Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: YDcXp0U9MLNOroXMFnky4jEeuwrrCy4Nwwy3HgMg4Ic=
Subject key identifier: 27:C7:9C:B5:A7:6F:9C:58:DD:6A:A9:20:B4:4D:86:35:0F:88:58:FA
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 019A4C618738CAC0AA687C17B9975781DA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 0404
Signing time: Tue 04 Nov 2025 01:00:51 +0000
Manifest this update: Tue 04 Nov 2025 01:00:51 +0000
Manifest next update: Wed 05 Nov 2025 01:00:51 +0000
Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=)
2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: +k8c8rSKm0GpALPjLa8cKviBKVKFSPzUW22pt5RtGdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:87:38:ca:c0:aa:68:7c:17:b9:97:57:81:da:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Nov 4 01:00:51 2025 GMT
Not After : Nov 5 01:00:51 2025 GMT
Subject: CN=27c79cb5a76f9c58dd6aa920b44d86350f8858fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:ff:cc:86:88:32:45:b4:3b:56:a0:ea:b2:
b5:4b:92:67:71:06:54:62:40:cb:73:d1:6e:e0:d9:
2e:59:ef:37:d0:51:df:46:be:57:a5:b3:e7:f5:e7:
4b:fb:a1:73:1c:fb:16:c5:5d:fd:63:fe:53:8b:89:
bd:06:ed:25:07:86:7b:65:cf:6d:7a:f3:10:db:42:
e4:6d:63:d1:c6:8a:fa:fb:74:58:36:f9:ef:fc:aa:
79:a0:ac:60:11:ee:a3:15:ec:07:f7:6c:03:18:22:
cf:23:34:6d:12:87:65:05:71:d4:c7:ed:e8:f3:62:
e6:f4:74:9d:b1:33:c1:45:7d:b6:f0:0b:bb:2c:e6:
e6:ff:b9:29:1e:93:18:07:22:38:08:d2:ec:e0:00:
09:09:77:3e:d8:61:9d:74:fe:fb:56:99:2c:05:5f:
37:01:53:1d:35:5a:4d:a7:2f:14:f7:52:a6:52:1c:
ce:b9:b9:23:5a:1d:ea:98:d6:2d:bc:f3:a3:d4:c0:
d0:5a:77:50:fa:eb:6f:2c:d6:2f:cb:c0:73:e6:9f:
02:c8:e5:b3:57:9c:dc:57:4c:8a:ea:42:f8:a4:79:
1d:b5:74:81:3b:ce:96:93:02:dc:9a:1f:43:8c:e4:
05:ee:c9:49:72:4c:fa:9b:ac:5b:f0:ac:d0:aa:22:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:9C:B5:A7:6F:9C:58:DD:6A:A9:20:B4:4D:86:35:0F:88:58:FA
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:a9:d4:1a:32:71:8c:10:4a:40:ed:db:ca:4f:c5:74:13:
32:15:24:24:13:c1:4f:bc:b3:09:bc:f9:cc:42:6e:6c:2e:a1:
2b:d7:ca:1a:79:7d:76:14:96:23:ed:60:32:3a:8c:c8:1a:35:
df:45:1f:43:0a:01:54:55:1c:82:14:62:0a:8a:37:7e:2b:95:
76:6c:78:95:33:66:3d:0a:44:09:3e:4b:e3:e3:8e:94:ed:9f:
34:05:81:bb:0e:de:66:da:ad:7a:22:07:1c:e9:aa:d0:a1:43:
a6:53:ba:0c:76:69:2b:17:ee:f2:7e:08:dc:ff:18:84:02:91:
95:b5:0f:a3:05:2c:56:cd:b3:0a:5c:d2:ec:07:c0:08:ab:aa:
3a:1b:a7:e3:ca:81:6d:ac:6e:14:e8:ab:bb:0f:e0:49:64:86:
63:88:be:6d:d7:90:c2:d4:79:e0:c1:dc:7f:e3:96:0a:da:28:
ae:84:79:cf:c8:9c:d1:bb:56:50:0b:92:d7:fa:8a:e6:3f:35:
46:5f:ae:ba:4c:b0:6f:fd:75:80:cb:ed:48:f4:d9:a3:1a:6a:
f9:a0:c2:1c:90:53:cc:e2:9c:71:a8:c0:8a:ea:da:e0:42:2e:
80:51:2f:2a:62:38:9d:7a:ec:1e:34:f3:41:fb:11:e2:f1:0a:
b8:b3:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:18 2025 by rpki-client