Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: /OEDkeAgBZLsQZjPe1rHFZFtuqbK8xi94o40ray2emI=
Subject key identifier: 9A:70:69:E3:CC:EA:6F:3B:D1:6B:83:04:93:F4:16:80:C3:90:51:7E
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 0197B88F0D008B9B131182B01DEA8E6AED0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: HinlvN1ebR6aFD70UX6iOvo2vj6y79zGaRbBvw8zYpQ=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0d:00:8b:9b:13:11:82:b0:1d:ea:8e:6a:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=9a7069e3ccea6f3bd16b830493f41680c390517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:c0:b4:36:e8:94:11:8f:3e:33:11:81:8e:
67:7c:3d:da:a7:a3:6e:77:84:62:66:a7:2a:4c:ba:
81:25:fa:27:b5:9a:08:55:c9:07:26:8c:c3:d7:65:
29:7a:ef:1c:fe:a2:e8:16:af:b7:a5:ca:bf:95:eb:
25:e9:03:e4:61:bb:37:1b:9b:95:79:ac:64:7f:e5:
7c:83:bc:26:62:cc:34:ed:6d:4f:d4:f4:7a:b3:7f:
aa:78:4c:c1:b7:fe:8c:e7:12:e5:2b:c2:9a:5e:09:
12:50:06:38:95:eb:b4:ef:1a:2b:a6:86:83:37:c7:
33:0c:dd:62:58:67:68:fc:14:44:9b:50:37:64:83:
76:3d:1f:98:73:4e:56:18:6b:28:47:92:18:ab:bc:
e9:8c:5c:1a:04:c8:92:7a:e0:5f:29:37:89:f3:30:
ef:86:22:12:2e:00:de:42:67:1c:65:8a:b5:b0:ac:
e9:36:64:3d:57:28:18:8d:2d:3a:ec:0c:e9:12:f8:
3a:0d:17:52:b6:9b:d5:2b:08:01:27:12:69:1f:eb:
b7:23:32:51:7e:4f:34:9a:91:be:50:9a:2f:89:7e:
5a:78:74:95:b8:45:cc:2f:73:24:05:27:cd:40:9f:
38:f4:ea:a2:28:b3:f2:8d:5e:51:9a:5b:04:4e:13:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:69:E3:CC:EA:6F:3B:D1:6B:83:04:93:F4:16:80:C3:90:51:7E
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:44:7c:37:4b:9b:63:ca:ca:47:64:99:51:62:1c:9e:b9:
22:ed:f7:ab:12:3f:5f:a9:65:ed:65:cf:11:5e:6f:fd:25:c0:
8f:ba:b6:f2:b6:d2:89:09:fb:8d:19:33:0e:54:56:be:11:e1:
43:07:f5:da:c5:1c:7a:da:0f:54:e9:93:41:ae:59:44:00:c0:
c4:da:b7:9a:0d:a3:6f:73:aa:95:5d:18:7c:e1:a0:51:5c:9f:
1e:97:60:33:57:b2:3c:93:cd:67:cf:c7:1e:db:1f:da:dd:3f:
28:0b:b7:8d:42:fe:20:e6:f2:07:c9:24:0f:3d:c6:88:c8:b0:
77:61:27:3f:8b:92:57:36:a3:43:06:91:77:35:fa:b7:fb:ef:
90:e1:e5:b7:a0:07:ae:17:5d:d9:03:20:24:fd:3b:b6:9d:39:
b9:82:2c:1a:8e:22:2f:50:9b:df:4f:30:96:2d:6a:26:12:e8:
db:6b:61:51:ae:cf:ac:4b:1d:1b:2d:53:10:de:0e:ec:53:32:
b9:9c:7b:cc:2a:31:d0:df:9f:86:c4:d3:1b:dd:b2:04:5f:64:
60:f1:5e:12:76:fe:11:12:92:5d:4a:7b:7d:5e:22:81:83:03:
a1:40:b6:98:3e:d2:89:f6:4e:2a:ce:2f:b9:4d:24:4c:81:d8:
8d:7f:12:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:31 2025 by rpki-client