Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: NDRdt75yLxD+k/y64pvYAFByef6IIGzaG4UnXp4QvKI=
Subject key identifier: A5:32:D8:B5:D0:95:0D:FB:2C:F7:07:C3:BA:69:B0:3F:B4:D9:2D:7B
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 0196797B87344E47206F165B3953D3BCFA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0D98
Signing time: Sun 27 Apr 2025 23:01:00 +0000
Manifest this update: Sun 27 Apr 2025 23:01:00 +0000
Manifest next update: Mon 28 Apr 2025 23:01:00 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: BJgidlg8vxB6azx9HKwMZVKI3VK009A0BBYxYFERc58=)
2: LxqOr6kmcQm7vZYRRdP1VkRGlgU.roa (hash: 3mO1xiAyPsi9YB2Utyx+mrmowxSoZyyyseC61QFbUek=)
3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:87:34:4e:47:20:6f:16:5b:39:53:d3:bc:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Apr 27 23:01:00 2025 GMT
Not After : Apr 28 23:01:00 2025 GMT
Subject: CN=a532d8b5d0950dfb2cf707c3ba69b03fb4d92d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:09:39:99:dd:4e:0c:81:be:ee:6a:05:35:
2f:55:f2:49:b7:11:29:bc:6d:a6:9d:08:96:2e:46:
9d:f6:db:78:5a:10:41:a1:df:70:b6:3e:1b:ee:20:
72:76:91:03:ce:2f:d2:58:c8:85:8a:41:77:cf:06:
2c:4f:e5:2c:82:2c:45:13:bf:47:e8:fa:76:10:50:
7b:ff:89:43:7c:50:b0:f4:25:a1:19:ed:80:1a:3a:
bf:28:6c:3c:b1:ae:6a:78:30:60:ab:48:71:6c:ad:
93:5c:a3:d7:21:ab:1e:68:00:e5:8b:cc:23:ba:e1:
50:1b:17:4a:f0:fc:65:e7:92:d0:6a:7a:a3:01:b3:
0e:26:43:5c:c8:6f:d9:55:50:74:a2:a1:17:a6:42:
73:04:5b:1f:76:f9:90:5c:38:d5:e9:46:cd:3b:9e:
fe:dd:c1:99:d8:50:17:33:d3:b8:4d:14:4a:41:2d:
4d:51:1c:e2:04:a6:0d:b0:14:6e:28:ed:41:99:4b:
39:a4:36:ab:97:e4:63:40:e3:07:3d:bb:05:e5:5c:
09:1d:f6:d7:f5:db:23:f9:1d:30:02:8b:d9:94:7a:
d2:05:b1:87:37:56:c3:f4:b6:70:01:a7:b4:d2:e0:
48:90:00:be:d7:be:3e:d5:ea:5e:0e:af:7a:7a:60:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:D8:B5:D0:95:0D:FB:2C:F7:07:C3:BA:69:B0:3F:B4:D9:2D:7B
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:bf:8b:2b:6e:48:58:db:52:ff:bf:b1:bc:62:21:da:cc:
85:53:e0:d4:28:3d:e0:b8:0d:34:39:0b:fc:93:93:29:4a:07:
3a:a6:49:58:d2:1b:0c:dd:d5:92:fa:9f:39:5c:f6:71:8c:48:
f3:1b:00:b6:fa:88:b2:56:df:9c:6f:ab:e1:3c:d6:07:2f:56:
08:a9:a6:9b:76:b5:94:85:9b:86:7d:72:e2:3b:04:a2:04:8c:
f0:36:42:55:82:cb:7b:4a:92:b1:ec:6f:30:7c:ea:a1:5e:56:
0c:c6:70:a2:90:6f:3a:e0:d1:9c:b5:9f:4e:82:fd:d7:fd:e6:
19:b1:00:be:b4:bd:e0:dd:66:9c:db:ad:0f:b5:77:13:5f:77:
b8:07:65:31:98:2e:f5:78:9a:90:d5:b1:ba:c6:d0:49:21:65:
a7:b2:35:c4:f8:3c:a2:9a:96:b7:7c:ae:3c:7e:0d:12:02:f7:
8a:d6:3b:8b:c2:58:ec:f8:be:6c:48:8b:b3:b9:ae:3c:8d:81:
59:2e:a5:bd:0d:83:18:10:e5:65:88:bd:fc:99:5c:00:7c:10:
47:44:82:3a:b2:b9:a6:9c:91:29:8e:b0:42:e0:d7:fc:01:88:
18:b5:03:85:79:bf:71:78:b4:6e:6b:d6:ad:82:5d:5f:18:8b:
8e:e3:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:43:55 2025 by rpki-client