Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: yMUisHQzsK2Wcgi810zA+LGMv0E3KJzvTokVWNM5d3s=
Subject key identifier: DF:7D:67:BD:5C:9D:DB:E8:3E:CE:CC:5D:5B:FB:DC:4F:C0:A2:EA:16
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019896A5D34A42F9F3198389F71C14100E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 01:01:46 +0000
Manifest this update: Mon 11 Aug 2025 01:01:46 +0000
Manifest next update: Tue 12 Aug 2025 01:01:46 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Som49NegMDvY2bZBY2K9ouaS/wt6P2hQpO6CwzA9ES4=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:d3:4a:42:f9:f3:19:83:89:f7:1c:14:10:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Aug 11 01:01:46 2025 GMT
Not After : Aug 12 01:01:46 2025 GMT
Subject: CN=df7d67bd5c9ddbe83ececc5d5bfbdc4fc0a2ea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:3e:43:6a:3e:b0:e8:9b:ab:89:1b:44:ce:
0a:b9:c5:cd:e6:83:65:ef:83:30:29:35:19:f0:54:
fe:8e:2c:40:b5:0c:ac:6e:08:13:8f:19:22:41:4f:
22:8d:3a:0b:a6:fb:36:87:8a:76:bf:65:4d:d1:30:
8e:e2:21:c7:fb:5f:7f:92:6a:6d:48:50:26:41:71:
b5:33:b2:aa:2b:da:ba:7e:25:c8:87:a1:5b:cf:12:
5b:f5:3c:d5:77:e4:23:62:66:ae:dd:4c:fe:58:d9:
ce:42:13:e7:f9:e4:69:c5:40:5a:fd:a3:e6:91:17:
2c:7b:94:91:dd:af:28:f2:83:f4:73:0d:34:6d:db:
c7:f5:5b:8f:d3:19:19:79:1f:46:53:ab:cb:60:ed:
1b:1a:7f:bb:2e:71:00:53:35:d3:4c:5f:0a:b7:43:
59:50:a8:b1:1c:cb:0d:e3:81:48:d0:fc:c9:ea:2c:
ed:79:07:fc:43:1a:74:65:08:a8:37:41:dc:cc:71:
a5:7a:f3:fa:ea:d4:6f:61:53:80:28:83:08:93:97:
22:00:46:38:47:fb:0f:60:19:93:ba:85:bf:eb:1f:
93:7a:76:3c:7a:7f:24:64:21:5e:b9:4c:e6:20:73:
a5:76:1a:8a:75:a2:16:5d:ce:f7:b3:4a:bd:bc:a7:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:67:BD:5C:9D:DB:E8:3E:CE:CC:5D:5B:FB:DC:4F:C0:A2:EA:16
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:90:d0:91:04:90:de:20:af:a9:80:c3:5b:0e:c7:ea:61:
26:d4:ef:e6:83:50:91:3e:f6:02:e1:66:27:fa:ad:88:0b:aa:
44:fd:7c:85:2a:bd:bb:cc:e6:69:eb:21:02:2f:e7:b2:14:6e:
d2:4d:49:33:b0:75:49:4e:2e:56:c1:17:95:ba:f6:0c:54:eb:
78:c1:58:6b:99:00:f7:21:73:a7:46:ed:fb:1f:28:12:d7:0b:
cc:1e:6d:c8:67:81:c8:c5:86:9e:96:6c:c2:dc:25:c8:20:82:
26:5c:45:4b:24:e3:e3:c2:35:62:61:b4:6c:39:62:a7:24:bf:
d2:ef:fc:65:46:7e:f3:15:16:fd:c2:0d:7a:f5:e2:cd:b2:ec:
ef:2a:23:ab:5b:b8:79:3a:dc:33:95:da:27:3c:4c:b7:32:42:
37:60:84:d7:b5:55:1a:33:20:97:5b:83:79:78:65:b8:0b:54:
dd:d1:c4:0d:df:24:03:7c:de:d5:5f:f6:bb:14:f3:31:e7:9d:
73:d0:c9:40:a5:9d:4a:11:08:26:54:30:45:71:ae:51:80:39:
b1:2b:f5:8c:03:6a:c5:90:b8:d0:53:a9:29:13:d1:5d:bf:ba:
bf:b0:00:48:6a:ef:ee:06:aa:05:2e:49:b1:14:86:df:d5:82:
aa:c1:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:06:12 2025 by rpki-client