Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: QqTOfqJhXxakUh8oUXd97gtkbj5oRw5bw1N9gwFqPmg=
Subject key identifier: D3:F6:F8:F3:06:60:30:0A:2A:8B:6C:5F:19:FD:A1:9A:20:8C:E4:4B
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 01960F0D56B4D4A33C3ECF8B015244C86A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 0EAC
Signing time: Mon 07 Apr 2025 07:00:54 +0000
Manifest this update: Mon 07 Apr 2025 07:00:54 +0000
Manifest next update: Tue 08 Apr 2025 07:00:54 +0000
Files and hashes: 1: ar4zlJn9OPy16Cl_Gn2AS2uvlko.roa (hash: +l3AN0BiMMVqv2unGjaA9MppHF4gtQZMzWGcIs2HcCA=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: M/JX7/CWqh1rgalYfu+/5rfchR5U18wYBGOIiw9brI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:56:b4:d4:a3:3c:3e:cf:8b:01:52:44:c8:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Apr 7 07:00:54 2025 GMT
Not After : Apr 8 07:00:54 2025 GMT
Subject: CN=d3f6f8f30660300a2a8b6c5f19fda19a208ce44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:19:32:42:69:19:ca:83:a3:27:de:b9:7f:
de:a4:d6:24:90:b8:8b:53:58:6d:d3:0a:5a:e2:dd:
85:99:5d:9e:0f:ed:36:7b:57:2c:0c:9a:07:7a:c5:
c9:62:04:0f:34:c0:17:d8:da:73:8a:f2:5e:24:f8:
45:07:fb:9f:57:f5:f2:c6:b8:b8:62:6a:03:52:cb:
f3:74:2e:35:b2:5d:e4:02:74:91:f6:7b:e5:ec:92:
84:e4:17:55:ad:0e:e7:09:12:89:ee:34:33:7f:ef:
78:1a:2e:16:57:a8:91:48:2f:b7:5b:43:bc:bc:68:
cc:ca:57:61:d0:61:0f:1a:4b:6b:5d:65:76:eb:8a:
4a:4d:e5:26:92:9b:5c:fd:43:1f:1d:bc:48:d4:38:
75:c3:90:5e:2e:25:94:d7:af:dc:42:17:b5:49:3e:
61:84:23:4f:28:97:3e:70:d2:f9:a7:ba:2c:cc:b4:
62:20:23:84:55:ef:1a:ba:c8:df:3e:57:6d:78:e6:
2b:81:79:63:90:e3:00:53:f5:b8:d5:93:9e:9c:ba:
5a:f3:68:ca:5c:d8:07:87:f0:83:2a:43:2d:d7:b9:
60:95:72:19:7c:e5:29:a4:f6:0e:18:05:92:62:c3:
ee:38:81:92:0c:a8:4f:f0:da:7f:22:a1:e3:a1:90:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:F8:F3:06:60:30:0A:2A:8B:6C:5F:19:FD:A1:9A:20:8C:E4:4B
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b3:2c:f8:b9:59:be:14:b4:6e:ab:eb:87:bc:93:c2:87:e5:
a7:14:70:68:54:ae:d5:62:82:b2:b0:1a:3d:d7:20:2d:74:47:
6b:de:97:83:f4:14:ce:b0:4f:75:21:53:ab:16:cb:75:9d:54:
63:1f:33:03:f6:41:e7:c2:7c:fa:b5:9f:ea:e6:25:e3:11:1b:
ae:bc:66:99:2c:25:66:eb:40:e8:f8:49:bc:f6:bf:99:3f:82:
67:ca:29:af:67:93:ee:ab:ab:a8:f0:df:63:1e:df:bf:72:1d:
78:51:f8:5c:8e:40:ba:96:b0:2f:2a:c6:da:23:5a:c4:56:76:
c5:38:e3:b4:71:59:ad:26:61:29:3e:2b:ea:73:66:58:22:5c:
c5:2d:96:0d:33:54:d7:7d:05:7a:cd:50:9d:ad:ea:de:05:e4:
bf:6a:04:01:e0:c2:42:e9:2e:aa:cf:75:76:84:4d:ee:e3:c4:
56:34:ff:1d:74:89:bd:5b:ff:1a:1d:42:e5:70:be:93:ad:a1:
a7:aa:cf:59:67:62:7d:d8:10:46:f3:75:f9:61:33:cb:a2:99:
41:22:78:33:8a:04:45:c0:56:f6:dd:ae:fd:63:9e:95:ac:e0:
0b:ac:75:1c:71:bd:c6:e6:1c:e8:dc:05:2f:c6:7b:42:50:a7:
af:b2:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:25 2025 by rpki-client