
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: qBSBBjignlgjl1Hw60ppm6rHVZDzB9NxSl5oVKbWY7Y=
Subject key identifier: 88:FB:62:34:96:0C:77:17:94:D1:02:7C:95:F1:70:A7:4E:B1:EB:82
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 01987CE4FFBCB3B9B9B08DFAC75BFDDD0DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 0313
Signing time: Wed 06 Aug 2025 01:00:39 +0000
Manifest this update: Wed 06 Aug 2025 01:00:39 +0000
Manifest next update: Thu 07 Aug 2025 01:00:39 +0000
Files and hashes: 1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: +Y74tLsaD0CyTuZbAVESXZTXU4reRjMhhuEQj5IfXm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:ff:bc:b3:b9:b9:b0:8d:fa:c7:5b:fd:dd:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Aug 6 01:00:39 2025 GMT
Not After : Aug 7 01:00:39 2025 GMT
Subject: CN=88fb6234960c771794d1027c95f170a74eb1eb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:9a:f7:ca:d8:5e:22:67:e5:e4:a2:95:b6:
3f:84:c2:5b:8c:65:1b:e2:fd:92:67:43:61:d6:42:
e5:10:a6:fc:b2:10:71:b2:1a:d2:98:7a:db:89:27:
14:59:60:09:50:76:d7:12:f3:f8:91:36:63:e5:c2:
4e:ea:9d:07:bc:a8:48:52:cd:48:60:73:1d:18:97:
a9:77:d4:cd:21:d1:e4:94:6a:27:4e:81:98:dc:93:
34:6e:38:d5:76:f8:b0:5e:e9:22:88:77:4a:1f:45:
66:e3:a7:f1:ae:8c:53:a6:e6:3f:c4:92:55:c8:5e:
3f:d1:b4:f9:2a:5f:3a:63:ca:b8:55:71:70:a3:d4:
d1:1c:ad:5b:85:52:4e:ae:97:a4:39:93:7e:53:06:
a1:3c:5c:8d:fe:41:41:34:56:b5:5c:57:2f:6e:58:
81:81:32:d4:21:ab:d1:eb:12:2a:b5:47:31:c2:c7:
7c:89:fe:90:f6:e8:de:1c:77:93:bb:51:78:f4:d2:
3a:d5:5a:fe:d7:1b:5c:90:89:3b:74:c3:6a:55:1c:
5d:eb:3b:99:bf:c7:74:0e:ca:f7:23:5c:a5:4d:a0:
86:31:98:54:71:93:d5:6b:40:62:58:56:84:0e:4e:
ff:26:53:30:7f:52:c6:bc:db:4f:e1:12:25:95:89:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:62:34:96:0C:77:17:94:D1:02:7C:95:F1:70:A7:4E:B1:EB:82
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:6c:ad:99:71:60:b7:77:b5:e7:fe:2a:80:ee:79:df:0d:
a2:ea:2a:0e:39:1a:61:f0:a7:34:f0:4a:3e:bc:28:fe:1a:5d:
91:dc:e0:76:81:89:20:79:dd:45:d8:be:e5:b0:bc:f4:9e:91:
ed:61:a4:54:0d:f2:26:e1:6f:9d:c7:53:8d:a3:d8:be:d0:1b:
5c:31:d2:75:da:42:6e:c8:64:98:b3:00:c9:f0:c7:bb:36:1e:
a4:22:e1:9c:5b:1d:3e:c0:2f:43:df:71:84:9e:54:3d:73:52:
57:46:da:a3:9d:21:d3:df:d8:ab:dc:3f:42:f1:ec:60:6f:66:
89:b1:a4:7e:1e:4c:f4:3a:f5:5b:fb:aa:3e:b4:21:bc:fe:90:
71:37:16:6c:23:19:51:f9:cf:82:1e:28:b8:f1:4b:cb:88:d3:
ea:3d:17:c7:e2:42:e0:cd:50:89:6a:2f:0c:19:c3:a7:d5:ad:
9a:af:e4:a7:67:44:cb:71:50:2c:23:25:87:ee:be:44:30:08:
25:bc:f9:c1:38:be:0b:70:85:e0:f6:82:30:ee:d9:31:82:07:
71:b6:e2:df:58:0f:f7:75:a0:4b:2a:09:59:94:3c:00:1e:fc:
7f:69:8f:ef:67:a8:a4:13:af:cc:05:06:8d:f2:b9:e9:3b:33:
11:aa:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:20 2025 by rpki-client