4:9F:56:3B:D4:BD:BE:34:E1:0C:96:98:47:86:84:34:F8:25
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4b:59:3a:9d:a9:80:67:0b:a5:78:0a:ef:2c:92:4e:7d:ce:
a4:3f:97:fe:f6:3b:fb:65:9c:b7:b8:22:e0:99:1d:63:e2:d1:
11:88:35:91:bb:0f:26:cb:31:57:09:43:61:90:e1:a9:77:d5:
5e:2e:47:1a:cc:34:a5:23:1b:f5:93:0a:09:4a:15:b3:a9:4b:
87:5e:11:33:b4:b6:f2:94:56:25:b4:38:3b:32:d0:7e:17:80:
00:14:8c:cf:11:14:05:93:a2:bb:2b:05:53:8a:d9:00:7c:41:
f8:c2:67:a7:d6:53:03:d2:92:cc:0d:eb:83:e5:88:f4:7c:01:
fb:81:be:12:d5:c7:e0:93:14:b5:9e:e1:c2:2f:d3:96:23:46:
5f:6f:9f:b6:40:50:41:65:27:ce:97:12:1d:30:d7:13:54:85:
6a:bf:1f:6b:0c:85:10:64:2d:c9:de:a8:37:82:b8:4e:9a:55:
de:57:91:3f:46:0b:63:e1:a2:ec:e4:35:99:df:fe:4e:31:c2:
5d:7e:5e:95:b3:15:09:fb:35:19:c1:b0:dd:fd:54:5b:ca:fd:
2e:14:44:ba:80:24:67:f6:10:1d:7d:e5:e3:f2:62:b8:b4:2b:
c6:8b:43:4c:44:58:85:a3:e6:27:de:65:71:8c:67:a9:3c:e0:
9a:73:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:05:50 2025 by rpki-client