Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File: 1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier: kJ7a/hnCsKLnFoDdI+aFMEWYqIN2Naj0ZPaMmtWXQc0=
Subject key identifier: 44:8D:8D:88:FE:FD:BE:5F:C1:5C:6C:C3:8F:D6:BF:02:61:70:70:E4
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01974A0D05B5A4021F585009DA3551F3BB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number: 0E04
Signing time: Sat 07 Jun 2025 11:00:56 +0000
Manifest this update: Sat 07 Jun 2025 11:00:56 +0000
Manifest next update: Sun 08 Jun 2025 11:00:56 +0000
Files and hashes: 1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: YdJ83VUMi3SrVeXx5ap+gdbUaxQvGrZdtVj9uLbfFzs=)
2: LxqOr6kmcQm7vZYRRdP1VkRGlgU.roa (hash: 3mO1xiAyPsi9YB2Utyx+mrmowxSoZyyyseC61QFbUek=)
3: VVay02te4c4nzoKHz-xrN3foME4.roa (hash: +3WozqxDoZtdWYZgwzpI8n1yZj2XdHsIhAjwmttwDmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:05:b5:a4:02:1f:58:50:09:da:35:51:f3:bb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jun 7 11:00:56 2025 GMT
Not After : Jun 8 11:00:56 2025 GMT
Subject: CN=448d8d88fefdbe5fc15c6cc38fd6bf02617070e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:64:0a:c0:52:d1:67:77:61:3e:ea:0b:c6:
10:08:b3:e4:da:eb:b6:71:ce:44:c1:b5:1f:55:1a:
86:86:c5:76:2c:89:55:0f:0d:19:ea:97:aa:e3:f5:
ae:c2:73:75:f1:bd:df:b3:51:d7:71:cc:1e:28:c5:
b1:f0:0f:a5:1a:c7:9e:0a:cb:ab:e4:43:00:0b:42:
da:72:ba:69:94:e3:bd:3f:2d:28:e7:35:8a:00:02:
65:fe:b2:fc:71:1b:58:d5:5d:93:24:87:32:de:84:
f1:5f:8f:95:0e:d9:a9:e2:e4:13:21:86:0d:bb:a0:
71:6a:1e:03:7e:d1:80:e9:0b:08:25:e7:ad:a3:63:
f2:7c:4f:2b:d6:43:aa:18:f9:80:0a:fb:34:75:0b:
e9:9d:43:57:2d:ae:84:58:26:8d:eb:7e:4c:aa:2f:
7d:98:5b:e1:cb:6b:7f:98:75:56:de:d1:f0:1d:8d:
b4:35:65:39:81:9e:f8:d2:96:37:94:ba:65:5c:ae:
eb:e9:0e:fb:dd:e4:f2:37:59:bb:4a:a1:f0:83:29:
e8:1d:53:0f:53:11:87:0e:1f:6e:54:3a:09:8c:ba:
df:d8:28:b4:a9:cc:45:3c:48:71:28:c8:26:bc:7f:
d3:cb:2f:ed:00:3f:7c:17:9f:cd:62:e3:39:ca:d7:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:8D:88:FE:FD:BE:5F:C1:5C:6C:C3:8F:D6:BF:02:61:70:70:E4
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9b:4d:83:59:d0:32:83:f5:ef:a4:6e:40:30:fb:96:44:e1:
55:2b:ef:44:b5:a1:22:40:2b:13:c1:a1:d0:ed:0c:95:8e:5b:
58:a7:e5:06:24:5b:69:b8:1f:30:a3:22:d8:c4:76:8b:ba:30:
08:bb:63:96:f8:b1:08:32:b8:87:ff:86:8a:fc:c5:db:e8:02:
28:da:ba:9b:c4:65:fc:93:87:1b:52:01:c1:35:81:fe:84:15:
b7:1f:93:9e:d7:85:ee:ed:15:63:0e:b7:fc:9e:51:01:81:2d:
75:02:6f:8f:3b:e6:f5:f8:1e:f0:e4:25:77:82:c9:ed:4d:08:
0b:df:31:fd:9b:b0:e3:21:ff:12:2a:62:f8:b1:95:2d:3e:8a:
c2:d4:d1:63:20:f0:62:05:9e:5a:1e:d4:bb:2b:fa:6b:b8:e4:
fe:ea:66:cf:d7:4e:cf:43:a0:1b:3a:90:6b:99:c4:79:39:e6:
93:72:c4:7f:42:89:8c:2a:91:29:ae:b4:72:1c:58:14:b3:6c:
3b:fe:38:36:21:43:f1:4f:80:b3:30:d8:df:46:a7:fc:0a:35:
b3:fd:72:03:73:cb:1b:86:55:b4:6f:c6:23:e9:72:9b:0d:c9:
b0:4c:c4:c8:ca:a7:c9:68:04:aa:26:63:74:9b:bd:85:f5:fe:
40:78:a1:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDQW1pAIfWFAJ2jVR87t8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz
MjA5MjgwHhcNMjUwNjA3MTEwMDU2WhcNMjUwNjA4MTEwMDU2WjAzMTEwLwYDVQQD
Eyg0NDhkOGQ4OGZlZmRiZTVmYzE1YzZjYzM4ZmQ2YmYwMjYxNzA3MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3E9kCsBS0Wd3YT7qC8YQCLPk2uu2
cc5EwbUfVRqGhsV2LIlVDw0Z6peq4/WuwnN18b3fs1HXccweKMWx8A+lGseeCsur
5EMAC0LacrpplOO9Py0o5zWKAAJl/rL8cRtY1V2TJIcy3oTxX4+VDtmp4uQTIYYN
u6Bxah4DftGA6QsIJeeto2PyfE8r1kOqGPmACvs0dQvpnUNXLa6EWCaN635Mqi99
mFvhy2t/mHVW3tHwHY20NWU5gZ740pY3lLplXK7r6Q773eTyN1m7SqHwgynoHVMP
UxGHDh9uVDoJjLrf2Ci0qcxFPEhxKMgmvH/Tyy/tAD98F5/NYuM5ytdACwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESNjYj+/b5fwVxsw4/WvwJhcHDkMB8GA1UdIwQY
MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt
ZDRlODgyMDgzZTRmLzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm
LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuptNg1nQ
MoP176RuQDD7lkThVSvvRLWhIkArE8Gh0O0MlY5bWKflBiRbabgfMKMi2MR2i7ow
CLtjlvixCDK4h/+GivzF2+gCKNq6m8Rl/JOHG1IBwTWB/oQVtx+TnteF7u0VYw63
/J5RAYEtdQJvjzvm9fge8OQld4LJ7U0IC98x/Zuw4yH/Eipi+LGVLT6KwtTRYyDw
YgWeWh7Uuyv6a7jk/upmz9dOz0OgGzqQa5nEeTnmk3LEf0KJjCqRKa60chxYFLNs
O/44NiFD8U+AszDY30an/Ao1s/1yA3PLG4ZVtG/GI+lymw3JsEzEyMqnyWgEqiZj
dJu9hfX+QHihJg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:48 2025 by rpki-client