Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: s6pne7R1jqTo3y2bPnJSaxvI6LVZ+MOL9q5xnEaHLBo=
Subject key identifier: 90:72:66:24:64:43:4C:16:B8:D9:E7:8C:8F:37:62:AB:63:96:48:01
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019A4EF4040A0F09556CF4AF6833B73FBA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: RZLTsbABeB8YBs4/vQRRst18rgWsN0MlK5Zkn/06GUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:04:0a:0f:09:55:6c:f4:af:68:33:b7:3f:ba:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=9072662464434c16b8d9e78c8f3762ab63964801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:61:5f:6d:89:9d:24:3b:3f:37:61:8a:0c:
4f:1d:94:5d:f9:c9:1b:82:d9:a0:63:c9:0b:28:e6:
fc:6b:44:52:81:87:10:d0:4d:2f:0a:0c:0d:3e:2c:
4a:ff:38:a3:40:f9:63:e9:6b:6d:68:1c:b4:5e:a1:
50:77:14:f3:3c:3a:10:3e:a5:a0:be:77:6d:2d:53:
0e:79:d4:8e:d5:ff:0e:45:55:c8:36:94:27:a5:4f:
af:4f:b3:b4:99:37:1d:f8:05:94:1c:2a:6e:b7:a0:
71:dc:d9:42:f3:25:b7:09:6f:94:bb:fd:0d:db:ad:
41:7d:3f:77:c9:9c:ed:07:6d:10:bc:bb:7a:65:86:
11:c3:0d:74:b5:19:28:38:ab:9b:87:59:ac:1e:86:
ad:8a:28:fb:3a:31:74:b3:a1:63:8a:d7:7a:9c:fe:
02:99:71:15:e1:bc:34:bc:dd:07:64:66:2e:96:9f:
dd:25:9b:57:46:1e:49:a1:9d:c9:5d:a6:70:df:38:
5f:13:43:a2:03:58:e5:3a:2b:54:07:62:09:ea:54:
a8:4f:f4:52:c8:62:77:08:0b:ee:2e:63:61:ea:13:
8a:68:f6:c0:d3:28:95:72:ec:5b:71:22:a7:e5:5c:
3a:82:73:4e:a0:48:58:88:16:db:0b:6e:d7:a2:4e:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:66:24:64:43:4C:16:B8:D9:E7:8C:8F:37:62:AB:63:96:48:01
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:e0:0d:de:4e:fa:80:8a:d3:85:dc:e2:0a:1e:b1:3d:57:
3e:b3:64:43:2c:a9:d0:58:61:95:9d:dc:98:83:71:20:7a:25:
49:de:a6:83:3b:5a:89:14:b0:a9:6b:35:f6:3b:2d:7f:1d:47:
f7:66:13:f9:65:f9:c8:63:7b:af:4d:a1:a4:a7:f8:5d:77:c1:
d6:75:6d:64:c2:a9:05:b5:7a:d6:54:d4:29:0d:95:87:17:04:
4a:84:e8:4b:be:d3:f7:e5:85:89:71:02:3b:3d:a9:ff:b5:03:
38:ef:68:88:72:a0:e4:57:51:24:78:1e:3d:72:69:24:be:a1:
2e:62:8a:03:ea:98:4f:23:fe:66:d5:f1:25:76:68:82:d7:d5:
bc:6d:99:6f:fc:e2:1e:87:d4:51:5c:9b:29:c0:2f:cb:53:c0:
1b:f1:c8:bd:bc:14:ff:fa:43:61:f4:bd:e9:92:a5:f2:18:ea:
c4:e5:38:39:37:d7:19:92:46:76:eb:3f:95:1f:74:34:06:38:
92:fc:40:cb:29:97:16:b6:0b:3c:21:47:8e:f8:03:5d:89:b1:
8a:03:b3:5d:2a:47:04:1d:a5:f0:d6:2f:92:07:0e:21:a1:55:
08:9e:0c:24:b5:26:04:59:31:0f:e4:92:b5:0f:90:fe:be:27:
c0:5c:af:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:18 2025 by rpki-client