Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: 3iSrLT8Ov4uAT+eV5/z2pRQA0lG+ns8sF3GNejJYXC0=
Subject key identifier: BD:41:A9:16:74:1B:60:E8:F4:73:C7:C7:29:46:DD:AD:99:1A:FB:4F
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01984399E4D740502217F332C60B8572D7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 22:00:15 +0000
Manifest this update: Fri 25 Jul 2025 22:00:15 +0000
Manifest next update: Sat 26 Jul 2025 22:00:15 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: XMBnXExZZtMPdghZ6mmUyKt4Y6iRZghLTHfL35Y75RE=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:e4:d7:40:50:22:17:f3:32:c6:0b:85:72:d7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jul 25 22:00:15 2025 GMT
Not After : Jul 26 22:00:15 2025 GMT
Subject: CN=bd41a916741b60e8f473c7c72946ddad991afb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:d1:7e:fd:7a:e9:51:ea:e4:06:10:36:14:
60:63:4b:b8:d1:86:6a:ba:24:67:f8:85:68:70:53:
07:bc:53:63:0d:bc:ae:c1:b8:95:78:f0:b5:aa:30:
97:31:04:fc:cb:de:f9:f0:5b:11:cb:54:de:ec:31:
bf:8f:19:5f:df:10:98:64:30:c7:7b:bc:f9:f3:d9:
69:0e:1d:33:f6:f7:ae:f7:ca:ad:da:1f:1f:bb:cb:
b9:61:e1:e1:27:18:3f:a7:48:12:85:26:14:69:5a:
4d:61:12:31:30:e3:b3:0b:34:76:e9:69:a7:31:c2:
14:f3:87:9a:32:91:cf:b2:6d:c3:7f:f8:6d:09:a3:
ae:6d:84:68:7e:3f:e1:3d:b1:f3:1f:58:f3:31:5e:
72:06:28:e1:e6:59:99:7b:d8:2c:29:fb:f9:60:17:
61:df:16:2d:83:04:17:92:f9:51:72:d4:3f:b4:9a:
4d:cd:7a:d9:79:ba:1d:5e:06:82:10:58:63:43:d4:
11:91:60:05:22:fd:b4:df:03:69:e4:a6:64:cd:d1:
25:5a:ee:6f:d1:86:c8:90:32:7b:35:94:87:cd:96:
5d:0b:b1:66:a0:99:bb:f2:d6:2b:ac:fb:15:ab:5b:
08:75:6b:62:5a:26:fa:77:60:12:5e:ce:52:a7:ac:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:41:A9:16:74:1B:60:E8:F4:73:C7:C7:29:46:DD:AD:99:1A:FB:4F
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:63:a4:38:41:af:7c:62:42:79:0f:0a:86:f9:30:aa:9f:
3c:7c:dc:30:2a:75:e9:bb:3f:48:01:be:dc:48:77:c5:99:1c:
a2:8c:45:af:d3:a4:ae:e0:71:0a:bf:d4:c3:37:0c:5c:6d:ff:
bd:41:fc:fb:cb:bc:d3:f6:21:09:9a:57:b1:f5:76:de:e4:ad:
0b:94:bb:06:83:15:3a:0e:c3:41:5c:ed:c9:68:df:7c:f8:8d:
8e:1c:b1:90:67:93:34:36:41:ec:3c:f1:c6:c4:19:98:9e:56:
c5:1d:bb:8e:36:f2:64:bc:82:eb:b5:44:fe:99:cf:c5:9b:52:
fc:b3:b6:62:6d:55:9e:c1:b5:a2:98:ef:48:1f:88:4e:6a:0a:
92:72:1c:c3:0d:99:5b:34:e1:7a:fe:ec:97:be:3d:45:19:d4:
e0:5e:97:df:df:34:1a:4e:8e:c0:a5:9e:94:4a:8b:7b:5a:86:
46:07:10:e0:89:d1:d6:42:69:df:ed:9a:3e:43:4d:71:19:b5:
c2:4c:8b:8d:b8:c8:26:b9:3f:c0:4c:19:96:b6:9f:a0:ea:b6:
1e:9e:ba:96:92:40:c4:ff:c2:7b:91:5f:77:c5:ca:bd:f1:8d:
11:39:00:ff:6e:5e:a3:6e:a6:38:89:bf:ff:66:80:09:5a:8a:
22:e4:1e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmeTXQFAiF/MyxguFcteqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx
Zjg0OTMwHhcNMjUwNzI1MjIwMDE1WhcNMjUwNzI2MjIwMDE1WjAzMTEwLwYDVQQD
EyhiZDQxYTkxNjc0MWI2MGU4ZjQ3M2M3YzcyOTQ2ZGRhZDk5MWFmYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmjRfv166VHq5AYQNhRgY0u40YZq
uiRn+IVocFMHvFNjDbyuwbiVePC1qjCXMQT8y9758FsRy1Te7DG/jxlf3xCYZDDH
e7z589lpDh0z9veu98qt2h8fu8u5YeHhJxg/p0gShSYUaVpNYRIxMOOzCzR26Wmn
McIU84eaMpHPsm3Df/htCaOubYRofj/hPbHzH1jzMV5yBijh5lmZe9gsKfv5YBdh
3xYtgwQXkvlRctQ/tJpNzXrZebodXgaCEFhjQ9QRkWAFIv203wNp5KZkzdElWu5v
0YbIkDJ7NZSHzZZdC7FmoJm78tYrrPsVq1sIdWtiWib6d2ASXs5Sp6xbdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1BqRZ0G2Do9HPHxylG3a2ZGvtPMB8GA1UdIwQY
MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt
ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz
LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImZjpDhB
r3xiQnkPCob5MKqfPHzcMCp16bs/SAG+3Eh3xZkcooxFr9OkruBxCr/UwzcMXG3/
vUH8+8u80/YhCZpXsfV23uStC5S7BoMVOg7DQVztyWjffPiNjhyxkGeTNDZB7Dzx
xsQZmJ5WxR27jjbyZLyC67VE/pnPxZtS/LO2Ym1VnsG1opjvSB+ITmoKknIcww2Z
WzThev7sl749RRnU4F6X3980Gk6OwKWelEqLe1qGRgcQ4InR1kJp3+2aPkNNcRm1
wkyLjbjIJrk/wEwZlrafoOq2Hp66lpJAxP/Ce5Ffd8XKvfGNETkA/25eo26mOIm/
/2aACVqKIuQeVg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:18:10 2025 by rpki-client