Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: /fsNaLGxyY4agnp4FmKoY3Ajr6IrfCHaOz1FoKie0Lw=
Subject key identifier: 8E:D5:B3:D3:10:FF:02:16:68:8A:C8:F8:47:72:DC:CE:C1:77:C1:F3
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019A4EF4BA9F70E181D94944FDD58E59A2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: T1yBG/rtCsHoj9e1W1mCY+taVDnZrcHudjzs91vgENc=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ba:9f:70:e1:81:d9:49:44:fd:d5:8e:59:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=8ed5b3d310ff0216688ac8f84772dccec177c1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:8e:92:fd:3e:b2:31:fd:39:15:dc:d2:98:
e0:62:0a:7d:0c:5e:38:a1:bb:da:a3:99:3b:14:0d:
1f:15:f7:9e:d2:26:e8:3c:27:76:e8:82:74:0c:b3:
6c:4b:b1:17:03:76:8b:48:3f:52:1e:1c:b3:f2:df:
ec:79:22:47:01:95:21:98:cb:d1:08:35:55:13:53:
7e:9f:9c:93:2c:51:89:e8:00:fd:8d:a2:cc:ff:6c:
a9:0c:a9:3a:13:6d:af:37:32:25:64:1c:cf:77:ca:
22:e3:a3:e4:be:27:56:61:59:3d:3b:44:7e:9f:d0:
41:d3:15:e3:17:13:57:58:38:4e:7d:d8:7a:8c:ad:
45:e4:f2:a1:9f:4a:7e:7b:a0:9a:1e:ca:38:38:f0:
c0:cd:9e:df:5d:6a:c7:64:3c:32:91:fb:c3:6e:26:
3d:36:8b:6c:9d:8c:88:ca:dc:c2:cd:7a:79:bb:46:
f4:19:32:c8:77:fd:8b:f9:d7:65:a9:09:2a:db:c0:
7b:39:19:28:6a:42:b2:a9:86:de:94:12:a3:a5:0c:
9a:f2:ba:21:17:f5:51:9f:ef:d7:29:ea:1c:fb:62:
19:3d:f7:11:3f:a9:d2:d8:50:4f:4c:a2:45:60:c6:
80:d1:ff:6c:99:42:86:3e:0e:e1:28:96:fa:a6:fa:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:B3:D3:10:FF:02:16:68:8A:C8:F8:47:72:DC:CE:C1:77:C1:F3
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a1:0b:a6:e5:46:eb:c5:23:42:19:3c:5f:29:1f:df:d3:d7:
b6:d9:01:31:d6:23:89:1e:37:ae:04:25:fc:2e:68:d8:3d:24:
46:01:b7:b1:6e:d6:c0:4d:a3:c6:fa:b2:ea:d6:10:9a:ad:66:
d6:a3:4c:cb:d7:0f:34:ae:dc:bf:66:b1:95:59:9b:fe:4f:54:
b2:cf:66:75:9d:42:e6:7b:18:e5:99:da:66:ad:bc:07:6e:31:
30:59:05:9f:73:ee:7e:a5:24:d2:ca:89:e3:bf:d3:0c:0a:a4:
39:0f:dd:e1:4c:a1:4c:aa:98:b6:ca:e1:3e:be:1e:0d:0f:2a:
b2:ad:22:74:db:8f:e2:5b:58:d4:e4:34:c4:94:86:6a:1f:d7:
c5:da:39:12:54:15:38:a5:88:f7:61:4b:c5:79:75:a3:6d:37:
33:90:d0:b2:93:37:2c:b4:ed:78:0e:8a:84:c4:b8:16:91:08:
7a:37:8c:22:b6:28:fa:46:21:59:f2:cc:03:7e:3c:71:cf:b7:
c9:c5:ec:c3:29:18:83:cc:ce:67:e4:26:10:e7:49:71:a2:50:
e2:2c:06:f9:9c:e8:4a:52:bc:91:5b:51:50:42:95:0f:4b:f9:
51:c3:9e:39:e3:11:e1:bb:af:3d:d5:62:4a:4f:10:7e:d8:29:
4d:9e:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:21 2025 by rpki-client