Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: JZb+WXMhp3LITiAt341yV1NKC5jplEL6aSORHq7/fUo=
Subject key identifier: 71:DB:AD:54:29:3B:5D:50:B9:E6:E8:72:0C:C4:CC:0E:05:E9:68:9F
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 0199307ECAEB71060E519619D1776E108955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 104B
Signing time: Tue 09 Sep 2025 22:00:39 +0000
Manifest this update: Tue 09 Sep 2025 22:00:39 +0000
Manifest next update: Wed 10 Sep 2025 22:00:39 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: WQi4Hm0Fr58p8febBzLvtOn1nlw7TEAjrDSLCIG6xc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:ca:eb:71:06:0e:51:96:19:d1:77:6e:10:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Sep 9 22:00:39 2025 GMT
Not After : Sep 10 22:00:39 2025 GMT
Subject: CN=71dbad54293b5d50b9e6e8720cc4cc0e05e9689f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:1e:44:4e:d1:62:a0:fd:b7:ee:4f:a8:dd:
38:84:3f:d8:9c:c6:f6:11:e3:eb:70:36:13:29:1d:
97:48:75:27:e2:f8:f1:4c:5c:7b:39:b6:a7:4c:24:
29:5b:2f:cd:ec:6f:32:8d:06:a7:06:c0:47:a0:6e:
7a:ba:93:71:cf:30:4e:14:d6:8c:13:88:d4:ed:65:
cc:01:23:f4:1b:90:3e:06:e3:ff:ff:80:9f:0c:34:
53:2a:22:d9:c4:79:2b:d9:89:c7:dc:10:fd:16:93:
d6:b8:ac:4e:ff:f2:6f:22:a6:55:bf:b7:bb:5f:45:
8a:03:cc:d6:32:bb:4c:6d:8e:20:c3:9a:82:07:65:
91:9e:fe:0a:03:22:fe:90:4a:4f:c4:28:f1:3b:1d:
51:99:09:95:b3:0b:35:a1:cb:75:c4:bb:11:4c:55:
9c:9b:4c:6d:68:28:bf:fe:2a:af:43:16:93:18:17:
4c:ec:96:02:8d:b4:ef:7b:97:92:0b:cd:66:66:8c:
df:38:c6:17:26:b2:48:f6:27:00:ef:18:eb:22:03:
8e:f5:9e:35:45:e1:5a:5d:45:b8:bf:b2:62:47:d5:
44:0a:42:5e:f6:82:17:d1:06:58:98:33:00:7b:65:
90:41:98:e3:44:de:22:ba:e9:78:fd:77:d7:79:f6:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DB:AD:54:29:3B:5D:50:B9:E6:E8:72:0C:C4:CC:0E:05:E9:68:9F
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:d4:ea:17:3f:fe:23:89:59:22:8d:87:d5:43:e4:4d:2c:
9a:f5:82:0b:0c:18:67:2c:ac:ed:45:26:93:16:90:09:7a:9f:
45:17:3c:2b:15:d0:19:96:ce:e2:12:c6:28:49:2e:ed:6f:bb:
d8:28:6d:a4:7c:ac:4a:0e:47:8d:85:99:55:74:ce:ae:0e:eb:
aa:2c:59:d7:52:57:e2:cd:0e:73:8d:7e:94:15:7c:4f:9e:5a:
ba:eb:55:4d:57:da:8a:47:a7:f0:5d:38:3f:ed:dc:ec:59:de:
6b:33:2e:be:4a:73:55:27:00:46:32:90:9b:bc:54:7d:44:30:
af:48:30:28:37:59:76:ae:d4:0f:68:4e:f5:f5:a9:01:ac:c8:
19:fb:b6:1e:da:30:60:a0:d8:37:d1:4c:7f:7c:ee:9c:27:1e:
75:24:fc:29:fa:7d:52:1c:12:25:67:f8:76:44:b2:88:31:53:
c7:21:aa:0e:ca:12:5e:bf:a0:63:31:d2:3f:60:0b:28:db:e3:
ff:63:d1:4f:da:cb:c6:93:a3:6c:4c:c5:6e:f7:fb:5f:e9:49:
14:0d:ed:56:01:b7:90:60:6f:48:6b:87:55:f9:94:0b:0a:9c:
a2:7b:ed:db:84:d6:d7:15:73:dc:9c:c6:ab:7a:1c:18:5a:3b:
86:ae:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:58:44 2025 by rpki-client