Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: LY8hHsy37DLsT1V95c1kvaM81PphdUaAHvmzfqAr3jY=
Subject key identifier: C5:01:6F:4E:FB:26:54:B5:F3:E7:B9:42:AD:AD:9D:AE:74:0A:53:6F
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 019A71B807259806E3934DABC36247B1B022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:16 +0000
Manifest this update: Tue 11 Nov 2025 07:01:16 +0000
Manifest next update: Wed 12 Nov 2025 07:01:16 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: s4Eeu7Z6hFyR5FKYiUkzXjCmv+DQO5KPTugubhKoqwE=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:07:25:98:06:e3:93:4d:ab:c3:62:47:b1:b0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Nov 11 07:01:16 2025 GMT
Not After : Nov 12 07:01:16 2025 GMT
Subject: CN=c5016f4efb2654b5f3e7b942adad9dae740a536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:bd:11:9e:67:2d:5d:07:3e:a5:14:c6:c8:
4c:d1:2e:54:ae:6e:7e:a1:ec:ff:85:0c:5d:3a:12:
e6:64:8c:1f:05:9c:01:d6:ba:f5:ae:15:d9:4b:9b:
37:03:27:88:55:2b:3a:d0:fa:f4:37:df:37:35:8c:
e0:cb:f6:b5:a9:a5:e6:a8:c8:02:40:a3:7f:0a:43:
73:a5:fc:f1:47:27:b8:1d:26:6c:4c:3c:74:03:24:
08:d8:15:35:f5:03:5c:64:1f:19:4c:ad:04:54:a4:
68:08:cb:92:a3:52:b0:16:6b:67:36:56:ae:0e:1b:
42:70:f6:fd:2c:2a:ff:94:05:70:e9:43:19:05:27:
31:15:03:bd:05:a1:4b:f2:9d:68:f8:e1:86:d7:80:
1a:31:80:03:e0:f4:93:99:48:82:2a:16:fd:49:14:
56:ce:3c:74:bf:92:01:b9:fc:ed:f2:08:18:7b:76:
a8:ba:0a:c6:c4:71:77:56:3b:04:42:4f:0e:ae:b4:
ba:f4:e0:15:6d:4b:2c:bf:e5:29:33:b2:66:6a:5d:
c4:d9:7d:7d:5c:a2:a8:f5:86:3b:75:d7:68:64:19:
7f:72:94:ce:00:53:9d:d4:96:1e:2d:b3:5f:85:de:
b4:f8:e4:58:ca:7b:5f:8e:f8:93:2e:6c:54:d1:47:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:6F:4E:FB:26:54:B5:F3:E7:B9:42:AD:AD:9D:AE:74:0A:53:6F
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:a7:cd:3a:80:b4:72:a0:c3:fb:7e:c1:a6:53:fb:a1:8d:
b4:c2:af:da:e0:05:07:84:cf:8e:a0:3c:ca:cf:5c:0b:62:03:
d2:49:88:b3:9f:dc:c2:d3:17:09:17:09:d7:7a:b7:3a:e0:86:
72:92:ae:66:fc:bc:3e:79:24:e4:f9:8d:85:b9:20:eb:b6:b4:
8a:89:89:a3:d8:1c:24:55:38:b5:35:a7:cd:ef:9b:79:35:68:
fe:15:0d:cf:ee:17:6b:24:78:b8:77:63:d5:f3:1e:0d:70:4d:
b4:9a:45:f3:24:8b:f2:97:8b:f7:24:6b:65:5d:13:1c:25:2f:
2f:a6:bd:d0:cd:c5:01:e2:d0:f1:44:97:55:61:c5:4c:d1:4d:
48:0c:1b:ca:f3:d9:49:98:5a:6f:93:26:ad:2e:c6:de:ee:a1:
d3:ee:ad:69:1a:13:1f:15:e1:75:83:fa:a6:c3:6a:75:38:d6:
2f:2b:12:94:86:82:65:64:48:3a:9f:73:23:0b:ce:9b:1d:7b:
0c:68:53:e5:dc:cd:d1:7c:56:f5:e6:74:f1:60:63:12:6d:86:
5d:9b:70:3e:54:a5:be:6d:44:c0:91:f6:3f:af:c4:00:3d:c1:
ba:9b:a9:62:d9:55:ae:2e:24:cf:7f:f5:b9:20:2e:8b:e8:40:
0d:15:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:19 2025 by rpki-client