Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 9TNsnxoZ7yogg/wsQdYt64yb0Q6XFY0i+tcbbXExAGk=
Subject key identifier: D6:E3:0F:39:E9:73:9D:62:3B:41:42:F8:D2:CA:D1:A8:E0:A0:A8:F5
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 0196CACE1EC6EB9343B0C7920AD95BD891CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 18:00:27 +0000
Manifest this update: Tue 13 May 2025 18:00:27 +0000
Manifest next update: Wed 14 May 2025 18:00:27 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: oFxD8vigMtTT4UneJMMY59pzirp2xo0ADsav8Wu3IDw=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:1e:c6:eb:93:43:b0:c7:92:0a:d9:5b:d8:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: May 13 18:00:27 2025 GMT
Not After : May 14 18:00:27 2025 GMT
Subject: CN=d6e30f39e9739d623b4142f8d2cad1a8e0a0a8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:31:a1:cd:e3:31:6d:e0:af:56:dd:8a:82:
8c:40:4f:ae:0e:2b:43:49:75:6e:97:1a:15:62:e6:
f4:b9:07:d8:0d:6d:a7:a9:0e:a5:f0:03:c4:60:98:
3f:a8:a8:e6:4f:8f:b5:d6:ca:a9:db:20:6a:59:b1:
82:bc:25:6b:b6:a8:9e:a4:d3:3d:ff:e6:dd:a2:02:
bc:b9:9f:0f:a0:6c:56:3f:7b:d3:78:f7:b8:44:a0:
fa:17:e6:be:9b:08:43:66:ee:31:f6:e5:6f:9e:2f:
ff:a5:5b:ca:fb:ab:8f:6f:d9:c8:ee:51:28:26:56:
6b:81:69:5a:90:9f:17:28:17:00:14:ed:c1:2e:5c:
d3:46:81:86:05:e1:fb:23:70:ea:fe:bc:54:6e:c5:
75:a3:c9:20:38:c5:2e:59:2d:84:9e:b0:bc:74:0f:
33:97:5e:91:e2:ff:87:9a:93:f1:d6:da:b0:d8:38:
b7:b8:a0:16:34:c8:ff:3d:c6:88:7c:c7:82:f1:0f:
94:fe:d2:1c:e0:b4:61:20:b8:48:7e:48:8a:9e:24:
19:cb:21:1a:8f:cb:41:ec:31:b2:c9:f9:c7:bf:98:
4a:67:36:10:48:f2:34:a7:ea:8c:28:06:a0:3c:16:
e3:36:91:c9:b0:0c:aa:45:61:ba:74:cc:c1:89:78:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:0F:39:E9:73:9D:62:3B:41:42:F8:D2:CA:D1:A8:E0:A0:A8:F5
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:b8:30:fd:47:4b:52:83:1c:39:1c:2b:5a:9b:bc:c2:35:
2e:a6:02:c6:b8:57:74:67:45:c4:da:b9:63:17:74:61:0d:63:
42:ce:97:db:70:b6:0e:bf:c5:fd:c1:1c:31:1f:e1:16:bd:01:
2f:6b:33:ce:71:2d:1c:2e:5e:c0:f7:cd:77:a2:b6:e3:b6:05:
76:4a:f1:95:5f:4e:dc:30:b7:e3:48:c6:a8:14:61:5d:57:b9:
71:35:58:8f:e1:5b:55:26:39:ed:e4:84:93:a9:a7:8d:2c:61:
d9:8c:93:90:bd:2b:c4:b9:87:4e:f6:62:5f:bc:67:65:f3:5d:
a2:55:c8:f4:b7:06:99:8f:05:77:17:46:a8:83:eb:fc:ff:68:
4e:2f:42:be:1f:3c:44:d8:5d:a0:8d:5c:bb:ac:5e:ef:9c:f7:
87:a6:e7:7d:61:47:17:b2:98:9f:86:1b:52:60:66:d3:6e:cf:
08:61:7f:5a:75:49:49:44:61:a8:95:fc:ba:7e:64:b9:c3:2b:
7d:4d:dc:3c:e4:d1:b5:4c:2f:d1:49:e9:2f:fb:76:16:6e:63:
d3:80:2f:82:cd:05:ad:8c:52:d0:b3:28:e1:39:b4:65:06:c8:
8d:ab:42:b2:1f:4c:2e:d1:5a:71:4b:00:a8:6b:c6:70:cc:96:
39:06:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:28:55 2025 by rpki-client