Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: Kanz8qc8U74w5x/IxH9Vzu4NkudVvD27h83BjyDctLo=
Subject key identifier: 96:EB:B2:81:F1:B9:72:80:30:FC:68:3E:FD:8A:E5:E1:42:DD:F2:75
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019848F7AA0895FA07C821EF421E78183998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0D28
Signing time: Sat 26 Jul 2025 23:00:47 +0000
Manifest this update: Sat 26 Jul 2025 23:00:47 +0000
Manifest next update: Sun 27 Jul 2025 23:00:47 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: ubvZcmxOPJDuro+wBaELVUwPS+TP4mXvT6fki0NYj/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:aa:08:95:fa:07:c8:21:ef:42:1e:78:18:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Jul 26 23:00:47 2025 GMT
Not After : Jul 27 23:00:47 2025 GMT
Subject: CN=96ebb281f1b9728030fc683efd8ae5e142ddf275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:5e:e4:dc:47:0f:94:02:11:ff:48:51:db:
53:2c:63:b5:c4:d5:6e:77:8a:f4:a6:18:f5:91:fe:
45:08:b5:71:7d:71:7d:e6:f5:42:8e:46:bb:50:1c:
9b:ef:01:ba:bf:c6:26:1c:9a:b3:76:a4:3b:3b:a1:
7c:4a:ad:2d:0f:81:6b:e6:b8:82:04:cb:82:79:f4:
31:a9:36:26:cb:ab:89:3d:df:12:87:04:a1:1c:8e:
7a:2f:0c:57:b3:4c:df:27:1b:90:0a:79:86:36:ff:
1e:49:45:b1:67:28:3f:02:f2:d0:eb:56:2d:af:02:
5e:be:4e:93:8c:61:3c:d2:96:7c:de:11:5e:6d:d1:
04:9e:a0:c1:d0:58:4a:2f:ea:6c:e8:6d:28:a8:ed:
22:5b:3c:26:10:81:ca:f5:25:30:87:30:f0:e3:b2:
3c:1e:91:83:2f:51:a8:5f:b1:c8:57:a1:e9:8f:4c:
cc:79:5a:2d:14:e9:8d:97:9a:31:7f:62:0a:12:15:
b7:b8:b2:66:2d:d2:85:0a:dd:a3:27:71:4b:71:b1:
26:f5:ab:d5:64:24:20:73:20:e8:ea:05:80:e3:37:
c6:de:0a:6b:5d:90:35:5d:ce:09:a9:1d:ec:16:da:
e7:7a:8a:cc:bc:d5:7b:a7:96:55:95:58:c6:7e:23:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EB:B2:81:F1:B9:72:80:30:FC:68:3E:FD:8A:E5:E1:42:DD:F2:75
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:79:f9:82:9e:a6:29:28:cb:30:e7:f1:d6:27:29:e3:61:
1d:4f:fa:ab:ac:1e:62:25:8a:bf:20:53:bd:70:9c:af:a1:f4:
cf:b2:83:9a:61:83:e5:28:81:f5:f3:26:75:71:f5:04:6f:c6:
aa:57:54:9a:87:78:d4:06:4c:7c:2f:15:14:9a:13:28:c7:9d:
c5:a8:c8:23:0b:79:51:4e:f0:b1:a6:df:c5:d1:49:46:94:c3:
c3:1b:09:6d:81:39:09:96:cf:a5:6c:8a:53:7f:24:28:7e:34:
95:98:c3:78:be:64:57:6c:e7:51:06:98:8f:7f:21:3e:97:46:
9f:f6:29:06:dc:f8:5a:96:63:a4:4f:b1:89:c8:45:cb:46:46:
5d:38:8e:54:36:a9:ec:f2:1b:3f:84:4b:16:58:42:f0:16:db:
1b:c4:d1:a8:de:67:e0:05:fd:93:c0:69:05:db:9e:62:70:e7:
21:41:20:81:40:4e:bf:c9:19:8d:b2:a5:84:49:fe:8a:21:b2:
40:38:9e:13:7d:62:c3:41:6c:58:93:37:5a:2c:5e:73:da:f0:
9e:63:88:59:bc:d6:c2:74:c0:89:da:f8:01:5d:cc:a7:6c:65:
8e:53:b1:76:fb:43:d5:d9:75:c1:91:01:ab:c0:a3:f0:28:89:
8f:75:35:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI96oIlfoHyCHvQh54GDmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk
OWE5YTAwHhcNMjUwNzI2MjMwMDQ3WhcNMjUwNzI3MjMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NmViYjI4MWYxYjk3MjgwMzBmYzY4M2VmZDhhZTVlMTQyZGRmMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjRe5NxHD5QCEf9IUdtTLGO1xNVu
d4r0phj1kf5FCLVxfXF95vVCjka7UByb7wG6v8YmHJqzdqQ7O6F8Sq0tD4Fr5riC
BMuCefQxqTYmy6uJPd8ShwShHI56LwxXs0zfJxuQCnmGNv8eSUWxZyg/AvLQ61Yt
rwJevk6TjGE80pZ83hFebdEEnqDB0FhKL+ps6G0oqO0iWzwmEIHK9SUwhzDw47I8
HpGDL1GoX7HIV6Hpj0zMeVotFOmNl5oxf2IKEhW3uLJmLdKFCt2jJ3FLcbEm9avV
ZCQgcyDo6gWA4zfG3gprXZA1Xc4JqR3sFtrneorMvNV7p5ZVlVjGfiMkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbrsoHxuXKAMPxoPv2K5eFC3fJ1MB8GA1UdIwQY
MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt
YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj
LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7Z5+YKe
pikoyzDn8dYnKeNhHU/6q6weYiWKvyBTvXCcr6H0z7KDmmGD5SiB9fMmdXH1BG/G
qldUmod41AZMfC8VFJoTKMedxajIIwt5UU7wsabfxdFJRpTDwxsJbYE5CZbPpWyK
U38kKH40lZjDeL5kV2znUQaYj38hPpdGn/YpBtz4WpZjpE+xichFy0ZGXTiOVDap
7PIbP4RLFlhC8BbbG8TRqN5n4AX9k8BpBdueYnDnIUEggUBOv8kZjbKlhEn+iiGy
QDieE31iw0FsWJM3Wixec9rwnmOIWbzWwnTAidr4AV3Mp2xljlOxdvtD1dl1wZEB
q8Cj8CiJj3U1ig==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:08 2025 by rpki-client