Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: hzq+Wl8eno3uI/Zp6aHfgmpR4W0JVFHmeljElI2N30U=
Subject key identifier: 8C:2A:AB:09:50:43:CE:57:3C:DE:80:66:BD:CB:53:BF:DD:9B:15:9B
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019A4F98E716F072052AFE10FF8903F47E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 131B
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: WAk/TK8XlVLZLwrVLTEUtfTSkB8WZasaqfTimaUGDb8=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e7:16:f0:72:05:2a:fe:10:ff:89:03:f4:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=8c2aab095043ce573cde8066bdcb53bfdd9b159b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:da:8d:2b:cd:d7:2c:96:02:01:fd:1b:e5:
4e:51:69:07:7f:f9:c3:ac:96:f6:6b:88:cb:64:bf:
5a:d6:55:af:f3:0d:3d:72:c1:4d:46:87:ed:fb:07:
84:1d:2a:fb:7f:c5:3f:63:c2:6d:04:39:0f:56:e7:
4e:92:04:ee:05:ae:2a:2c:12:28:72:a8:99:df:5f:
60:6e:0c:5e:1c:8f:8b:5f:f7:a2:4f:ab:c8:5c:b5:
01:83:24:6f:b4:ec:d1:0c:a7:91:6b:50:c8:1d:39:
cc:7a:46:6e:35:8a:db:fa:5f:bb:e3:56:3b:97:a8:
3b:ea:7b:08:b8:27:07:b1:45:2c:a1:e6:c7:2d:90:
1d:32:4d:56:71:05:30:43:f2:0e:80:0e:62:03:fc:
cc:c4:05:24:34:86:ac:c3:0b:4e:16:0e:06:18:30:
ac:49:c8:5f:ee:60:83:62:d5:27:5e:69:04:6c:8e:
59:c7:24:96:5a:51:48:72:d3:a4:21:7f:ae:0b:5d:
43:e1:35:b7:7c:7f:9f:3b:7a:4e:8e:1f:da:91:43:
33:62:7d:e2:41:ae:26:b4:d3:6e:91:fc:83:6b:90:
f6:da:3a:9d:21:5a:aa:79:d3:58:8a:ac:e2:54:bc:
85:03:02:0d:58:70:a1:ab:fc:e6:b6:7d:11:9d:2c:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:AB:09:50:43:CE:57:3C:DE:80:66:BD:CB:53:BF:DD:9B:15:9B
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6e:a5:f5:49:23:59:0f:24:4e:28:40:64:1f:5c:01:77:93:
39:b0:23:98:43:93:38:cb:c1:35:c5:bf:24:ad:9b:f1:c7:1b:
09:c2:5a:fa:56:17:2e:bc:73:c8:0b:bc:12:91:57:39:0a:14:
87:75:19:08:f2:70:6d:db:b3:a8:e1:59:a5:33:dc:03:df:03:
13:61:8b:58:e8:8b:50:99:06:e3:06:ae:a7:b7:38:67:ee:69:
54:a5:2b:01:6d:12:2b:18:54:79:cb:30:11:4d:78:04:6f:bf:
89:c8:8e:20:04:bc:11:8f:4e:44:f9:85:8c:4b:9a:5b:88:34:
38:cd:42:13:29:d2:d0:72:ac:0c:78:74:65:ee:0d:d2:74:58:
c7:b8:1a:00:e2:fc:97:83:27:a9:58:27:f2:2e:c2:7e:01:f4:
2a:5d:33:bd:5e:ce:69:e7:0c:97:5f:49:ae:c0:2d:24:9e:42:
66:ce:b4:79:c1:eb:5e:34:f9:62:42:dc:26:f3:48:42:4b:1e:
67:0d:78:2a:58:92:56:ee:8e:25:57:25:c1:ff:b0:39:b0:05:
bd:1e:c8:4d:01:9e:fb:ef:62:7c:0c:1b:f8:04:7e:da:87:8d:
24:48:27:f4:c5:81:0d:b3:2c:d9:5d:24:d8:44:8c:54:8f:da:
22:ae:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:01 2025 by rpki-client