Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: c2xOWd29tJHndsFIDv+IIky5ma/X8ADrUO5oIiDbL+s=
Subject key identifier: 0F:01:9B:2C:60:81:8E:BC:C5:85:FC:06:6B:67:9E:0F:F0:76:2B:8D
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 01965CBA685805245563DF537C8E1102A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 09:00:42 +0000
Manifest this update: Tue 22 Apr 2025 09:00:42 +0000
Manifest next update: Wed 23 Apr 2025 09:00:42 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: lFwMbojBhYXMSH0PtA9iNs+NLFAY9aukChv5PUCtSOM=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:68:58:05:24:55:63:df:53:7c:8e:11:02:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Apr 22 09:00:42 2025 GMT
Not After : Apr 23 09:00:42 2025 GMT
Subject: CN=0f019b2c60818ebcc585fc066b679e0ff0762b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c6:f5:3a:6f:07:05:f9:62:67:5d:2a:15:a6:
5f:95:f5:60:87:a7:ba:70:bd:be:fc:0d:e5:f2:44:
fc:c2:46:95:c9:d1:c4:05:57:93:56:64:b4:f5:b2:
f3:0f:1d:c3:aa:43:ff:3c:c2:31:67:30:13:68:64:
f1:9c:27:2d:9b:03:36:98:96:9b:4f:4a:f2:4f:ff:
79:00:ee:12:07:0d:06:26:80:6e:07:17:d6:dc:3f:
99:6b:c6:07:11:5f:38:b2:53:3d:64:24:7e:d2:78:
87:be:c6:91:2d:06:1e:20:ff:db:58:45:1f:a9:ae:
50:82:b6:e8:3e:44:9b:44:2b:89:d6:43:01:ce:82:
3f:b5:7c:75:17:e3:f3:6c:50:eb:f3:b1:07:65:8c:
72:26:ef:af:5b:0e:40:b7:2b:46:28:fe:20:fa:9d:
85:35:4b:19:ee:36:cc:c6:45:3c:8e:2e:23:d5:1e:
5e:db:6f:cd:9b:16:0e:75:47:11:fb:36:34:21:c6:
e7:ea:11:e1:e1:1d:83:ae:a2:bb:77:83:25:47:11:
5e:3d:f5:6f:df:93:ab:21:cd:51:b9:36:40:c1:70:
67:87:d0:4c:ef:db:3e:b4:85:d2:6d:a1:f1:2f:1e:
b7:32:4e:76:e8:b2:2e:96:bf:19:87:23:25:2a:54:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:01:9B:2C:60:81:8E:BC:C5:85:FC:06:6B:67:9E:0F:F0:76:2B:8D
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:6d:19:48:8c:01:be:42:7c:2f:72:5e:44:ea:98:98:ba:
35:57:5a:5f:9b:34:a3:b1:33:07:fb:fc:f6:c7:d4:fd:47:d6:
1e:73:3f:3c:83:81:0d:c0:31:dd:c4:f3:f6:b8:58:3f:9c:c8:
04:4b:e3:6b:a5:4b:5c:7f:61:14:3c:24:78:da:03:63:9a:f3:
56:ab:2f:98:1d:0b:54:9e:38:fe:ba:00:cf:b2:e1:5d:d9:8d:
cd:b6:89:89:d4:c4:ad:55:c1:8c:16:6a:b1:60:9a:d7:88:7d:
75:90:e3:43:28:9c:c3:6a:f5:70:2e:df:79:6c:da:3e:1f:aa:
f6:e5:a2:d6:04:24:fa:0d:5d:61:d9:58:2c:8b:9a:d8:2a:16:
14:00:10:0f:1f:58:e2:79:e3:9c:06:f1:33:11:41:10:55:de:
68:ab:1f:79:88:cd:27:37:41:64:df:8f:09:f4:c0:1c:52:b1:
7c:54:68:1b:90:34:7e:41:63:83:11:fb:cd:5f:3f:0d:87:68:
c4:75:80:db:fa:58:cd:5a:6b:52:a4:0f:a1:33:ed:5a:8d:96:
8a:11:94:90:94:0c:1c:e3:95:94:09:71:af:1f:74:f8:6e:eb:
20:a2:18:d4:8c:0a:78:97:8f:36:8e:5e:23:c8:a5:98:f5:6e:
b9:72:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:38 2025 by rpki-client