Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: n2BJ5FXoClnBCLMCn9ygKCqtd50LCO4PxCr6520UlTQ=
Subject key identifier: 07:BF:A4:9E:2E:6F:14:EC:95:C9:16:F0:EA:D2:8F:A1:BE:25:93:01
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 019A71135F3AD285453B5AB2C24D0442C575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 0417
Signing time: Tue 11 Nov 2025 04:01:26 +0000
Manifest this update: Tue 11 Nov 2025 04:01:26 +0000
Manifest next update: Wed 12 Nov 2025 04:01:26 +0000
Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=)
2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: qhE75uXdufLC41bIsteLmwBlS8hAFZ4TX9tksiDELRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5f:3a:d2:85:45:3b:5a:b2:c2:4d:04:42:c5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Nov 11 04:01:26 2025 GMT
Not After : Nov 12 04:01:26 2025 GMT
Subject: CN=07bfa49e2e6f14ec95c916f0ead28fa1be259301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:41:79:ff:c8:bf:25:f7:7d:69:e6:d0:dc:
f3:d9:9c:a2:bd:66:67:17:3b:12:5b:35:2c:92:a6:
ec:4d:96:44:20:46:d2:99:a5:d1:9a:b4:6a:4a:e0:
74:39:93:5d:e3:32:63:ef:ed:b5:06:90:db:de:78:
55:5d:28:ca:f1:2e:76:42:bb:c8:67:d3:5c:55:cd:
44:89:ce:f4:4a:d8:97:a4:89:03:ac:43:6e:63:28:
f4:b4:90:1d:55:85:b1:69:a7:b7:29:2e:9b:a4:ea:
aa:04:19:b8:be:19:50:b2:b2:33:82:70:3d:1c:ee:
40:ff:dc:a9:a9:f5:08:85:79:c7:3a:e2:e4:71:5c:
73:72:ac:c2:12:64:ec:91:93:60:43:b2:bb:60:b7:
f2:5a:fa:e8:e8:42:61:2d:ce:19:58:4a:a4:b6:ab:
1e:b1:4d:74:a3:89:a5:b4:ab:fc:66:fc:89:c1:bc:
c5:c9:e4:f5:97:f9:10:78:71:78:fd:f2:41:37:e6:
f1:a5:5f:cf:1a:7c:3c:1d:eb:b9:d0:44:0a:02:22:
f7:d2:2e:ec:4e:84:eb:9c:b2:7c:04:1e:82:66:0e:
df:d3:cc:1d:c6:aa:08:a6:07:a7:8c:84:ae:af:73:
b2:05:ab:e2:d0:69:cd:77:35:1e:88:00:b5:f9:7e:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:A4:9E:2E:6F:14:EC:95:C9:16:F0:EA:D2:8F:A1:BE:25:93:01
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:c4:c2:34:27:7b:a9:d4:f8:da:02:e5:6b:2e:45:b7:46:
10:ec:26:82:e7:af:5f:71:7c:a2:24:65:55:33:80:c8:d4:e8:
37:da:ba:5e:8d:ae:a0:2b:2c:1e:22:a7:ba:ce:e4:ba:6d:a0:
43:33:d0:81:ec:66:72:0c:2e:94:8f:66:fc:28:a3:75:16:c0:
9c:57:46:fe:a0:81:83:64:dc:07:ba:54:68:2d:57:e6:4c:d0:
3a:5e:4d:7a:4c:ec:f3:88:ee:95:5c:14:a5:66:09:c2:a0:5b:
55:c1:e9:88:93:2d:a1:25:ee:af:f6:86:06:12:1c:dd:b1:6e:
a6:fe:da:9d:d9:f2:c3:25:ed:5b:29:b0:87:eb:ce:52:56:1c:
56:01:8b:d8:2e:e5:08:ce:f2:c7:6b:d3:77:c7:e9:47:26:08:
1f:e7:b6:f8:0d:87:85:95:07:9f:f4:4f:7d:45:a8:7b:a8:f9:
4d:84:a1:a4:60:09:34:a7:94:7d:57:04:91:ba:41:e7:9b:d7:
a0:59:12:b4:2a:9c:6e:76:d5:01:1c:16:71:4a:e3:87:13:63:
da:f2:62:dc:3c:96:b8:bb:fe:28:61:19:c7:05:d5:78:7d:75:
e7:e3:e8:f5:77:af:69:ca:25:c7:c4:c1:17:cc:df:4f:ce:12:
b3:3d:19:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1860oVFO1qywk0EQsV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh
MDFlNTcwHhcNMjUxMTExMDQwMTI2WhcNMjUxMTEyMDQwMTI2WjAzMTEwLwYDVQQD
EygwN2JmYTQ5ZTJlNmYxNGVjOTVjOTE2ZjBlYWQyOGZhMWJlMjU5MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx5Bef/IvyX3fWnm0Nzz2ZyivWZn
FzsSWzUskqbsTZZEIEbSmaXRmrRqSuB0OZNd4zJj7+21BpDb3nhVXSjK8S52QrvI
Z9NcVc1Eic70StiXpIkDrENuYyj0tJAdVYWxaae3KS6bpOqqBBm4vhlQsrIzgnA9
HO5A/9ypqfUIhXnHOuLkcVxzcqzCEmTskZNgQ7K7YLfyWvro6EJhLc4ZWEqktqse
sU10o4mltKv8ZvyJwbzFyeT1l/kQeHF4/fJBN+bxpV/PGnw8Heu50EQKAiL30i7s
ToTrnLJ8BB6CZg7f08wdxqoIpgenjISur3OyBavi0GnNdzUeiAC1+X71bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAe/pJ4ubxTslckW8OrSj6G+JZMBMB8GA1UdIwQY
MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt
Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1
LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSfEwjQn
e6nU+NoC5WsuRbdGEOwmguevX3F8oiRlVTOAyNToN9q6Xo2uoCssHiKnus7kum2g
QzPQgexmcgwulI9m/CijdRbAnFdG/qCBg2TcB7pUaC1X5kzQOl5Nekzs84julVwU
pWYJwqBbVcHpiJMtoSXur/aGBhIc3bFupv7andnywyXtWymwh+vOUlYcVgGL2C7l
CM7yx2vTd8fpRyYIH+e2+A2HhZUHn/RPfUWoe6j5TYShpGAJNKeUfVcEkbpB55vX
oFkStCqcbnbVARwWcUrjhxNj2vJi3DyWuLv+KGEZxwXVeH115+Po9Xevacolx8TB
F8zfT84Ssz0ZEw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:37 2025 by rpki-client