Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: GMSdIQeTu6lOp7VYhszsrlKC2QGz93VnQNn3pW16r3A=
Subject key identifier: 40:B0:B7:FB:F2:5B:DC:F8:BC:C1:08:1A:4A:6C:3E:FA:84:7D:09:94
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 0199FB4603857E4F274D4B97356274ED5BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 03DA
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=)
2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: OkzNARD0Yo+ySMOpoSJeO3EmWNzR3u7x6k76dhikXJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:03:85:7e:4f:27:4d:4b:97:35:62:74:ed:5b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=40b0b7fbf25bdcf8bcc1081a4a6c3efa847d0994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:12:96:0e:47:5b:2e:af:28:f9:ae:be:1d:
c4:eb:b0:eb:e1:48:6a:8b:38:db:b4:fe:e9:09:5c:
55:3d:17:24:0d:28:03:2f:9a:82:4f:4a:87:60:c3:
4e:d2:2d:31:75:14:b3:05:8f:2b:60:31:a2:26:21:
25:0b:d5:8a:aa:d3:6a:1e:6f:f2:88:e3:2b:39:f1:
9d:36:a1:d7:2a:19:a1:46:6c:b7:a2:61:ec:19:b1:
e5:01:92:04:a1:f7:f2:ab:e3:8f:d0:c9:00:4d:34:
b2:a9:a4:4b:d9:62:38:d9:6b:35:12:9f:50:24:4d:
8c:e5:fa:5e:75:21:0e:6b:86:a2:8d:5c:67:2d:4c:
4a:b0:01:62:12:5c:c3:5a:ab:18:be:bd:76:4b:31:
39:d7:11:ff:8b:70:47:12:98:d8:e6:d4:55:a8:20:
5e:0f:b8:fc:1a:cf:86:52:c0:ac:53:b8:72:cc:be:
cb:ad:26:fc:7e:d5:89:16:73:39:19:97:fb:91:d4:
04:30:97:95:55:ba:bc:cb:e4:6a:23:0d:f4:0c:a4:
e6:04:c3:33:b7:5b:66:fa:32:53:07:ae:49:31:9b:
72:4a:de:67:d7:b4:a0:c2:9a:dd:e8:79:55:28:b7:
5e:c2:fe:8c:ec:e2:11:af:d9:17:db:43:1f:84:4c:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B0:B7:FB:F2:5B:DC:F8:BC:C1:08:1A:4A:6C:3E:FA:84:7D:09:94
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0a:30:b5:74:ca:54:22:1b:e7:76:df:f1:9d:ec:51:82:d1:
2d:a9:f9:45:1a:4c:df:59:31:e5:65:b1:2c:28:cf:39:bb:1e:
0a:a4:91:0f:06:04:9e:13:42:7a:10:9e:ed:cf:3c:08:05:6e:
cf:51:3d:4c:53:61:ad:4f:e3:fa:f6:d6:07:98:a8:73:53:12:
0e:6f:c8:9a:e5:8b:95:27:2a:ad:13:0b:08:f0:8b:ff:2d:a2:
f9:9d:05:e7:7b:ab:f7:3b:dd:aa:27:8e:3c:66:8f:77:d2:64:
de:49:c3:f0:4b:d3:05:f1:16:89:0c:da:7e:52:54:b5:d4:1d:
29:4a:40:5e:93:e3:ab:f6:56:e5:69:3c:86:86:bd:6b:3c:b4:
a3:94:da:98:9c:8d:54:a1:d1:97:12:0e:e3:9d:19:c9:5c:5e:
d3:6d:4a:01:04:c7:c5:97:1a:2a:9c:64:eb:0c:65:8d:25:91:
af:99:ad:39:9b:c5:74:a8:b5:b5:d5:9d:56:22:cc:a7:95:ce:
94:32:5b:27:ae:7e:2b:71:ea:87:e0:9b:b3:c7:04:38:e2:ef:
21:66:a4:db:dc:11:2d:1b:2e:7b:2b:4a:f9:34:c5:a0:92:ad:
e7:7d:50:b7:2c:d4:83:ca:12:bc:9a:8e:b9:38:39:c6:96:15:
35:0d:14:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RgOFfk8nTUuXNWJ07VvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh
MDFlNTcwHhcNMjUxMDE5MDcwMTMzWhcNMjUxMDIwMDcwMTMzWjAzMTEwLwYDVQQD
Eyg0MGIwYjdmYmYyNWJkY2Y4YmNjMTA4MWE0YTZjM2VmYTg0N2QwOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiQSlg5HWy6vKPmuvh3E67Dr4Uhq
izjbtP7pCVxVPRckDSgDL5qCT0qHYMNO0i0xdRSzBY8rYDGiJiElC9WKqtNqHm/y
iOMrOfGdNqHXKhmhRmy3omHsGbHlAZIEoffyq+OP0MkATTSyqaRL2WI42Ws1Ep9Q
JE2M5fpedSEOa4aijVxnLUxKsAFiElzDWqsYvr12SzE51xH/i3BHEpjY5tRVqCBe
D7j8Gs+GUsCsU7hyzL7LrSb8ftWJFnM5GZf7kdQEMJeVVbq8y+RqIw30DKTmBMMz
t1tm+jJTB65JMZtySt5n17Sgwprd6HlVKLdewv6M7OIRr9kX20MfhEwAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECwt/vyW9z4vMEIGkpsPvqEfQmUMB8GA1UdIwQY
MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt
Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1
LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAowtXTK
VCIb53bf8Z3sUYLRLan5RRpM31kx5WWxLCjPObseCqSRDwYEnhNCehCe7c88CAVu
z1E9TFNhrU/j+vbWB5ioc1MSDm/ImuWLlScqrRMLCPCL/y2i+Z0F53ur9zvdqieO
PGaPd9Jk3knD8EvTBfEWiQzaflJUtdQdKUpAXpPjq/ZW5Wk8hoa9azy0o5TamJyN
VKHRlxIO450ZyVxe021KAQTHxZcaKpxk6wxljSWRr5mtOZvFdKi1tdWdViLMp5XO
lDJbJ65+K3Hqh+Cbs8cEOOLvIWak29wRLRsueytK+TTFoJKt531QtyzUg8oSvJqO
uTg5xpYVNQ0UVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:27 2025 by rpki-client