Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File: Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier: 4kavTWZTFYsyhVPhztMcJ4fJ0HynRWek14FQ+xLwClw=
Subject key identifier: B9:FE:F9:F3:27:0C:74:5D:F0:68:0F:FC:3D:3C:34:81:5B:92:D6:08
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 0195116BA6FCA07FCF6B20BA6F793A2D38CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number: 1064
Signing time: Mon 17 Feb 2025 01:00:22 +0000
Manifest this update: Mon 17 Feb 2025 01:00:22 +0000
Manifest next update: Tue 18 Feb 2025 01:00:22 +0000
Files and hashes: 1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: UJQWOl4HWibirjubJxl36f+GuvmXOQnb7Un8nWbrhzA=)
2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a6:fc:a0:7f:cf:6b:20:ba:6f:79:3a:2d:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Feb 17 01:00:22 2025 GMT
Not After : Feb 18 01:00:22 2025 GMT
Subject: CN=b9fef9f3270c745df0680ffc3d3c34815b92d608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:91:e6:29:2a:4e:fc:76:a4:f0:82:c1:63:
3c:2d:5c:f0:ea:53:fc:61:9f:1e:d6:b6:14:f3:e5:
56:ff:24:68:ce:f7:eb:3d:ca:50:ce:22:85:ce:0f:
e7:75:ca:b3:06:a1:a6:48:df:94:fa:21:b9:47:de:
d9:3c:da:b9:36:de:03:e7:88:d5:71:8e:75:5b:e3:
b3:d9:6e:d9:a2:08:cf:4b:ec:5a:ad:23:6b:ef:64:
fc:c6:bb:67:02:e3:38:85:3b:5c:0f:84:b9:23:96:
b8:f1:3e:b4:b7:91:84:96:d8:be:0c:6d:ec:b8:b9:
fc:da:90:48:0d:72:05:d5:5b:c6:aa:c4:69:f6:a8:
c9:00:a0:d3:50:98:50:b5:e0:cb:e6:dc:52:a5:bc:
d2:9a:f7:9b:78:a5:9f:cc:19:b2:90:f9:4c:ac:da:
27:40:af:32:f8:16:6c:73:a6:0e:9f:9b:0d:25:db:
10:44:c4:ff:f9:01:c3:31:75:8f:60:e2:f6:6f:37:
35:3b:60:f3:c5:4b:fe:9c:12:97:5f:58:e3:a4:8e:
a2:2d:a3:3e:fc:da:dc:d8:42:9b:2b:c6:7c:43:a9:
51:21:da:7e:cc:84:42:8b:e3:e1:b4:13:b8:23:1d:
91:90:1f:bd:99:00:e9:f3:b8:d4:42:66:51:e5:96:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FE:F9:F3:27:0C:74:5D:F0:68:0F:FC:3D:3C:34:81:5B:92:D6:08
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:47:23:d0:d2:70:19:35:37:e2:6c:49:9f:38:2c:5f:69:a0:
e1:a9:13:8c:19:58:46:96:e5:34:89:c9:ef:05:52:89:02:f1:
d5:53:35:93:9a:1e:6c:b9:96:74:ee:e7:ce:26:02:53:3b:9c:
cc:e1:a9:99:d6:96:27:3c:b0:a9:58:f8:ce:18:39:d3:8c:06:
b3:f8:a7:ea:b0:ab:33:de:1a:86:9c:05:75:38:09:9d:1d:97:
64:f6:26:57:ad:f1:1e:e2:cb:f2:29:aa:ca:e4:84:98:74:88:
76:ed:0f:d3:5a:73:bb:be:0a:f9:e7:f4:85:f8:0a:fc:2a:bb:
c2:ca:00:ea:a6:55:13:95:2b:ea:cf:b8:62:3c:93:73:c1:7e:
f9:43:6b:c6:69:02:a8:5b:12:be:36:0a:10:3d:6a:13:2c:d0:
51:4a:dc:f7:59:4e:cc:78:20:3b:2a:83:7e:06:0d:be:4c:15:
4f:3e:05:b5:55:4d:15:61:8a:6b:73:a8:67:f9:90:4c:ab:13:
3e:bb:e7:c4:4d:00:b3:57:33:0e:97:c0:b0:40:c6:4f:64:d6:
7f:cb:9c:c2:12:2f:59:6f:95:30:53:fa:9a:2a:34:4a:b8:71:
c1:91:5c:4b:29:f0:65:82:fd:46:a2:2f:2f:8d:df:9b:3b:9c:
18:0a:ec:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURa6b8oH/PayC6b3k6LTjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5
MDYwMWYwHhcNMjUwMjE3MDEwMDIyWhcNMjUwMjE4MDEwMDIyWjAzMTEwLwYDVQQD
EyhiOWZlZjlmMzI3MGM3NDVkZjA2ODBmZmMzZDNjMzQ4MTViOTJkNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWR5ikqTvx2pPCCwWM8LVzw6lP8
YZ8e1rYU8+VW/yRozvfrPcpQziKFzg/ndcqzBqGmSN+U+iG5R97ZPNq5Nt4D54jV
cY51W+Oz2W7ZogjPS+xarSNr72T8xrtnAuM4hTtcD4S5I5a48T60t5GElti+DG3s
uLn82pBIDXIF1VvGqsRp9qjJAKDTUJhQteDL5txSpbzSmvebeKWfzBmykPlMrNon
QK8y+BZsc6YOn5sNJdsQRMT/+QHDMXWPYOL2bzc1O2DzxUv+nBKXX1jjpI6iLaM+
/Nrc2EKbK8Z8Q6lRIdp+zIRCi+PhtBO4Ix2RkB+9mQDp87jUQmZR5ZZakwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn++fMnDHRd8GgP/D08NIFbktYIMB8GA1UdIwQY
MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt
NmNlNDQ0ZWJlYWYwLzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw
LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEcj0NJw
GTU34mxJnzgsX2mg4akTjBlYRpblNInJ7wVSiQLx1VM1k5oebLmWdO7nziYCUzuc
zOGpmdaWJzywqVj4zhg504wGs/in6rCrM94ahpwFdTgJnR2XZPYmV63xHuLL8imq
yuSEmHSIdu0P01pzu74K+ef0hfgK/Cq7wsoA6qZVE5Ur6s+4YjyTc8F++UNrxmkC
qFsSvjYKED1qEyzQUUrc91lOzHggOyqDfgYNvkwVTz4FtVVNFWGKa3OoZ/mQTKsT
PrvnxE0As1czDpfAsEDGT2TWf8ucwhIvWW+VMFP6mio0SrhxwZFcSynwZYL9RqIv
L43fmzucGArswg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:57 2025 by rpki-client