Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: w2e0vAEhxnZN9DigOT/WVY1wHd8Pv/ZzUzoHV6KVCHY=
Subject key identifier: C5:1D:F6:BC:F3:7B:5C:7C:47:F6:C8:E0:10:C1:73:99:4D:3F:63:E2
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01967FB4237863971EBABCD4753BB64B9E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 04:00:33 +0000
Manifest this update: Tue 29 Apr 2025 04:00:33 +0000
Manifest next update: Wed 30 Apr 2025 04:00:33 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: GsU6g01baS5WG2ByhbdsYhCvshKD2PrICdJebinNAGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:23:78:63:97:1e:ba:bc:d4:75:3b:b6:4b:9e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Apr 29 04:00:33 2025 GMT
Not After : Apr 30 04:00:33 2025 GMT
Subject: CN=c51df6bcf37b5c7c47f6c8e010c173994d3f63e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:ef:66:b7:b8:94:19:be:26:b0:a9:21:05:
64:6f:a0:dc:49:cd:26:da:24:4e:8f:f0:b9:2c:db:
c5:53:1a:fe:5d:7d:28:95:f4:63:52:87:32:97:71:
8f:b1:26:74:2c:8b:df:ca:a9:48:16:23:5a:d1:fb:
ac:3d:93:0f:fe:f7:7a:83:bb:04:17:02:87:49:74:
33:26:28:a9:64:7b:ea:84:b1:6e:14:eb:cc:93:6f:
0e:09:ed:d0:08:7e:5b:c0:da:d1:63:2c:14:c2:7f:
92:80:94:00:80:86:50:d9:85:e2:9e:46:2e:e8:87:
23:9f:40:80:3c:0b:c3:24:1c:5c:2b:52:d5:5d:ae:
f0:12:fc:39:79:c3:fe:62:d2:de:fc:17:9c:c2:f6:
97:86:9a:78:93:d4:ac:2b:f2:b8:65:a2:06:39:bb:
a3:9a:b6:e4:18:4c:8c:55:2d:45:58:5c:8d:ff:da:
a8:53:92:97:71:1f:d5:cb:69:30:1e:2d:3c:fe:09:
59:1c:e8:3d:fd:0a:5f:d9:b7:9e:5c:31:8b:0b:04:
17:fc:ce:23:a2:e1:93:ea:dc:34:ad:cf:24:1b:f8:
01:93:79:0e:2a:1e:75:61:af:75:7e:b1:49:b4:0f:
7b:23:a5:12:96:83:8a:37:69:d2:6f:09:e4:0b:0f:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1D:F6:BC:F3:7B:5C:7C:47:F6:C8:E0:10:C1:73:99:4D:3F:63:E2
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:57:d1:a5:9a:4a:31:e5:fc:06:22:a5:98:66:dc:97:28:
d9:eb:53:54:60:aa:f6:ce:c1:25:ec:6b:8f:23:87:47:03:e4:
69:6d:d1:94:3b:1b:23:70:63:ed:90:31:94:f2:41:dd:5a:fc:
5e:3a:44:58:bf:70:99:bd:96:72:1f:e4:23:5a:02:87:47:6b:
7b:63:8d:f7:c8:10:92:d8:1b:bd:e1:69:ed:c6:f0:e7:ef:2c:
7f:47:be:21:81:06:ee:d0:13:46:08:31:44:1b:e7:2e:31:76:
5d:43:2e:57:9d:0f:06:ee:6a:57:fa:bd:0b:fc:4a:d1:0c:10:
67:9e:ae:e0:6c:b7:33:5d:55:57:90:68:a7:66:7e:62:67:6a:
23:a1:3c:f6:a0:99:7f:4f:03:c9:76:8c:98:79:29:fe:3e:7d:
13:70:05:2a:ef:c4:8b:64:09:f5:e4:a8:4a:55:87:7d:0e:fb:
67:7f:f0:1d:22:37:67:9c:ef:f6:f3:da:18:e2:96:cc:43:ce:
af:f8:92:58:22:36:e0:b3:34:51:dc:c9:c9:33:aa:2e:70:0c:
d2:c2:cc:20:79:fe:16:77:43:a5:5a:63:53:2c:81:02:f6:dc:
12:0e:36:ed:98:ea:05:87:d7:d8:04:1d:ad:be:21:37:5c:4e:
e1:b3:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:30:36 2025 by rpki-client