Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: rwak76ZMVw5fgvRuynLddhLpV88MJfTXy8ZXNWG+vqY=
Subject key identifier: 64:59:45:35:79:E9:E2:67:68:2B:57:8D:E8:02:13:8A:AD:DA:C5:7F
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01964F6C82E726A6AA56EE0308DA027F641E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 19:00:33 +0000
Manifest this update: Sat 19 Apr 2025 19:00:33 +0000
Manifest next update: Sun 20 Apr 2025 19:00:33 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: uKiL78Mz3+dQzIBTOCGUoZ1RWwO6HxqWzjNfUJ5G5ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:82:e7:26:a6:aa:56:ee:03:08:da:02:7f:64:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Apr 19 19:00:33 2025 GMT
Not After : Apr 20 19:00:33 2025 GMT
Subject: CN=6459453579e9e267682b578de802138aaddac57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:2f:94:59:ca:32:ce:29:31:39:86:17:e3:
f3:6a:e6:6b:6e:fb:db:c8:b8:93:e0:3d:0c:b2:3f:
b0:db:df:70:05:68:17:66:cb:62:e7:67:c4:df:c0:
f7:4e:55:d9:c1:4f:9f:45:c3:0a:a0:32:b6:80:28:
c9:11:1b:20:28:79:9d:ad:19:4e:16:85:10:09:27:
c0:6d:52:fc:ce:96:c7:28:98:72:38:be:4d:e2:ea:
d8:39:fc:78:dc:0b:76:db:64:c9:0e:1d:19:f8:a5:
c3:d4:dd:16:11:11:6d:5a:aa:de:21:07:45:06:a7:
75:ae:48:90:16:cb:dc:6f:66:27:06:fe:e8:f5:fb:
9e:f1:9b:7a:e2:97:a8:1c:2d:b8:26:01:86:1d:12:
5f:8b:d8:32:20:81:0f:f7:3f:37:db:04:07:72:36:
55:25:eb:74:a9:70:61:04:c8:87:0d:01:59:99:4d:
e7:29:f4:e0:81:9c:6e:ea:bd:5a:14:7c:07:6d:f3:
37:d4:89:0d:56:ac:74:1c:85:8f:bb:a3:4a:b1:02:
27:14:de:78:6b:93:d8:32:0c:36:1c:64:72:34:5b:
44:86:9b:f5:a3:13:03:51:1d:0f:c1:0b:08:2d:de:
d4:9f:f5:7d:4a:47:30:c9:4f:8d:e0:f9:8c:f0:62:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:59:45:35:79:E9:E2:67:68:2B:57:8D:E8:02:13:8A:AD:DA:C5:7F
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:61:b7:2f:21:8c:e1:2d:80:25:6c:53:20:ee:79:06:cd:b3:
4b:df:bf:f7:c8:d8:c9:a6:c4:11:af:5f:6f:68:57:24:15:fe:
37:b6:c4:10:ef:a9:46:68:81:49:60:9b:e7:03:27:19:41:ff:
12:fb:63:2f:ed:ca:35:1f:1c:29:5d:7f:db:ad:c8:d9:95:c7:
ab:96:d3:07:63:2a:90:cc:d1:7b:b2:fe:60:f1:d3:e3:64:1b:
e4:8e:70:41:6b:e6:39:7a:18:6f:f7:e2:e7:90:c3:9a:87:62:
23:6b:8f:74:e6:c0:8e:07:f4:04:1b:67:40:76:7d:12:c7:c3:
ef:f9:56:41:e0:80:50:c7:3e:a4:60:4a:d3:97:5a:80:1d:7b:
e7:a6:02:e9:bb:59:11:80:21:5f:ed:74:30:c9:eb:de:28:f3:
86:14:c9:dc:4a:47:d6:25:46:7d:3c:5b:45:01:6f:30:c4:b7:
58:12:9c:37:fb:85:82:8f:6f:78:a1:c7:0c:c2:40:b8:a8:e0:
92:b3:2e:e9:9a:4f:f9:a9:a9:c2:c5:a5:8f:b5:05:00:e8:b4:
3f:e6:ba:85:37:7d:0a:1c:3f:41:db:ea:34:87:80:0e:ad:01:
03:5e:4e:50:79:f2:8e:52:28:4d:77:71:49:fa:80:36:65:9e:
3c:c1:84:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbILnJqaqVu4DCNoCf2QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYWFjYzQ0OGM0YTIzYWZjOTRhNDVhNzliNzZkZmJlODMw
YjI1OTgwHhcNMjUwNDE5MTkwMDMzWhcNMjUwNDIwMTkwMDMzWjAzMTEwLwYDVQQD
Eyg2NDU5NDUzNTc5ZTllMjY3NjgyYjU3OGRlODAyMTM4YWFkZGFjNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZovlFnKMs4pMTmGF+PzauZrbvvb
yLiT4D0Msj+w299wBWgXZsti52fE38D3TlXZwU+fRcMKoDK2gCjJERsgKHmdrRlO
FoUQCSfAbVL8zpbHKJhyOL5N4urYOfx43At222TJDh0Z+KXD1N0WERFtWqreIQdF
Bqd1rkiQFsvcb2YnBv7o9fue8Zt64peoHC24JgGGHRJfi9gyIIEP9z832wQHcjZV
Jet0qXBhBMiHDQFZmU3nKfTggZxu6r1aFHwHbfM31IkNVqx0HIWPu6NKsQInFN54
a5PYMgw2HGRyNFtEhpv1oxMDUR0PwQsILd7Un/V9SkcwyU+N4PmM8GI4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRZRTV56eJnaCtXjegCE4qt2sV/MB8GA1UdIwQY
MBaAFG2qzESMSiOvyUpFp5t2376DCyWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAt
NzU2ZjNjYzNlYzMzLzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zNDY0OWUtOWJjNC00MDE4LWIzYTAtNzU2ZjNjYzNlYzMz
LzEvYmFyTVJJeEtJNl9KU2tXbm0zYmZ2b01MSlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWG3LyGM
4S2AJWxTIO55Bs2zS9+/98jYyabEEa9fb2hXJBX+N7bEEO+pRmiBSWCb5wMnGUH/
EvtjL+3KNR8cKV1/263I2ZXHq5bTB2MqkMzRe7L+YPHT42Qb5I5wQWvmOXoYb/fi
55DDmodiI2uPdObAjgf0BBtnQHZ9EsfD7/lWQeCAUMc+pGBK05dagB1756YC6btZ
EYAhX+10MMnr3ijzhhTJ3EpH1iVGfTxbRQFvMMS3WBKcN/uFgo9veKHHDMJAuKjg
krMu6ZpP+ampwsWlj7UFAOi0P+a6hTd9Chw/QdvqNIeADq0BA15OUHnyjlIoTXdx
SfqANmWePMGEjw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:47 2025 by rpki-client