Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: GANfZIifz0IY/DWgw/DFSKsJ77j+S/6VHH1y8e7pp6s=
Subject key identifier: DF:FC:96:57:B6:19:3C:40:F4:94:D4:84:8C:AF:70:B9:28:39:C5:17
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019676B15C157D9E594EAFEC1A12B8CABA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 111D
Signing time: Sun 27 Apr 2025 10:00:57 +0000
Manifest this update: Sun 27 Apr 2025 10:00:57 +0000
Manifest next update: Mon 28 Apr 2025 10:00:57 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: I6VNaHphNm65xdFDuhGR0XuvqQtQ/mMcXzbwjG64EU4=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:5c:15:7d:9e:59:4e:af:ec:1a:12:b8:ca:ba:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Apr 27 10:00:57 2025 GMT
Not After : Apr 28 10:00:57 2025 GMT
Subject: CN=dffc9657b6193c40f494d4848caf70b92839c517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:8d:2b:34:2e:a0:56:15:45:aa:1d:7e:a9:
52:37:11:c5:b8:e4:ff:60:b4:ae:89:c0:06:c7:92:
8d:ef:90:05:98:e1:a8:cf:97:9c:f3:0f:60:76:5a:
82:1b:8c:d1:b3:31:c9:94:06:a3:7c:35:38:28:7a:
bf:a9:92:eb:2d:3d:35:06:79:f3:e7:9f:ad:12:8b:
4b:4d:c6:80:9e:1a:c8:f1:ee:2d:fa:ce:7c:9e:7a:
4c:d1:d0:45:77:87:eb:b1:d1:ce:73:55:98:e1:09:
30:60:cf:0e:f9:9f:da:2f:38:5b:a1:09:93:cd:0e:
94:d0:49:c7:cb:19:4b:f3:5e:1c:24:10:53:a1:c6:
bc:56:e2:f8:77:09:10:2d:f7:87:09:13:72:a7:8f:
72:4a:6c:8d:c2:d8:8d:e0:cd:42:af:b2:48:54:b6:
30:2b:83:99:aa:ba:2e:99:f0:3f:ec:34:09:e6:71:
ca:d4:cc:a5:90:c5:45:51:3b:77:3c:36:8e:70:0f:
1c:be:e3:b8:45:32:18:22:26:10:e5:7d:bc:1b:44:
ec:21:88:0f:ed:8c:96:ec:a6:1e:c3:19:c5:c5:13:
26:e3:01:46:50:37:7c:91:91:bc:8f:e1:8d:30:4d:
48:d1:ae:1a:59:a3:fb:1b:ff:f7:b3:f3:46:de:7c:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:96:57:B6:19:3C:40:F4:94:D4:84:8C:AF:70:B9:28:39:C5:17
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c1:50:36:3b:8a:f4:65:bc:a9:02:db:03:ae:2b:6a:41:43:
27:d5:5b:3a:d5:b7:27:36:8a:2a:66:57:b2:8d:ed:54:0d:b2:
2f:77:26:14:6c:7a:44:b3:5a:37:45:84:1a:d9:ff:84:3a:ae:
5e:41:6a:2a:45:ac:4b:62:9f:8b:a5:ff:02:2c:81:c1:ca:76:
c7:78:e2:01:81:27:e8:07:fc:6f:9f:f7:38:b8:ca:21:65:df:
41:e6:aa:ef:c7:d6:93:98:5b:12:68:9c:9d:29:7e:b8:1a:b3:
3e:0d:4f:8a:2b:17:d4:78:1e:4e:f3:86:37:cb:46:04:c7:a2:
58:32:6a:dc:54:19:67:47:3d:c6:6f:5f:7c:b5:60:62:b3:34:
c1:60:49:f1:25:a8:a8:78:67:84:72:b2:10:ac:42:85:d2:2a:
3e:ec:7d:e2:8d:bc:c2:85:c1:c2:a0:e1:1e:c6:0e:4e:5b:83:
64:e0:58:51:12:8b:8a:06:e3:83:9c:c4:66:0d:15:d2:5d:de:
ed:d8:5d:3d:14:9c:d4:1f:da:af:d5:0a:ef:c1:77:81:fd:db:
73:85:5d:e6:06:5d:73:d9:c4:55:4d:3c:f6:84:ec:8c:a6:7f:
a1:89:b9:79:d6:ec:6a:c5:a1:83:2c:8f:90:20:e8:42:59:df:
74:cc:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:37:30 2025 by rpki-client