Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: z6jv8e592X2zjpHeMbz5SuaH5Z2oheLd7FTIOynPa1k=
Subject key identifier: D4:B1:5A:33:0A:02:88:7C:E7:F0:14:8C:3F:40:8E:B4:90:6E:96:74
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019833826A823ABFB60CCA6B0977C6CA3D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0FC8
Signing time: Tue 22 Jul 2025 19:00:41 +0000
Manifest this update: Tue 22 Jul 2025 19:00:41 +0000
Manifest next update: Wed 23 Jul 2025 19:00:41 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: WeURZob6ugmnCAFcRonpDV1JFZNTFgzCGZp0c64Ho6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:82:6a:82:3a:bf:b6:0c:ca:6b:09:77:c6:ca:3d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jul 22 19:00:41 2025 GMT
Not After : Jul 23 19:00:41 2025 GMT
Subject: CN=d4b15a330a02887ce7f0148c3f408eb4906e9674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:c0:c8:a4:41:a5:b1:f1:33:ee:39:22:26:
db:85:4f:c2:5e:94:a1:76:09:23:f0:24:71:d4:90:
5c:88:1f:f4:50:3d:0f:27:4d:65:f9:fe:a0:c3:03:
25:6d:73:51:15:14:7b:45:db:d8:5a:f9:4e:21:fb:
8f:28:e2:cc:a6:bc:ac:3a:26:9e:7e:a6:93:64:5e:
fd:47:fc:b4:2a:a0:b5:f3:19:a2:93:a4:fb:0b:f1:
52:f9:02:77:f5:a8:8f:11:43:35:ec:11:64:07:c0:
2a:3f:37:67:cb:d8:fc:04:6f:db:6c:c3:9a:73:30:
a5:d7:ea:b4:24:df:81:76:9e:6e:e3:51:87:45:df:
f8:59:3f:45:9f:7d:bc:ed:73:5c:36:12:e4:7f:db:
60:79:fb:ff:07:f3:9d:bf:a6:d0:24:1d:f2:55:90:
84:c1:95:c6:f8:f0:9b:f6:bc:b0:5d:b7:33:3f:82:
00:28:34:66:33:df:a8:75:93:26:95:df:f6:1f:bf:
54:7a:a6:b3:ee:25:9d:9a:61:43:1e:fc:c3:03:b3:
65:eb:50:35:2b:51:ff:45:ef:87:19:c3:15:5f:b5:
80:be:e5:64:67:13:0b:e8:00:94:b5:95:77:fa:77:
20:f7:cb:f9:31:40:33:56:07:97:00:8c:5b:cd:b7:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:5A:33:0A:02:88:7C:E7:F0:14:8C:3F:40:8E:B4:90:6E:96:74
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:8f:51:51:44:36:45:47:b4:05:7e:8f:f4:bf:04:51:2a:
6c:f1:c2:7b:f1:c2:ae:d8:0d:35:05:f8:29:0b:cf:a5:f5:e3:
7a:b7:63:9f:ae:ca:d8:da:cb:2a:df:8f:a8:cf:41:f6:fd:35:
33:e8:7e:21:69:de:d0:01:ef:46:62:1b:de:b0:71:93:7c:36:
b1:ff:81:b9:76:1d:4c:7a:b6:2f:eb:19:f6:b1:f6:79:51:09:
31:19:8b:ba:95:fd:32:e5:58:17:38:7b:35:e7:6f:59:03:b2:
54:07:e2:ed:eb:8d:9d:20:01:7b:7d:e2:3f:e6:16:9e:30:4b:
44:12:04:99:34:85:d5:4d:d9:82:4a:9d:03:ea:ba:37:43:e9:
ad:90:3b:42:f0:23:cf:7e:a0:b6:70:e3:27:87:5f:d6:80:46:
43:c0:ef:b0:89:99:c0:72:c8:3d:2f:eb:2c:8a:60:bc:1f:1a:
80:12:d7:69:78:13:3c:50:35:31:37:e5:b0:6b:b5:2f:3d:62:
66:49:cf:c0:bb:5b:44:3d:45:6d:e1:a8:91:94:40:56:0a:eb:
ee:0f:92:06:ba:8a:9d:0e:b1:74:c7:3a:56:b6:3f:99:61:77:
15:f1:63:bd:8c:04:6e:cb:8f:2b:39:56:13:88:31:15:91:b1:
e4:0f:c5:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzgmqCOr+2DMprCXfGyj0eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj
ZWZjNzYwHhcNMjUwNzIyMTkwMDQxWhcNMjUwNzIzMTkwMDQxWjAzMTEwLwYDVQQD
EyhkNGIxNWEzMzBhMDI4ODdjZTdmMDE0OGMzZjQwOGViNDkwNmU5Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfAyKRBpbHxM+45IibbhU/CXpSh
dgkj8CRx1JBciB/0UD0PJ01l+f6gwwMlbXNRFRR7RdvYWvlOIfuPKOLMprysOiae
fqaTZF79R/y0KqC18xmik6T7C/FS+QJ39aiPEUM17BFkB8AqPzdny9j8BG/bbMOa
czCl1+q0JN+Bdp5u41GHRd/4WT9Fn3287XNcNhLkf9tgefv/B/Odv6bQJB3yVZCE
wZXG+PCb9rywXbczP4IAKDRmM9+odZMmld/2H79Ueqaz7iWdmmFDHvzDA7Nl61A1
K1H/Re+HGcMVX7WAvuVkZxML6ACUtZV3+ncg98v5MUAzVgeXAIxbzbdIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSxWjMKAoh85/AUjD9AjrSQbpZ0MB8GA1UdIwQY
MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct
MDU1N2JkNzIxN2YxLzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx
LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja6PUVFE
NkVHtAV+j/S/BFEqbPHCe/HCrtgNNQX4KQvPpfXjerdjn67K2NrLKt+PqM9B9v01
M+h+IWne0AHvRmIb3rBxk3w2sf+BuXYdTHq2L+sZ9rH2eVEJMRmLupX9MuVYFzh7
NedvWQOyVAfi7euNnSABe33iP+YWnjBLRBIEmTSF1U3ZgkqdA+q6N0PprZA7QvAj
z36gtnDjJ4df1oBGQ8DvsImZwHLIPS/rLIpgvB8agBLXaXgTPFA1MTflsGu1Lz1i
ZknPwLtbRD1FbeGokZRAVgrr7g+SBrqKnQ6xdMc6VrY/mWF3FfFjvYwEbsuPKzlW
E4gxFZGx5A/FTw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:08:45 2025 by rpki-client