Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: EnhQZ5tqOj8LbHdN8Shyg46bYsxOSSKXUfXl6gi4W0s=
Subject key identifier: A8:A1:5B:60:A5:C7:5F:D0:F1:1E:57:A9:F2:07:96:37:85:43:F3:48
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01968925348A0B344C476E743849697824ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 00:00:38 +0000
Manifest this update: Thu 01 May 2025 00:00:38 +0000
Manifest next update: Fri 02 May 2025 00:00:38 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Ttzzxd2RpOot+eKWHC7+QpnsYxa6V0kIjH4RDrTEDNM=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:34:8a:0b:34:4c:47:6e:74:38:49:69:78:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: May 1 00:00:38 2025 GMT
Not After : May 2 00:00:38 2025 GMT
Subject: CN=a8a15b60a5c75fd0f11e57a9f20796378543f348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:fe:13:3c:14:6d:c6:5b:b8:ed:c5:66:e2:
3a:c6:15:77:7b:40:ba:de:81:0d:2e:08:15:08:3a:
76:02:96:29:6e:be:99:9a:ce:1e:57:17:3e:90:aa:
9a:25:00:76:0a:2b:fe:d9:bb:03:16:87:70:b8:1d:
0e:70:69:ef:9e:8d:20:b4:6d:f5:4e:71:36:17:85:
ff:dd:a7:5b:48:50:84:23:43:26:4b:83:f4:88:87:
99:8b:2a:c6:67:23:66:c9:32:d7:a3:ed:90:de:56:
b9:02:43:b5:4c:cf:57:03:29:d0:35:97:23:56:9a:
20:a2:99:fe:5c:a6:1d:f8:be:d1:d6:b4:e0:4c:c4:
bb:65:ce:63:95:90:f5:f2:74:ee:e1:7d:b6:51:7c:
7e:c4:2d:e9:ac:2c:09:7e:88:11:26:b4:56:23:0c:
71:ab:91:89:3e:17:46:13:c3:d9:dc:f5:1b:10:4e:
4e:ac:d3:cf:6e:8e:97:90:4a:5d:91:f4:50:ed:60:
da:7c:2b:3e:28:a3:3e:3e:3e:9b:07:a9:6f:46:d2:
59:c2:bd:fc:4a:f2:6f:a9:04:4b:ee:d3:cf:5a:8b:
6b:72:b1:35:ec:31:52:71:57:83:1d:0b:bc:07:ec:
08:52:2d:b7:3c:d8:ca:2d:0b:88:30:ca:0a:c4:53:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:5B:60:A5:C7:5F:D0:F1:1E:57:A9:F2:07:96:37:85:43:F3:48
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:25:1d:a1:5a:10:83:5d:c3:a0:ef:dd:dc:6b:e7:5b:d4:91:
9b:56:f2:c7:71:fd:c2:21:81:07:68:4d:4e:90:0a:d1:62:4d:
e1:2a:0a:b6:6b:d5:1c:52:29:5b:c7:c1:1c:44:08:44:98:17:
59:1c:6d:4d:f7:68:20:4b:95:e0:63:26:14:2d:db:76:1f:8a:
82:48:12:71:ac:48:7e:1c:5a:90:a7:13:f1:11:6f:de:28:2c:
ec:a3:66:e9:fd:10:40:1a:06:67:92:3b:90:e3:e1:57:1d:c5:
1d:e6:4c:c2:fc:22:a8:dd:32:bf:38:ee:ee:ad:ef:9f:1d:81:
63:d1:b7:88:f4:f5:f7:56:6e:cf:da:24:ec:42:fd:76:69:1a:
91:18:8b:0b:35:f8:85:00:63:6d:92:b6:1f:db:fd:35:66:3c:
6d:c8:39:55:92:c9:e0:11:06:f2:e2:0a:4f:45:1d:cf:82:14:
0a:0c:87:ff:30:67:f2:18:a8:5b:27:0f:e4:98:6f:f0:83:e0:
21:f7:55:d7:e1:ab:c0:47:6d:3e:e9:e7:e8:7c:e2:1a:cb:fa:
9a:ed:68:95:ca:73:54:75:a4:92:41:c1:7b:c6:7b:c3:23:16:
b8:09:10:75:24:4c:cd:35:86:6c:bf:59:c8:fc:8e:a2:9e:97:
e3:1a:22:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJJTSKCzRMR250OElpeCTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx
Zjg0OTMwHhcNMjUwNTAxMDAwMDM4WhcNMjUwNTAyMDAwMDM4WjAzMTEwLwYDVQQD
EyhhOGExNWI2MGE1Yzc1ZmQwZjExZTU3YTlmMjA3OTYzNzg1NDNmMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jX+EzwUbcZbuO3FZuI6xhV3e0C6
3oENLggVCDp2ApYpbr6Zms4eVxc+kKqaJQB2Civ+2bsDFodwuB0OcGnvno0gtG31
TnE2F4X/3adbSFCEI0MmS4P0iIeZiyrGZyNmyTLXo+2Q3la5AkO1TM9XAynQNZcj
Vpogopn+XKYd+L7R1rTgTMS7Zc5jlZD18nTu4X22UXx+xC3prCwJfogRJrRWIwxx
q5GJPhdGE8PZ3PUbEE5OrNPPbo6XkEpdkfRQ7WDafCs+KKM+Pj6bB6lvRtJZwr38
SvJvqQRL7tPPWotrcrE17DFScVeDHQu8B+wIUi23PNjKLQuIMMoKxFP4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKihW2Clx1/Q8R5XqfIHljeFQ/NIMB8GA1UdIwQY
MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt
ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz
LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCUdoVoQ
g13DoO/d3GvnW9SRm1byx3H9wiGBB2hNTpAK0WJN4SoKtmvVHFIpW8fBHEQIRJgX
WRxtTfdoIEuV4GMmFC3bdh+KgkgScaxIfhxakKcT8RFv3igs7KNm6f0QQBoGZ5I7
kOPhVx3FHeZMwvwiqN0yvzju7q3vnx2BY9G3iPT191Zuz9ok7EL9dmkakRiLCzX4
hQBjbZK2H9v9NWY8bcg5VZLJ4BEG8uIKT0Udz4IUCgyH/zBn8hioWycP5Jhv8IPg
IfdV1+GrwEdtPunn6HziGsv6mu1olcpzVHWkkkHBe8Z7wyMWuAkQdSRMzTWGbL9Z
yPyOop6X4xoiTQ==
-----END CERTIFICATE-----
Generated at Thu May 1 09:49:47 2025 by rpki-client