Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: NLmrgginHAIhiaQxaOM9Ku/d9dCsrNu/onH+9xUnVJ4=
Subject key identifier: 58:AB:B9:BB:EA:C8:62:87:AA:B6:DC:DD:4F:4C:5B:FD:39:74:ED:B6
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 0199FBEB33682F5066F995640BCEF116860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: F/6bBkIS9qDSHS/C2hp7N1/PkUMq5htXz0O+Y3bwgVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:33:68:2f:50:66:f9:95:64:0b:ce:f1:16:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=58abb9bbeac86287aab6dcdd4f4c5bfd3974edb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:08:4a:87:68:05:d5:3e:06:cb:d2:75:a8:
c9:5e:e8:5a:75:90:3b:46:57:67:e1:40:60:71:5b:
7d:07:66:b6:b5:20:b8:b7:98:e6:3b:ab:6e:c8:fb:
da:bf:89:bc:86:7a:22:5f:a3:17:7b:b8:ff:d0:1b:
3a:12:42:55:29:f0:22:f8:09:4c:70:d8:01:08:5a:
38:40:62:80:a8:f1:29:ca:e3:a9:37:39:b9:b8:73:
b6:74:0c:e8:3f:07:03:a6:b2:bd:c4:2b:63:aa:64:
26:31:2f:aa:7a:ea:90:47:4e:20:ae:e7:fe:2e:af:
1c:66:4a:6a:a4:2c:3f:f3:23:67:04:78:6c:16:51:
b3:72:76:1a:10:4f:53:29:37:3a:ce:54:90:f8:9e:
a5:12:09:c5:f7:8f:f7:95:f7:70:43:b8:96:ed:d7:
bb:4d:6f:d8:cb:01:56:5e:cb:a6:15:31:b5:be:b3:
98:81:8c:5e:6c:78:5f:b6:5c:b5:a4:19:79:47:66:
cb:ef:f8:ca:40:52:44:30:49:03:ee:37:f4:81:2c:
22:21:a5:6c:42:88:6d:84:0c:6b:61:8f:41:55:24:
8b:45:fa:39:e5:bf:70:a7:70:df:75:83:f3:29:8b:
c5:40:ff:a7:be:dc:6f:86:d3:25:40:c5:75:6d:c7:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:B9:BB:EA:C8:62:87:AA:B6:DC:DD:4F:4C:5B:FD:39:74:ED:B6
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:69:0e:2e:ad:0e:31:f0:58:29:8e:e2:6c:8d:61:b3:db:66:
33:ed:07:22:42:ce:fd:bd:29:6e:4c:7b:3a:26:9f:28:4c:b8:
f9:89:53:71:be:8f:93:94:0f:40:05:27:df:0a:97:47:87:a2:
69:3b:cb:77:3a:ff:89:e5:ce:89:d6:b2:0a:58:03:ce:b9:0b:
18:4b:10:17:4d:e9:42:fe:d9:2b:47:1e:8d:54:44:15:6c:f2:
0f:f3:8d:25:06:bd:c0:c1:79:f7:27:f7:76:71:57:c2:07:ec:
ab:ea:5c:c5:63:a5:2f:f2:39:d0:5e:17:03:58:b3:b1:55:1b:
70:f2:37:76:e6:29:4e:9f:28:ed:d8:2d:51:44:41:7b:0f:3b:
d5:84:d5:af:6a:71:f8:be:d7:f5:45:85:6f:06:75:67:b1:5f:
5a:5c:70:a4:ab:9e:23:12:31:e5:ae:57:81:9e:c2:e1:b0:bd:
88:29:da:dc:4c:2b:0f:99:91:9c:e4:dc:04:f9:5b:c2:53:9d:
f1:be:a6:58:65:1e:56:68:58:d3:f1:5c:90:cc:14:29:17:e5:
1c:c7:21:c1:75:a1:02:d8:a9:35:37:00:9c:e0:8b:13:ca:ca:
e4:9f:bf:b8:3c:9e:6b:7c:0a:b7:d6:8a:8b:84:d3:94:6d:73:
85:80:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:17 2025 by rpki-client