Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 7Rq5OriZdE7UeUHaKdvonxVsyEHGhV7vbEjqImtCjUs=
Subject key identifier: 47:B9:B3:BF:4C:43:8B:6B:FF:86:3A:E7:47:7E:88:4E:37:E0:96:EF
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019780565577FFEACD7CB6182FC295874E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 00:00:30 +0000
Manifest this update: Wed 18 Jun 2025 00:00:30 +0000
Manifest next update: Thu 19 Jun 2025 00:00:30 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Lk9qGVNsJz3nQixb34DVGXUUxoc2HBzN05/X24R08ow=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:55:77:ff:ea:cd:7c:b6:18:2f:c2:95:87:4e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jun 18 00:00:30 2025 GMT
Not After : Jun 19 00:00:30 2025 GMT
Subject: CN=47b9b3bf4c438b6bff863ae7477e884e37e096ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:ef:8c:12:b7:0e:03:46:85:2f:b8:09:9a:
7c:43:f1:6b:50:bd:7f:78:a9:48:55:e9:86:cc:6c:
7e:cb:13:a7:05:4c:64:7d:18:21:07:fe:d2:b8:7e:
64:f2:1b:85:fc:00:7f:de:3d:2d:89:39:f3:99:06:
2f:ad:f2:20:86:f7:7c:01:8a:d9:e3:da:f4:62:4b:
5e:c9:72:c8:fe:3f:d2:fa:88:86:33:96:2d:63:23:
25:15:fb:1d:98:96:40:5a:54:c6:35:b7:f4:10:bd:
43:6a:b8:f2:cc:56:60:32:6b:a4:7a:b1:26:44:8e:
8d:0d:02:56:18:90:ea:97:99:b1:88:31:dc:d0:92:
58:a2:43:2e:37:4a:e2:2a:1f:77:d2:4b:32:63:24:
21:19:06:d0:71:b9:e2:85:4b:ab:5b:d3:f6:a4:3d:
b7:bd:c3:00:7b:0c:d4:db:78:fb:28:5e:b8:97:65:
7c:3c:5b:de:79:cb:f4:d5:ae:b3:6d:f0:ae:d3:00:
41:ff:b2:a3:a1:49:30:70:ae:ec:ab:fa:c8:74:32:
21:33:fd:04:ac:9a:1c:aa:30:f9:c2:41:f2:36:9b:
96:be:5f:40:7a:b8:8b:c0:60:1e:64:ce:8b:04:8d:
83:b8:83:69:b8:71:15:82:6e:25:33:85:5e:e4:af:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B9:B3:BF:4C:43:8B:6B:FF:86:3A:E7:47:7E:88:4E:37:E0:96:EF
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d4:3f:bc:44:e3:8a:70:97:ae:da:1e:ae:b1:fe:6d:0a:dd:
f2:54:66:8a:8e:be:50:62:e6:aa:eb:82:18:4c:c1:28:ad:78:
13:15:ad:83:7f:e5:9c:c9:a2:78:f5:95:96:6d:87:81:02:f9:
7d:c8:a0:73:f7:c5:ef:da:a8:e9:33:be:a9:c1:6d:6e:1f:2a:
94:b1:b8:e4:f9:39:3d:a1:35:53:e0:3b:76:ec:18:56:69:30:
07:78:72:4d:19:12:9e:12:cc:cb:e5:8a:47:db:56:5f:6c:29:
05:79:e9:c9:72:0c:ff:aa:5e:8f:c8:e4:bd:c4:3f:3e:57:b3:
23:ba:7b:ab:93:d2:43:84:28:5e:21:d1:fd:c9:23:2c:70:19:
30:c4:69:fe:eb:2f:2f:29:c2:f9:50:4b:87:21:2c:db:f2:d5:
29:d1:22:f6:dc:c5:5f:dc:73:58:78:28:f3:7b:6a:cc:91:2e:
6a:d6:e2:e2:13:20:70:f2:65:28:aa:bd:18:56:1d:67:d0:2b:
dd:5b:90:33:44:39:83:03:00:5b:d4:65:b6:97:29:11:f4:2f:
3e:e2:c6:81:c6:e5:e5:bd:e9:54:74:5d:d7:e7:d6:fd:cb:fc:
aa:41:b6:e7:22:81:c2:ea:e1:20:a1:54:bc:a3:97:d0:29:eb:
c8:84:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:57:06 2025 by rpki-client