
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: nc+Zb4VZuhK0RZ/i805o7Fy7L9DSRI4MIDQuG3FVA+0=
Subject key identifier: 99:E1:A7:31:5D:67:F3:1B:1E:B0:57:96:46:E6:F3:DE:E6:87:AF:81
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 0199FA6A434ED28D2DB24EF9F2904DCAE252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0F69
Signing time: Sun 19 Oct 2025 03:01:31 +0000
Manifest this update: Sun 19 Oct 2025 03:01:31 +0000
Manifest next update: Mon 20 Oct 2025 03:01:31 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: AvuRdFb/+KXs9L6ZLKSYgySknNQcO4mqrpcqMDNUaHw=)
2: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)
3: n75oYsvunp6jHjfL-ssHC4CS13Q.roa (hash: 9gvfvSNJUcTeYb3d+ehtt3dMtnfULK46WMr4TAUtaE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:43:4e:d2:8d:2d:b2:4e:f9:f2:90:4d:ca:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Oct 19 03:01:31 2025 GMT
Not After : Oct 20 03:01:31 2025 GMT
Subject: CN=99e1a7315d67f31b1eb0579646e6f3dee687af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:64:30:8c:bd:e8:63:05:a2:d9:83:38:81:
9d:be:66:4e:69:77:8b:f5:76:ce:03:79:41:8c:a3:
a5:09:a6:a5:53:8d:84:80:8f:d6:eb:28:6b:bc:18:
92:b0:15:83:29:6d:6e:d4:d8:ae:5b:59:a0:ea:29:
a1:0f:79:ab:23:17:a2:9e:58:80:58:29:88:48:d9:
66:4a:3d:4d:f5:98:3c:1a:27:88:de:d5:22:2f:b5:
39:57:a3:23:2a:fd:f1:07:dc:e7:87:ae:35:f1:2a:
33:6b:11:97:cf:72:e3:5c:51:8e:a2:fb:9f:a3:a4:
f3:5d:be:35:87:64:ff:cc:85:5e:85:03:47:9a:64:
7c:5b:6c:88:25:0f:31:b7:23:5d:33:73:00:32:57:
43:4d:95:2f:77:e3:3d:cf:33:ee:34:12:b5:a8:ef:
89:06:f2:d1:1e:7c:fe:7f:17:b9:4b:9f:68:44:39:
24:28:fe:e3:fc:9b:38:84:33:05:1c:c4:3d:da:0f:
89:3a:f2:b5:84:c2:ef:89:71:58:d8:db:a9:b2:62:
ce:eb:dc:2c:84:bb:00:a0:19:04:ca:29:c2:22:4a:
4b:27:66:fd:f5:af:5d:f3:f3:c5:e3:87:5b:81:00:
0d:51:14:c9:fb:5f:70:e9:47:20:7b:37:e7:f0:f6:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E1:A7:31:5D:67:F3:1B:1E:B0:57:96:46:E6:F3:DE:E6:87:AF:81
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a9:0f:4f:98:99:be:fe:a8:ca:38:98:48:68:24:77:03:d8:
5f:1e:ee:7b:45:d0:ce:8f:b8:26:17:43:3a:80:de:00:f1:c0:
16:31:3f:46:3e:3c:d4:b8:63:d1:bb:fe:16:19:f8:6e:89:86:
ac:c2:ed:9c:df:85:b1:46:fc:d5:9a:00:cc:d7:34:cf:c3:8c:
41:40:a3:79:8b:d0:13:1c:d7:b8:0f:c9:cc:5f:ea:42:cd:40:
41:b0:01:fc:52:5c:78:03:ba:d3:73:7f:a2:d8:3a:54:57:cd:
e1:3e:e7:c5:dc:a5:d5:a0:f7:1c:57:d8:16:e3:bd:90:40:0e:
bc:c0:e1:68:31:34:33:df:64:fe:5a:7c:ca:75:b8:fa:6a:5b:
6e:54:33:a1:8d:90:67:0e:f7:87:cd:50:32:0b:3a:d1:df:66:
0d:83:86:9c:be:17:43:af:a6:ea:b6:4e:c9:ce:4c:dd:41:a0:
a6:bf:fb:8c:f9:40:23:6c:dc:cf:c8:cf:5a:8c:ed:1f:87:1b:
04:8d:1c:b8:bb:4c:11:13:f5:0b:24:50:92:6e:ea:7d:a0:31:
45:f4:c8:47:5e:7b:1f:e3:03:5f:d6:ec:89:e1:e7:dc:a3:9b:
5f:ac:fe:28:fb:74:2d:56:d7:ed:18:17:ac:07:db:64:f0:69:
63:8a:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:49 2025 by rpki-client