Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: Bdz9RlWoFjY+QC6IJkIOsfK+uqmZOMrSZNhK25CG4eM=
Subject key identifier: 69:12:9B:D2:45:AA:D8:30:9F:90:C8:8B:AE:68:1C:84:D8:17:22:30
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 0197B6A1853512D08E846B1CC0A5753C897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:07 +0000
Manifest this update: Sat 28 Jun 2025 13:02:07 +0000
Manifest next update: Sun 29 Jun 2025 13:02:07 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: MYH3yi2tgMlgXrpQNNS8ibfmXv3rO7kKlBEv92O4yiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:85:35:12:d0:8e:84:6b:1c:c0:a5:75:3c:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jun 28 13:02:07 2025 GMT
Not After : Jun 29 13:02:07 2025 GMT
Subject: CN=69129bd245aad8309f90c88bae681c84d8172230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:9d:1f:52:60:5d:e7:d8:29:01:d9:de:e4:
bc:13:0e:39:e7:e5:06:d2:34:b7:5e:00:ea:b9:09:
bc:43:33:fc:ad:18:f8:7d:a2:72:d4:ae:6d:5c:89:
13:2c:be:9b:7f:74:0d:36:38:84:4f:c3:46:bb:3e:
ea:13:65:4d:fc:e7:7a:8b:4e:b6:b0:d2:89:91:27:
b9:09:a1:dd:53:d9:af:0b:f3:ee:6d:9c:5e:3c:20:
60:d2:81:25:1a:31:44:b9:60:ba:6a:ed:95:1a:e2:
8e:75:1b:72:e5:4c:bd:0a:9d:36:8b:f8:ab:14:35:
07:d8:2f:16:77:67:55:d1:ab:ab:9a:c7:4e:37:cd:
ec:fa:48:e0:71:a6:1d:c5:7f:d8:6a:99:39:bf:d0:
2c:13:fb:d4:95:36:89:aa:f8:de:45:19:c1:0e:51:
69:77:49:a5:fd:74:e5:a6:30:f6:14:71:03:15:a7:
83:69:74:ec:54:e5:ea:51:34:a4:a1:63:a6:9d:57:
ef:8e:3e:e4:4a:84:bf:66:94:f4:40:13:54:7d:fb:
db:fa:1b:95:ce:de:7b:56:0c:35:32:94:93:69:d2:
44:63:0c:ad:75:6f:6e:ce:ed:f5:07:b3:76:b0:0b:
ac:e5:64:e8:b8:5e:77:4f:d2:f0:4b:f4:6a:63:3f:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:9B:D2:45:AA:D8:30:9F:90:C8:8B:AE:68:1C:84:D8:17:22:30
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:d3:0b:f9:b1:03:00:8d:cd:81:61:82:47:71:5f:b4:f5:
73:80:31:5d:41:2f:e5:43:29:19:86:a2:9a:62:99:97:4d:9d:
2c:2b:1f:44:00:a9:b9:bc:02:ee:0e:81:88:b6:4c:da:ac:e7:
83:c3:ea:5e:77:33:7a:da:e1:fd:6b:d2:21:8e:36:89:f4:40:
f4:3f:f8:bf:92:44:97:36:97:b1:b1:a2:dd:b5:ff:28:33:48:
f2:e6:24:53:41:75:eb:4b:ca:e4:6b:2c:47:c9:50:2f:ab:41:
d2:e7:2d:e0:2b:e9:1b:3a:d3:b7:fd:02:73:a9:52:6c:bc:6a:
ad:a2:ea:2d:08:ec:d7:e5:2c:ae:7c:ab:8a:47:ea:e9:9c:10:
50:10:22:b4:7a:2d:48:80:26:8c:01:99:71:b0:42:71:64:2c:
c3:fb:c5:f1:c5:6b:62:d9:e7:a7:64:91:52:34:a1:db:0a:6e:
37:5a:c3:de:95:fd:89:21:30:d3:00:17:74:eb:c7:65:41:08:
a8:50:54:cb:7e:1d:1e:89:3a:d1:1c:0b:8d:18:08:37:42:0d:
70:dc:32:4f:5f:78:fa:37:46:50:f6:a7:49:16:48:76:5d:6c:
90:81:e9:2b:b4:85:04:2e:7d:9c:9d:b9:2d:bd:ae:83:c7:99:
fe:35:ff:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYU1EtCOhGscwKV1PIl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw
YjI1OTgwHhcNMjUwNjI4MTMwMjA3WhcNMjUwNjI5MTMwMjA3WjAzMTEwLwYDVQQD
Eyg2OTEyOWJkMjQ1YWFkODMwOWY5MGM4OGJhZTY4MWM4NGQ4MTcyMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS2dH1JgXefYKQHZ3uS8Ew455+UG
0jS3XgDquQm8QzP8rRj4faJy1K5tXIkTLL6bf3QNNjiET8NGuz7qE2VN/Od6i062
sNKJkSe5CaHdU9mvC/PubZxePCBg0oElGjFEuWC6au2VGuKOdRty5Uy9Cp02i/ir
FDUH2C8Wd2dV0aurmsdON83s+kjgcaYdxX/Yapk5v9AsE/vUlTaJqvjeRRnBDlFp
d0ml/XTlpjD2FHEDFaeDaXTsVOXqUTSkoWOmnVfvjj7kSoS/ZpT0QBNUffvb+huV
zt57Vgw1MpSTadJEYwytdW9uzu31B7N2sAus5WTouF53T9LwS/RqYz/3XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkSm9JFqtgwn5DIi65oHITYFyIwMB8GA1UdIwQY
MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt
NzU2ZjNjYzNlYzMzLzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz
LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpjTC/mx
AwCNzYFhgkdxX7T1c4AxXUEv5UMpGYaimmKZl02dLCsfRACpubwC7g6BiLZM2qzn
g8PqXnczetrh/WvSIY42ifRA9D/4v5JElzaXsbGi3bX/KDNI8uYkU0F160vK5Gss
R8lQL6tB0uct4CvpGzrTt/0Cc6lSbLxqraLqLQjs1+Usrnyrikfq6ZwQUBAitHot
SIAmjAGZcbBCcWQsw/vF8cVrYtnnp2SRUjSh2wpuN1rD3pX9iSEw0wAXdOvHZUEI
qFBUy34dHok60RwLjRgIN0INcNwyT194+jdGUPanSRZIdl1skIHpK7SFBC59nJ25
Lb2ug8eZ/jX/kA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:41 2025 by rpki-client