Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: frHR9SSbTGa+I5y7Mqz/pP1BzIKMS8quLBBxSNhQTvY=
Subject key identifier: 96:84:DA:29:65:93:CE:5D:B3:DF:8D:9C:86:91:46:89:9E:DA:34:C3
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 0198D4E06BD4F53099D2F53C30B7EADA9D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0ED1
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: P9ZFzFJ/BoEeWQqbmEShYS03AMvmg6Nicl1Wr3n4c74=)
2: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)
3: n75oYsvunp6jHjfL-ssHC4CS13Q.roa (hash: 9gvfvSNJUcTeYb3d+ehtt3dMtnfULK46WMr4TAUtaE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6b:d4:f5:30:99:d2:f5:3c:30:b7:ea:da:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=9684da296593ce5db3df8d9c869146899eda34c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:5a:cb:9b:20:3f:6d:6b:c9:fd:bd:1c:b6:
9f:6f:c2:ac:90:22:cf:57:f0:81:84:c4:56:ce:e8:
4f:af:eb:3d:18:e7:d7:d9:a9:f3:25:de:ac:57:fa:
1b:f3:df:52:c1:cc:9c:b9:bb:86:26:4f:dd:39:15:
72:74:6d:89:d2:56:6a:d5:a7:94:dd:49:b5:93:dd:
99:e8:1b:4c:dc:86:ff:d1:d7:95:b7:76:31:65:f7:
9d:c2:85:b6:89:dd:a4:df:fb:6e:a1:cc:c2:32:85:
af:da:0c:84:7c:f8:36:08:e3:d6:8a:9c:18:7b:c4:
2c:ed:93:5c:7a:08:e6:0b:8a:a4:f5:72:e2:91:53:
e2:22:da:32:d0:a3:6c:00:44:5b:13:21:1a:5b:c1:
0a:ae:0c:64:f8:6d:18:c6:ec:24:d4:c4:da:7c:99:
6c:99:af:c5:cf:1f:df:e7:62:a0:76:f2:42:8b:0e:
3a:0d:05:f2:08:a6:65:69:4f:eb:41:b5:ff:26:50:
25:55:02:d5:12:66:31:64:cb:bc:87:03:a7:7c:25:
55:02:b6:c1:04:19:b3:44:fc:09:e2:52:84:b9:05:
a6:23:37:a6:33:34:49:e2:2c:2c:05:d1:48:f4:7c:
ac:da:1f:ca:15:fc:a3:58:8d:2c:3f:a5:64:96:b6:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:DA:29:65:93:CE:5D:B3:DF:8D:9C:86:91:46:89:9E:DA:34:C3
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:87:e1:e3:c6:ea:f4:ef:10:80:bc:84:53:8a:50:be:91:
f0:c9:81:dc:2c:67:99:02:0b:20:bb:76:c5:96:50:dd:8f:b3:
d5:95:ea:5d:18:68:1d:ef:09:34:91:f1:52:4f:38:6b:6c:79:
44:be:22:a7:0b:34:cb:bd:f3:6f:7c:df:fc:bb:09:48:f6:5a:
3e:0e:ec:b3:b9:51:0c:6b:ac:fb:4c:bc:d2:b3:12:26:28:34:
2a:7f:32:d3:2d:40:00:58:74:42:3d:7f:3c:a8:4b:e2:dd:7e:
9a:b9:d7:15:8c:6f:62:1a:67:a8:84:96:01:7d:92:a3:e8:92:
12:11:4b:90:4c:78:41:a0:26:34:9c:36:da:ca:26:00:b7:67:
da:f5:f9:9c:17:3d:58:ad:74:2c:3c:75:55:51:49:58:eb:25:
1f:ce:33:75:ed:31:0f:11:00:e9:a6:12:78:9d:9c:80:f7:ff:
59:f7:ed:ba:84:f3:6a:97:5d:fd:4c:46:59:03:e9:9e:8e:64:
5f:19:57:88:d7:15:13:51:7e:b3:95:03:38:da:b3:c1:ac:87:
aa:f9:7f:00:b9:c4:d7:70:61:50:c9:da:9f:77:d5:cf:57:49:
e4:2f:c0:af:0b:4c:7c:ec:60:16:56:07:76:e9:59:9b:ec:78:
75:1f:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:50 2025 by rpki-client