Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: xIeE63fdvl6MK0Rmqfa6YFn5iEkhcwgPTwGOP91b3JQ=
Subject key identifier: B4:1A:D9:D3:EA:12:50:4B:76:67:6E:3E:CA:6E:2A:04:7D:4E:4A:BC
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019A01B5B6468865E2286B0ADF0CDCBD0AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:01:17 +0000
Manifest this update: Mon 20 Oct 2025 13:01:17 +0000
Manifest next update: Tue 21 Oct 2025 13:01:17 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Gr54I7B46epPJI6oNF1KSvUvfPapdRW3VAfIone0Wjc=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:b6:46:88:65:e2:28:6b:0a:df:0c:dc:bd:0a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Oct 20 13:01:17 2025 GMT
Not After : Oct 21 13:01:17 2025 GMT
Subject: CN=b41ad9d3ea12504b76676e3eca6e2a047d4e4abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:db:76:c1:64:ff:b3:99:c0:10:45:1a:ad:
9a:74:ba:e4:7b:56:8d:83:c4:ef:d4:23:60:8b:0e:
cd:e6:ca:91:51:ce:d2:75:bc:4e:78:18:e9:a6:54:
a3:a7:b4:5d:db:9c:f1:ad:92:13:28:d5:f2:8f:db:
1f:63:31:50:43:0d:7f:9a:8f:1e:98:68:db:69:1b:
d3:4e:35:44:31:f8:3c:e9:44:e3:eb:68:a1:16:a1:
94:2d:90:ad:55:0c:94:c4:ed:50:6e:25:3e:78:e8:
07:50:fd:19:83:07:4f:0e:be:c1:f5:83:26:bd:ad:
c4:1c:0f:41:8b:32:1d:51:8e:ed:c2:af:58:6b:49:
44:00:9c:06:8f:a5:f8:c1:50:42:ca:97:2c:1a:56:
17:1d:3a:45:d0:5e:b2:35:40:be:30:6b:2a:0e:f4:
7c:7a:26:a5:ff:3c:b2:71:2f:89:00:13:60:7e:42:
2a:05:ea:ae:6b:5f:28:2c:48:97:7c:7f:1d:8e:df:
1f:30:d4:18:8a:ff:c4:ea:ac:d0:db:a7:e8:2c:00:
a7:13:7a:a5:fe:5d:1a:ae:1e:65:8b:c1:90:2f:5b:
18:1a:3f:9e:d0:1b:64:59:67:40:aa:2e:33:ad:28:
55:50:ac:fe:87:b9:c0:27:d5:a4:de:cc:6c:b8:17:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:D9:D3:EA:12:50:4B:76:67:6E:3E:CA:6E:2A:04:7D:4E:4A:BC
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:03:f5:df:f8:93:bf:d6:44:40:c1:7e:49:cf:71:d2:ea:
53:8f:2d:e7:f5:b5:6b:08:a8:f0:e5:30:9f:ec:e8:c3:07:91:
fd:09:fb:85:51:4c:90:ff:ae:c8:27:1b:80:ec:bb:d0:5b:88:
9f:15:d9:01:ca:7b:c6:af:9d:02:f5:3e:4a:26:fc:b5:5b:67:
5e:e8:89:b2:54:c3:61:18:3e:7b:3f:71:f9:e6:86:f5:bb:37:
11:32:ba:03:b8:d4:bd:aa:a5:11:7f:bc:a1:9e:cf:75:81:ed:
2c:e6:9c:1e:75:02:27:1a:b0:a1:7e:65:e0:db:58:af:68:df:
04:f7:9b:02:12:ee:2d:1d:ad:ab:8c:76:8c:d4:91:3b:85:49:
70:e4:f4:23:76:31:0f:5e:3b:48:cb:f0:fc:07:2e:a6:45:3c:
0e:d5:dc:71:1e:37:00:0d:cd:b9:2d:84:bd:62:4a:94:2e:08:
5c:14:32:60:7e:fd:3c:1d:34:1b:9f:ef:72:87:9d:11:6c:b1:
ba:b5:80:ce:7c:61:ad:e3:68:62:d7:c8:82:44:7b:ed:df:ab:
94:7f:2a:31:b7:a4:6d:7b:5b:99:91:06:ff:c9:d8:7c:37:a1:
a8:f9:bf:48:c5:45:04:46:c4:97:ab:a5:9e:20:01:d2:7b:dc:
a3:83:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:58 2025 by rpki-client