Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: 31SKp5naKGnkKkuCZgyV5QNpgbMM52wIM7E9iGY3ddE=
Subject key identifier: B7:62:F6:39:28:31:A0:13:80:95:EB:DD:0F:E3:E4:3B:7D:D1:5D:FD
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01976960AAE6135B3044C40CFBB0D8AEB264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:00:32 +0000
Manifest this update: Fri 13 Jun 2025 13:00:32 +0000
Manifest next update: Sat 14 Jun 2025 13:00:32 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: U9aFChtpxTvrFVo4G82oAca57kInqpF1vOXIUKTxIxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:aa:e6:13:5b:30:44:c4:0c:fb:b0:d8:ae:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jun 13 13:00:32 2025 GMT
Not After : Jun 14 13:00:32 2025 GMT
Subject: CN=b762f6392831a0138095ebdd0fe3e43b7dd15dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:78:d6:2e:21:ee:32:d6:25:e2:bf:ea:93:
b8:55:14:18:0a:9b:f1:34:5b:d2:80:0d:3b:fa:19:
53:91:d3:40:fa:60:b8:72:55:e3:dd:a4:7b:70:3c:
32:aa:ce:a7:64:d8:9f:d9:7b:cb:36:bc:ac:e8:2c:
60:75:e0:f1:0b:57:6b:cc:5b:69:21:e2:f9:e6:25:
de:f5:cf:f5:b5:4d:64:8b:05:3d:6e:ea:86:d7:89:
72:9d:c9:81:bf:7d:c5:e0:83:28:f0:ba:95:45:23:
8a:86:60:08:6a:05:88:37:d1:c5:d8:49:13:4c:9a:
b6:01:80:74:c2:67:97:d2:88:c6:56:b9:21:cc:fc:
26:f9:c5:75:18:5e:9d:15:c1:8a:f2:30:60:3b:7c:
cb:8b:d5:0c:ae:d2:4f:60:98:ad:82:2d:e6:d7:7a:
ac:c7:c8:74:8b:23:d5:19:08:2b:20:c6:06:f9:e2:
a4:44:d6:85:02:99:81:c1:cd:2b:f4:c1:07:c9:0c:
c9:b8:d8:76:a4:c6:57:64:a6:7d:38:69:e7:f7:d8:
fa:39:41:df:c2:d6:c6:45:55:38:24:92:e4:26:22:
09:0d:27:59:44:2f:3e:ad:4f:73:6e:b4:d6:76:f8:
69:dd:fe:7e:3a:10:29:ce:4c:f7:f7:ec:b5:0d:27:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:F6:39:28:31:A0:13:80:95:EB:DD:0F:E3:E4:3B:7D:D1:5D:FD
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:80:83:4e:96:fd:df:ea:eb:8e:24:1b:1f:47:8e:0b:a2:82:
66:60:99:de:d1:92:fe:d3:3f:69:87:9a:e0:9f:00:35:16:eb:
36:0c:f7:9f:71:24:21:5c:5d:22:31:f5:c6:86:f1:3d:83:14:
db:a1:4c:e5:da:42:5b:ba:81:0d:09:ef:9e:c0:f3:b1:b5:fb:
e4:1f:d2:5c:f2:a3:b3:51:81:0d:01:a1:d9:82:df:23:06:14:
5c:0d:27:dd:62:27:c6:7f:55:fd:fc:6f:78:e7:6b:f9:a7:b0:
55:8c:5a:a9:36:95:90:28:2f:d5:3c:f2:1d:59:2c:3f:c9:f2:
c5:85:06:c5:39:09:cc:f3:b1:af:43:bc:35:61:ec:30:0f:a7:
3c:6f:db:44:bb:5d:fc:14:fb:3a:3b:29:21:02:d8:5f:cb:1a:
f2:e4:5b:74:83:9a:4b:1c:48:09:47:80:62:50:4c:40:d3:3d:
62:d9:46:d5:51:19:97:09:87:a6:94:64:73:1a:42:72:95:b3:
b3:b7:38:c3:4f:34:26:19:16:10:ce:5c:aa:51:9a:39:82:56:
de:70:35:d9:6b:1c:b9:24:13:bc:7a:fc:31:0c:d5:6a:52:a2:
8b:9b:fb:64:c6:39:a8:f4:4e:88:f2:d8:64:32:82:78:0b:e7:
ad:15:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:33 2025 by rpki-client