Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: ttlaE5Ozvq9gs923az2kDCPylqRW72e0YnKAixVQjmE=
Subject key identifier: BE:83:0E:CF:B9:F1:0D:6C:41:88:96:8D:1C:75:FF:31:31:BF:35:C1
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019927B2A664AAD6723C14E381A093DEEFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 04C5
Signing time: Mon 08 Sep 2025 05:00:43 +0000
Manifest this update: Mon 08 Sep 2025 05:00:43 +0000
Manifest next update: Tue 09 Sep 2025 05:00:43 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: zFGtuLOp0QrnS3kT+HYFGqp2NPfVYQxmDZdoJ1tfqVg=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:a6:64:aa:d6:72:3c:14:e3:81:a0:93:de:ef:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Sep 8 05:00:43 2025 GMT
Not After : Sep 9 05:00:43 2025 GMT
Subject: CN=be830ecfb9f10d6c4188968d1c75ff3131bf35c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:18:1b:36:cb:a8:0d:85:9d:4b:79:6b:da:
f9:42:be:1d:11:b9:92:65:a7:98:a7:63:c1:36:87:
3a:c1:4b:0e:3d:9f:7f:d5:ca:38:48:8b:83:af:71:
f6:ae:56:df:fa:21:6f:17:73:73:78:75:9b:a7:65:
a7:78:38:36:02:ab:6b:52:19:f2:ea:c7:d0:48:41:
04:78:71:61:bc:f6:93:3a:12:31:17:a8:f9:f8:e7:
a0:73:92:1f:18:6c:80:cb:90:e4:69:dd:45:db:9b:
02:d9:f0:2b:63:96:eb:e2:fb:e6:71:62:5d:14:5f:
57:63:04:89:3f:21:62:5f:9e:ad:64:8c:bd:f4:28:
35:b4:60:0b:a3:b9:50:69:ee:84:e0:b1:03:f2:db:
58:0a:4e:8d:5f:e4:76:74:3c:e8:1f:7e:a0:07:30:
91:d1:ca:de:ba:51:12:59:40:3c:39:95:52:68:a5:
75:a8:12:fb:d4:35:96:d9:1a:c1:7b:14:ec:69:d8:
71:4e:4b:01:6a:4d:dd:8c:db:77:9b:fc:73:17:bf:
84:e8:d2:3c:24:15:29:de:a7:bb:5d:59:8c:8a:51:
b6:d6:2d:4f:d5:79:a0:46:27:62:79:11:02:bb:f5:
36:f3:fd:a2:67:4e:5a:51:a7:b8:45:76:ce:a9:61:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:0E:CF:B9:F1:0D:6C:41:88:96:8D:1C:75:FF:31:31:BF:35:C1
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:14:95:7d:7c:71:a7:2d:b1:38:9d:c1:a6:84:49:4c:f5:02:
de:90:0a:e2:25:5e:1f:31:4d:89:a2:08:94:e5:db:88:1e:6e:
ec:c1:54:a5:a0:84:e3:81:6b:14:06:05:33:b0:0d:11:40:7b:
32:5e:64:a0:fd:ea:72:d4:50:f2:51:b4:61:86:0f:31:9a:de:
1f:6d:a4:b6:9c:73:47:f1:ee:2f:9e:b6:36:de:78:22:fc:19:
2d:73:9e:65:1f:2d:35:32:9c:7a:1a:cc:bf:78:35:9e:ec:f1:
2c:02:d7:58:5c:a5:d5:38:ff:eb:cf:db:45:19:67:ed:8f:18:
84:2a:32:2f:3f:07:e9:42:66:d9:8b:88:4b:f5:09:33:16:38:
75:57:c8:d2:8b:a8:07:d4:4e:f4:f3:d7:24:4c:4a:d5:c6:55:
a3:81:f1:3a:8d:19:88:f7:ef:ed:4a:7d:89:19:d5:90:99:18:
94:22:9f:56:f6:be:d3:56:e2:d1:8a:ad:26:9c:03:78:8f:d2:
94:b6:5d:43:26:d5:91:ab:55:2c:dc:4f:7c:db:e2:8d:79:17:
11:91:5d:c1:9b:f4:a8:0c:2a:31:21:4e:bc:f8:d9:4d:1f:d2:
ef:4d:40:03:f4:2d:d6:6e:42:cd:2f:7d:5f:41:58:f1:24:14:
fb:86:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:00 2025 by rpki-client