Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: Gs3/Qt7++Ty/FOxUr9fAw5EEFJEVeTpnOaqdUUJGjtM=
Subject key identifier: 36:48:4B:9A:69:89:6D:2F:19:19:E7:6B:5E:27:AB:3D:EB:B5:44:DF
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 0197500EA0D2E42AB26714402EA91418F8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 15:00:25 +0000
Manifest this update: Sun 08 Jun 2025 15:00:25 +0000
Manifest next update: Mon 09 Jun 2025 15:00:25 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: Rrq5WDWUQ2M0m7JF33cbukk9Y6CZ38b494TiA8G0Dh4=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:a0:d2:e4:2a:b2:67:14:40:2e:a9:14:18:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jun 8 15:00:25 2025 GMT
Not After : Jun 9 15:00:25 2025 GMT
Subject: CN=36484b9a69896d2f1919e76b5e27ab3debb544df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:2a:91:cf:4f:9b:df:2a:2d:e9:ac:9e:7e:
6d:b5:ea:cb:8c:ee:bb:cc:bc:d2:09:e6:5a:c7:93:
c3:67:ff:02:06:d5:47:ce:9a:28:8a:91:a5:99:e4:
ee:95:93:9b:05:7c:2d:ac:52:9c:44:f4:0b:a7:ac:
2d:cc:02:5a:e0:d6:5d:cc:da:0b:72:b4:74:13:3b:
5e:13:ff:bc:11:6c:98:57:da:58:3b:b0:a9:11:f2:
4b:de:c5:f6:08:2d:d9:a2:02:fc:2e:b4:7b:4b:c1:
ae:ec:37:81:71:32:44:b9:c7:af:41:2a:5c:fe:46:
62:3e:05:bb:6f:d5:a9:24:a0:10:fb:53:57:3b:cb:
84:61:1b:d2:2a:2d:49:74:4d:74:be:7e:49:f7:69:
fe:e8:c6:1d:76:75:0b:52:0e:63:71:4b:11:aa:37:
46:db:ca:f6:c5:c3:30:09:32:a8:87:7b:25:b7:7e:
0b:a7:1a:1c:c6:1e:3b:fa:b1:91:8a:6e:b3:bf:a5:
fa:d8:4b:06:e0:2c:e9:73:a1:5f:28:87:8d:4e:58:
8c:1e:3a:9a:85:7f:a9:35:8c:bf:4b:d0:bd:2b:e4:
7a:d8:b7:c9:65:a5:e0:12:6f:ba:e5:d9:43:c0:1c:
45:37:7a:58:d6:de:32:3f:64:a1:45:69:f1:c3:94:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:4B:9A:69:89:6D:2F:19:19:E7:6B:5E:27:AB:3D:EB:B5:44:DF
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:af:f4:f3:44:06:2b:40:15:9d:ca:8f:4f:e5:92:3f:53:ac:
b6:cb:c2:d5:13:47:5f:ea:ef:2a:eb:f2:21:1d:b7:2c:df:55:
d5:70:00:a0:82:e8:5a:80:f5:dd:09:e8:76:10:c6:3e:c3:a7:
c9:b0:6c:90:c1:16:a8:00:77:af:dd:5a:d6:ab:7c:75:54:26:
70:ae:b3:88:81:b8:99:5b:ac:fd:32:3c:52:31:51:3a:0b:44:
d1:77:c9:b7:33:86:32:f0:03:cb:94:f0:b9:13:f0:dd:54:5b:
06:d7:9f:0a:df:8b:11:93:25:01:4d:2d:81:b2:9e:bd:84:cd:
e8:c4:11:ac:a8:79:6e:34:ef:43:2f:20:20:85:f0:f7:95:1d:
8b:cb:86:22:66:81:89:81:89:b8:5d:19:f0:b5:35:3d:f0:f0:
73:6a:00:1a:42:b3:dc:9e:88:67:fa:d2:da:d5:72:fa:77:04:
4b:57:e9:4a:e4:64:a1:e8:0f:90:9b:f5:3b:39:8a:18:79:b4:
93:68:b5:f2:d0:6f:aa:1a:f0:c2:27:48:cf:38:a2:09:34:70:
b0:f5:00:0d:0a:34:0c:37:2c:7a:39:8d:5b:52:15:be:15:41:
20:11:93:9f:ab:87:41:cd:64:2a:5c:4d:67:b3:ac:df:e2:be:
f3:1e:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:19 2025 by rpki-client