Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
File: barMRIxKI6_JSkWnm3bfvoMLJZg.mft (raw, json)
Hash identifier: sTyGXMgDbaY6C2v05c8yHFY4rce0rDpdJptHw+9/Zh4=
Subject key identifier: 25:B9:4A:BD:66:4A:67:E1:5F:33:B0:40:B2:4D:B1:64:A9:9B:E1:69
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 019A247835CCF4B7B4249CDE6D3795792383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:00:49 +0000
Manifest this update: Mon 27 Oct 2025 07:00:49 +0000
Manifest next update: Tue 28 Oct 2025 07:00:49 +0000
Files and hashes: 1: 0RNJuYPZiDcf2gUUOnUhuhAYCyY.roa (hash: irV2LB0+bLUg11vqg/MlCRmvMKCWuhoKie4EXXhcIPY=)
2: KD5CcVWdpeUY7OWEYsk8lC6D2hk.roa (hash: H95zFft64npjWC1JHZ2t6hhvs8iKIUW0H9YWRNoYrAc=)
3: barMRIxKI6_JSkWnm3bfvoMLJZg.crl (hash: KzB4LumCtzS87dNa3BiqdGkA4QX3zeuxcLKfOlde5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:35:cc:f4:b7:b4:24:9c:de:6d:37:95:79:23:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Oct 27 07:00:49 2025 GMT
Not After : Oct 28 07:00:49 2025 GMT
Subject: CN=25b94abd664a67e15f33b040b24db164a99be169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:20:b4:a7:5f:6a:21:b1:36:bc:34:d1:e3:
34:6c:80:0d:65:fe:a0:1e:95:2b:81:83:02:af:4b:
82:fa:f8:03:d7:04:eb:cf:fe:a0:e6:51:54:0f:35:
35:6b:e6:af:53:2b:03:cb:a6:0d:a9:86:16:92:dc:
d3:6c:c0:51:33:a6:2d:93:ba:81:8a:a0:6d:67:31:
00:33:f5:e6:46:86:70:a9:64:7b:9e:14:aa:40:a9:
60:33:32:25:87:3b:69:8a:52:a0:8a:25:07:20:10:
14:85:9e:05:64:3d:6c:9d:ba:da:ce:74:c9:99:38:
a3:ca:00:1d:59:53:40:cd:0f:b0:e2:fc:37:63:b1:
7c:90:28:fe:76:fb:51:24:9d:1d:af:e7:1c:29:29:
77:59:77:67:07:e8:68:09:b1:8e:ad:64:71:90:9f:
c7:59:5f:39:35:91:d3:a6:ca:bc:b4:16:06:e2:01:
33:a4:13:1a:60:a1:4a:70:6f:d2:7b:68:52:e0:9c:
21:42:47:53:ab:b2:ab:60:9c:77:72:50:1b:a3:0f:
ff:c2:a8:07:91:e1:38:da:f5:e1:49:eb:25:35:1d:
db:a5:da:a5:e1:38:a0:ab:2e:62:2b:c8:8a:60:23:
2b:e7:e0:ac:65:e9:40:5a:20:14:5d:2b:4d:b2:4a:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:4A:BD:66:4A:67:E1:5F:33:B0:40:B2:4D:B1:64:A9:9B:E1:69
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e6:4e:aa:f3:0e:d7:ae:b4:52:a7:19:20:51:a6:82:4a:6a:
93:54:e2:f5:99:20:60:67:f8:d7:98:42:06:74:c2:26:42:87:
b5:57:91:a3:27:d5:e8:fc:01:68:ba:ba:bd:9b:5c:79:e4:f8:
6c:74:77:0a:92:f3:a8:3a:ef:8c:6d:f0:09:43:be:71:73:e7:
88:d6:65:79:89:f9:50:06:22:2d:62:f0:a3:d7:be:8e:32:b1:
f1:e1:ce:00:98:78:87:da:3d:2a:b1:ff:35:2b:05:ed:9a:8d:
81:bc:8b:be:5a:c6:56:4a:6c:ae:67:b6:49:cf:9f:25:43:98:
f0:7d:3e:56:bd:26:28:b6:14:26:bf:e8:11:36:ad:4c:d6:77:
22:6f:6a:97:cf:18:13:9b:fe:6e:3c:53:5f:d8:08:a1:ed:9e:
c8:33:fa:28:b2:cc:86:4c:79:fa:52:c6:9d:24:74:c6:8b:0d:
63:1e:01:b6:35:ed:19:a1:61:e6:c9:f8:99:8d:f6:58:f7:d1:
24:9a:10:94:d2:51:8a:32:65:af:34:de:0e:1a:09:d7:36:fd:
70:cf:f4:83:2f:dd:20:50:3d:4c:66:e1:ec:77:20:96:b6:8c:
c7:7a:c3:e2:c4:6e:e1:42:05:80:6a:2c:b8:ec:61:49:10:36:
25:7a:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:02:55 2025 by rpki-client