Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: h1thgUwv3CqUxaVibn4H00gAHHognvfv6hgDTDmOUSU=
Subject key identifier: 4E:E2:C9:BC:8C:6F:F9:FF:85:32:34:FC:72:30:11:C6:10:47:12:B4
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019A725C9DC17A289716407BAD76283E15F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 132D
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: tIdRYb6d1m8a+VtGhE7FDWXsN40N3r8ylScYuDJfqWA=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9d:c1:7a:28:97:16:40:7b:ad:76:28:3e:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=4ee2c9bc8c6ff9ff853234fc723011c6104712b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:e7:97:97:d2:96:a8:59:97:ea:78:ff:27:
4b:a3:e6:20:f7:87:6c:60:de:53:8f:5d:c5:23:ab:
f6:42:5f:65:db:d4:5c:18:03:f5:9f:ba:3b:c7:77:
2b:e7:6d:46:4c:ed:72:46:f2:11:69:b1:c7:8e:42:
ef:57:54:c9:46:41:d1:81:5b:ab:9d:fb:fc:bb:b1:
43:f9:51:85:42:c9:6f:31:34:24:50:7d:31:68:13:
bc:bb:ed:5b:c8:b8:ef:70:68:2d:ab:0c:c0:c5:f3:
a5:cf:44:e2:aa:56:95:43:5a:5f:d4:f5:6d:9b:aa:
30:30:bf:76:e1:da:8c:91:07:35:90:bf:ed:2b:46:
13:56:cb:ab:55:b1:4c:ac:83:10:9d:d9:e5:6b:71:
75:28:cc:b4:b1:d6:06:14:be:12:4c:91:65:b8:16:
31:69:ff:8d:1c:f5:5d:99:76:3c:49:ae:e8:87:81:
41:b2:a1:7c:f1:c8:d0:18:74:50:ba:ea:be:95:13:
6d:ce:0b:22:55:bd:53:79:2e:3b:86:51:29:28:db:
ce:56:07:bc:b1:37:b6:1d:ad:4d:86:04:72:f2:9d:
9a:62:49:6d:2b:51:1b:01:ee:17:ad:de:eb:80:e8:
90:a7:36:4c:85:87:d0:2d:23:c5:55:a8:46:92:25:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E2:C9:BC:8C:6F:F9:FF:85:32:34:FC:72:30:11:C6:10:47:12:B4
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:d6:b7:49:5c:13:66:d1:b2:bd:5f:c0:ce:7b:9a:06:f4:
4a:e6:0a:b5:b5:2d:d3:93:d8:a8:af:de:f3:b9:11:f0:a2:10:
56:4a:3b:3d:b3:84:eb:00:66:5b:90:ec:ca:65:f5:59:3c:bb:
9a:70:66:1a:41:15:5c:ad:b2:e3:6e:4b:00:15:2e:8a:b8:93:
53:d0:57:bd:17:c0:db:7d:db:58:79:8f:c9:fa:34:75:5d:04:
c9:26:8d:75:b0:17:d2:d6:f7:89:a5:00:88:b9:89:b4:27:f7:
8a:c1:9d:2b:36:f0:43:d0:17:a7:d2:39:14:29:d7:90:8f:f9:
54:76:8b:d2:d5:94:4b:26:f8:a4:3e:ff:ee:91:b1:c2:06:c0:
0d:91:74:fb:42:d2:86:0a:aa:1d:19:28:e7:c2:78:89:54:8b:
35:48:c0:e0:5b:c7:13:73:41:04:01:83:7b:f9:73:6e:7b:62:
a7:8f:71:9a:d0:92:b5:66:bc:b9:87:3f:ea:a5:2e:3d:97:47:
8f:9e:e4:91:67:33:4f:39:ea:f6:1d:88:dc:59:76:0d:2c:68:
35:60:71:43:dc:3c:8c:75:76:99:48:9b:12:13:f4:37:d4:55:
3a:95:8f:76:6c:f8:58:42:09:09:86:71:bc:f4:22:22:b8:a6:
fa:b3:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:30 2025 by rpki-client