Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: 779gwaZrROPcQarWHBBP0h6re+w8p/5jivioyMj0oQY=
Subject key identifier: 0C:F7:F0:FA:D9:12:15:68:0A:32:B7:74:84:BE:40:A9:0A:4D:10:1A
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019A5FB14CF514CCE77EDB1515E6D44D0C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 10E8
Signing time: Fri 07 Nov 2025 19:00:46 +0000
Manifest this update: Fri 07 Nov 2025 19:00:46 +0000
Manifest next update: Sat 08 Nov 2025 19:00:46 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: cp8MkWpOFL5+CzlFE4aQg6l+WyxqngAWVzK598y1mCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:b1:4c:f5:14:cc:e7:7e:db:15:15:e6:d4:4d:0c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Nov 7 19:00:46 2025 GMT
Not After : Nov 8 19:00:46 2025 GMT
Subject: CN=0cf7f0fad91215680a32b77484be40a90a4d101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:f1:1b:3b:70:be:55:6c:96:14:97:21:10:
7c:2b:8c:9b:bb:a7:fa:27:ec:89:74:d5:a7:ac:5f:
80:33:9d:f0:c3:52:fd:10:0b:17:ea:98:03:12:db:
9d:e6:d5:da:33:53:4c:72:89:b9:a0:b1:9b:0c:6c:
ab:99:a8:c8:6e:51:74:30:74:aa:46:94:a7:4a:fe:
31:12:d9:79:de:74:31:c8:23:d4:68:6b:23:ab:61:
9e:95:83:0a:c0:08:43:40:61:ae:b3:a3:98:f8:c7:
f1:92:ac:e1:bd:e5:92:ab:e2:0e:b3:04:e3:95:88:
9c:a8:2e:34:9f:56:43:7a:69:eb:76:b0:6d:23:90:
da:ba:c5:f7:38:72:58:26:74:84:d6:33:47:ce:c8:
97:c8:cf:b0:dd:91:73:dc:e0:7a:1c:fb:f3:0f:5a:
4e:b9:57:0a:71:e4:3a:3d:08:a2:7d:58:e1:13:f2:
80:33:fe:0f:c7:f8:0d:6f:56:48:a2:c6:cb:77:d4:
98:b0:f0:69:08:9a:78:62:49:ea:48:b5:01:a3:c0:
1a:1e:5d:81:df:8b:ae:08:cd:9b:1f:2a:66:c4:dd:
f4:9f:95:62:76:b7:46:1d:58:cd:4d:2f:34:7e:b0:
d3:94:e6:e4:e9:bb:1c:e0:9d:0e:b0:fe:68:87:77:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:F0:FA:D9:12:15:68:0A:32:B7:74:84:BE:40:A9:0A:4D:10:1A
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:ea:d3:64:6c:1d:f9:e7:37:a5:46:85:32:b5:16:61:36:
aa:2b:2d:c4:a0:f6:0f:29:26:70:35:f6:e6:ac:4a:c4:01:e8:
95:cc:92:a5:99:f7:33:56:86:a1:34:c6:de:72:00:67:e0:eb:
c7:28:b8:b7:61:8d:6e:c0:47:c9:83:18:8d:b9:a3:22:41:ba:
b3:de:33:33:78:b7:a2:59:a0:66:98:3f:2e:29:94:8d:1f:c4:
03:98:a2:37:de:a9:49:b8:ea:f1:0b:b7:80:d0:b2:11:39:19:
5b:4a:27:f6:43:63:ee:ed:e4:49:d5:7a:0e:4d:37:77:50:71:
99:34:78:b8:af:0a:5c:04:17:84:58:00:61:ee:cb:d1:5e:69:
5f:22:99:97:49:c7:7c:8c:de:94:2c:8f:5e:ca:eb:1d:c0:48:
2c:4e:7f:62:76:60:bc:a6:80:19:76:77:34:3d:59:35:3b:e4:
ff:2b:a4:87:d2:37:d2:3b:88:e3:8e:7c:58:81:b4:ea:82:71:
cd:b6:80:d1:f6:3f:dc:0d:c5:f1:9e:ab:e9:9b:88:93:4e:2d:
3c:40:f0:c4:45:18:13:9a:50:65:19:40:d4:c5:e8:47:8e:62:
e5:2d:bd:1b:3a:c6:d5:94:ce:a9:38:87:01:bc:e7:64:71:88:
ad:65:39:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 04:02:23 2025 by rpki-client