Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: +XY2SbZFiyNq9AhOMJ85hKzFXn/Ys0MyyXzVK3Py2qA=
Subject key identifier: 99:B8:4C:BE:05:75:CB:1E:CD:2C:0A:26:BF:9C:9A:4C:8F:0E:F4:8B
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 0197B632A1D3CC75972DBEE9B89B340027EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0E3C
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: TG8+CM00Xs6+uHefZoxkpXDYCefk1z55dL+R+cBafAo=)
2: LxqOr6kmcQm7vZYRRdP1VkRGlgU.roa (hash: 3mO1xiAyPsi9YB2Utyx+mrmowxSoZyyyseC61QFbUek=)
3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a1:d3:cc:75:97:2d:be:e9:b8:9b:34:00:27:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=99b84cbe0575cb1ecd2c0a26bf9c9a4c8f0ef48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:0a:f9:4b:92:34:3f:89:2b:8e:08:83:b1:
6a:6d:2a:d0:e4:4a:36:69:f2:3d:0b:e9:c6:1e:56:
da:d8:53:11:f0:93:42:e4:10:8c:c8:5f:75:de:62:
b4:56:f8:87:5b:87:da:ca:0a:4b:2c:15:7a:d2:8d:
e5:88:62:bb:b7:1d:53:e6:8d:e7:0c:31:bc:f1:9f:
cd:7c:3b:df:8d:c8:9f:95:63:29:4b:91:52:f1:ae:
99:64:c3:a2:e7:a4:36:09:a3:9c:25:2c:ee:af:4a:
69:c1:61:94:14:15:70:8e:b8:90:9c:e7:1d:68:89:
ac:7c:8c:85:04:bd:76:e0:b1:b6:a5:f4:85:99:96:
01:0c:92:c9:12:4f:1c:26:c6:99:41:40:23:a6:b1:
1c:4b:91:9d:f9:5c:e3:5d:84:49:0a:99:86:4b:73:
9e:9f:95:40:a2:dc:49:e4:e0:c6:c4:ba:4d:12:06:
a0:23:2b:e9:a6:12:4d:89:ff:9d:9a:cd:d8:3f:7b:
08:21:27:36:0c:b5:bb:f8:74:e0:89:6d:8a:f2:58:
b9:05:3f:97:a0:0d:84:c0:d7:31:34:ba:43:47:c8:
a3:c5:c7:41:b1:51:a6:99:f3:85:54:54:75:cd:31:
0c:20:d0:66:b7:f2:f2:1f:2f:c6:e9:57:08:1e:9e:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:4C:BE:05:75:CB:1E:CD:2C:0A:26:BF:9C:9A:4C:8F:0E:F4:8B
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:71:52:bd:6b:2f:7d:3d:5f:d0:99:62:d5:f6:64:fc:be:d1:
41:5e:8d:ac:79:d9:e3:cf:2e:1c:56:81:b8:29:44:c0:26:89:
a0:dc:37:c8:31:6a:de:f1:91:05:0d:e0:08:33:81:f4:dd:e9:
b4:63:2a:f4:44:7a:f8:0e:00:b1:1e:ba:d5:85:3f:c7:d2:cd:
5a:f5:9a:2f:60:8c:2f:24:86:8a:66:02:b0:e6:fc:dd:c3:3f:
d5:4e:ff:cd:de:69:7d:60:d7:46:84:90:f8:a3:81:29:48:80:
88:ea:94:1d:93:d9:e3:d7:42:21:82:35:a9:8a:0a:cb:8d:18:
71:28:21:f1:72:f5:a1:ff:15:9b:1f:2e:d1:fe:cb:2a:49:59:
f5:a0:76:88:ef:95:00:b4:e0:1c:75:08:d4:c0:78:98:23:d6:
a1:29:16:d6:cf:93:58:a9:68:c2:7c:e1:7b:a5:55:a8:c1:a9:
e8:ad:cf:37:eb:cd:66:62:cb:4e:7b:ea:d7:ed:b0:3f:de:f4:
eb:76:0d:c9:1e:0b:c9:24:b4:30:36:5c:58:4d:81:d9:f4:4b:
8b:21:09:7b:9c:86:ab:64:8b:92:5f:85:a2:1f:da:57:d8:33:
0e:5d:ba:60:8f:a5:be:f0:fb:52:b5:5d:ab:de:cc:ab:df:8e:
4f:88:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:44 2025 by rpki-client