Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: So7tXxI4lUS0l4ZxRrA+rgQ00rBmJPHHXVNUuzOdnP8=
Subject key identifier: C4:C3:8E:DB:5F:F3:2C:F2:A4:11:CB:E6:87:2D:45:4A:BC:51:45:EE
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 0199FC8F5C3998221C8DC68225B0F9C184D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 12F0
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: ZYJwCRrA5mi+yrZVehMc5lSAq71o3ae0yA8XP/vPGwg=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5c:39:98:22:1c:8d:c6:82:25:b0:f9:c1:84:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=c4c38edb5ff32cf2a411cbe6872d454abc5145ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:17:b4:73:49:35:f4:81:6d:50:18:4d:03:
2e:f4:83:87:3d:70:2b:5a:55:ed:1b:51:55:33:31:
6d:2d:fd:1f:18:e0:7a:ab:98:88:e3:8c:9b:7d:74:
13:47:12:01:9a:0a:04:39:65:eb:dd:17:2a:97:24:
30:e1:97:19:03:b5:37:43:54:cf:b4:e4:c8:ef:3a:
99:23:8d:89:f2:af:30:6d:a9:e1:52:ec:29:da:f7:
c2:ac:6a:c2:9c:85:4b:85:75:e4:a2:a5:42:2e:34:
12:52:b6:c6:6d:e3:46:40:ac:ae:83:f6:51:36:2b:
37:eb:fd:a9:34:33:32:b7:80:8e:b2:f0:08:67:f4:
7b:aa:1a:c2:c7:f2:1b:c9:80:d8:b9:0d:05:ff:e7:
d5:9a:a0:f1:22:e6:2f:9e:a1:fa:09:f0:0f:6d:a2:
52:15:23:2e:7b:69:2e:9e:dc:f0:7c:5f:56:fc:b1:
79:ae:e2:05:f8:0d:79:b6:a7:71:3d:0d:28:eb:6f:
0d:01:e9:21:ea:f7:23:a8:f8:f9:65:0b:e2:dd:47:
ac:b8:5d:ed:9f:a1:9a:ab:23:bc:23:fe:ac:ee:d4:
13:ac:70:34:45:2d:b6:f7:1d:80:89:71:8f:04:73:
4d:37:44:ad:d9:5d:32:7f:84:06:62:d1:f3:8c:05:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:8E:DB:5F:F3:2C:F2:A4:11:CB:E6:87:2D:45:4A:BC:51:45:EE
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:fa:07:b8:8f:39:74:ca:f0:f6:88:94:52:1a:09:34:a1:
8c:4b:14:73:90:cd:00:d7:6f:77:8d:93:bc:9f:3e:55:28:e1:
12:71:f4:34:02:6f:be:62:2a:31:1a:8e:6f:6b:d2:63:94:00:
b8:69:4b:ed:27:78:ae:e6:c9:b2:bd:45:b8:c4:57:9e:dc:16:
52:26:c9:bb:14:b7:ed:3b:33:b5:be:2a:7a:89:e1:2d:c5:20:
4d:6f:f2:6a:0a:08:ed:a8:89:83:98:3f:07:49:ef:6f:db:9e:
fd:29:20:3f:9a:e0:21:e5:cd:6b:a4:62:10:0d:77:bb:55:9d:
fb:b2:28:6e:94:9e:25:46:50:92:2f:37:10:09:ec:01:b4:ac:
eb:1b:c6:ad:c9:05:1c:04:f6:cc:06:17:62:01:6d:12:d5:7c:
93:b9:8f:35:99:c2:c6:3c:8d:18:7e:b1:49:29:c3:01:89:e9:
84:a5:8b:49:15:8c:83:f2:a5:42:85:7d:02:44:89:f4:50:f3:
86:ab:00:b5:09:8d:c3:c6:ad:08:15:24:c4:56:99:eb:49:9b:
10:dc:e1:c3:40:f2:03:2c:89:06:5c:08:66:1a:89:2c:28:f0:
ed:fb:4b:79:d7:44:df:07:10:23:bb:44:c2:6f:20:0d:cf:ff:
76:92:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:01 2025 by rpki-client