Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: MJAFCD5MMrezjBqhvAq28jbfDNEF+fV/4jewnwSafuI=
Subject key identifier: 2D:E9:CD:A1:06:CE:7C:80:BC:19:3C:4C:70:5D:7A:D8:F7:1E:87:B8
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 01987298F895B7A230BFADC02F530CD15F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 1224
Signing time: Mon 04 Aug 2025 01:01:24 +0000
Manifest this update: Mon 04 Aug 2025 01:01:24 +0000
Manifest next update: Tue 05 Aug 2025 01:01:24 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: 2C79Wrt0yC/6lULUMwUsbfJ6oFZgHmC4DrIOweaOoOs=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f8:95:b7:a2:30:bf:ad:c0:2f:53:0c:d1:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Aug 4 01:01:24 2025 GMT
Not After : Aug 5 01:01:24 2025 GMT
Subject: CN=2de9cda106ce7c80bc193c4c705d7ad8f71e87b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:ca:70:f8:49:fa:a5:22:c1:ae:41:fa:fe:
1e:5a:36:5a:f3:ab:e8:1a:a4:b5:e2:80:30:7d:5a:
9d:ef:ab:6e:67:bb:7d:ae:7a:66:7c:84:8a:e1:bc:
ec:86:46:0b:41:94:ab:7f:49:b2:ea:13:3b:49:e2:
81:4d:fd:1b:9e:38:97:69:2f:2b:8f:4d:06:da:71:
c7:1c:14:2e:d6:1d:1f:9c:6c:71:31:78:e4:02:c9:
91:79:16:26:24:a4:62:3e:d6:8a:77:c7:4d:3d:83:
3c:2d:e5:8a:81:e7:f6:37:97:54:bc:c4:da:b5:f9:
43:8a:cd:5b:ca:25:71:84:07:c8:fb:8f:8a:6c:fc:
f8:ca:a0:e1:23:bd:d3:2f:fe:67:74:79:89:6d:b2:
f7:22:13:0b:a6:9f:cf:2f:20:0e:d2:e5:ac:b1:0a:
78:be:b2:6a:01:bf:e7:7e:33:13:eb:eb:81:64:d4:
07:8b:ca:71:4e:9b:1c:ed:d9:65:83:67:58:d6:7e:
2e:ac:84:55:32:0c:e2:5e:3f:0f:68:a1:9b:34:cf:
f0:97:79:82:ba:cb:39:ab:3c:ca:7d:0a:b7:e4:61:
b4:2a:c6:0f:8a:c0:b7:28:86:c7:f1:f7:ef:a6:6e:
0e:2d:cf:92:a4:51:96:e4:81:1e:59:a7:98:24:57:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:CD:A1:06:CE:7C:80:BC:19:3C:4C:70:5D:7A:D8:F7:1E:87:B8
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:73:47:1a:d6:52:03:3e:c6:40:dd:7f:cd:2c:90:14:a7:
56:3c:34:cf:11:8d:4e:cd:7b:88:5f:d6:12:80:f4:38:7f:53:
aa:7f:be:d3:35:f7:94:a4:b0:c8:e4:ef:79:85:ee:bd:8f:83:
0d:5c:22:78:77:ab:18:8a:f8:4e:20:40:e1:aa:e3:f7:f4:a6:
17:5a:82:eb:a2:9a:33:ad:35:c1:14:ca:ae:e8:57:0c:80:00:
92:14:65:2d:99:fc:d2:be:92:d9:0e:b5:79:ef:39:22:ef:34:
12:e9:e7:56:db:71:03:24:f3:3c:da:a8:7d:fb:cf:3a:b5:a6:
a1:7f:8d:10:6e:22:94:97:d3:98:0d:13:52:f8:13:eb:82:4d:
83:40:64:f9:c9:98:75:44:d9:53:10:b2:b2:ad:67:9a:39:84:
c8:46:a0:41:45:e6:61:cb:00:d6:b6:d2:1a:8d:b7:7e:d2:17:
8c:4b:a8:da:5f:4f:66:2c:10:1c:75:46:42:7d:d6:f7:9b:78:
21:64:68:38:94:2b:df:89:b1:db:bd:05:3a:3a:4f:bc:31:aa:
02:07:b0:62:39:2f:6f:2e:fb:c2:e5:7b:b0:fb:83:5b:c5:cb:
25:32:a4:8b:81:2f:d8:53:97:73:05:1d:22:01:97:2c:1c:5b:
d4:4d:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:27 2025 by rpki-client