Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: BAzk4UNJ2TINPNhQWvRUWlTvGV+Xz74z9I9qez+IsqY=
Subject key identifier: C0:E4:43:53:E2:A2:D5:91:65:FF:72:5A:50:20:92:53:06:E9:A2:58
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 0197B7EA5A97530A4055440B637593E113B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 02AD
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: 9G2Q2loPCjbQ2cKOSZQVDrg6vwrKCnPUBDjmhTi4rhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5a:97:53:0a:40:55:44:0b:63:75:93:e1:13:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=c0e44353e2a2d59165ff725a5020925306e9a258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:4b:98:5e:d0:05:c8:6b:09:3d:35:d3:05:
de:bc:e1:42:04:7f:8b:3b:a7:cd:ea:51:dd:0b:8d:
e0:c4:f6:38:69:24:89:3f:df:7e:ba:35:7e:3f:8c:
64:4c:33:37:7a:60:50:7d:1c:7b:55:4a:ec:f4:73:
5e:c8:47:6e:c8:1c:39:ab:a5:1d:a6:ee:f6:f8:28:
a1:97:47:02:05:9f:34:e8:f9:60:fe:b9:55:55:ad:
ca:ad:cb:88:b0:fa:45:2c:15:13:a0:0c:1f:7a:da:
f3:0c:c4:8b:2c:7d:a0:ce:af:96:d5:2a:df:a8:cc:
fc:31:c5:1f:fc:87:b3:f9:af:a3:1a:1d:48:2e:8e:
33:03:fc:f0:23:ad:f1:5a:3b:89:34:d1:35:34:18:
d1:cc:76:43:86:2f:13:eb:87:e2:d2:45:a6:52:6e:
32:45:c1:62:04:07:d8:f1:66:e9:3b:52:36:0c:af:
8e:e1:54:06:13:ba:6e:d8:c5:e9:73:fb:99:4e:db:
7e:02:fd:f6:e2:93:7c:28:51:fa:4b:52:54:72:bb:
3d:1d:3f:5f:d0:6d:13:e4:2b:5e:95:9c:87:bb:c3:
db:16:1a:2f:c7:c9:62:17:f5:ba:5c:5f:fe:9b:15:
46:11:3f:41:a9:b7:98:19:1f:49:60:1f:75:28:f4:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:43:53:E2:A2:D5:91:65:FF:72:5A:50:20:92:53:06:E9:A2:58
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c5:5a:de:1a:0b:c5:1b:f9:ae:21:ce:f2:f4:73:11:40:8f:
74:d5:a5:1c:9d:52:90:89:7f:87:5f:7d:99:28:ff:3a:8d:a3:
d6:20:75:b8:da:31:2a:1e:e9:09:6e:99:f8:c4:07:16:e1:ce:
0d:0c:9c:cc:3f:c5:f5:a0:40:24:5d:c8:12:d7:da:36:42:fa:
b2:d7:a4:ac:0c:7f:05:c1:fd:ce:b3:2d:19:8a:dd:88:72:f9:
5f:28:a2:ea:d9:62:e1:61:38:db:de:c8:08:56:40:6b:c9:91:
b6:da:79:11:85:4d:6e:ca:2e:9e:67:68:85:74:89:ed:d2:90:
c4:38:c0:5d:dc:5e:2d:2e:d1:2e:3b:83:3b:60:b3:66:cc:b4:
b8:f6:8f:6a:be:e9:0d:0f:7f:40:80:b7:13:c1:0e:e0:b2:c9:
00:cd:3d:eb:94:82:85:45:69:50:b0:7d:e3:53:e4:56:37:a2:
01:0d:90:af:21:ed:4f:fc:99:f9:c6:42:0a:34:05:98:33:76:
5e:4b:b2:0b:47:02:1e:14:e6:91:c3:90:99:5b:c7:1a:a4:7b:
96:dc:e2:25:7a:80:5c:b8:fd:72:83:f5:54:e6:85:2e:13:44:
58:5c:e7:dc:5a:a4:00:50:04:79:ac:3b:8c:d6:e9:45:67:e3:
fc:06:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:25 2025 by rpki-client