Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: AC67MVPP+J7KLC02LEENMRwRbCP6jV7/Ur4w3ikB0FM=
Subject key identifier: 67:AD:22:A3:B0:87:A9:CD:F3:39:D7:35:AF:1D:B3:DF:90:30:39:9C
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 0196556EC28119AF72125C9D1063B53045E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 034F
Signing time: Sun 20 Apr 2025 23:00:44 +0000
Manifest this update: Sun 20 Apr 2025 23:00:44 +0000
Manifest next update: Mon 21 Apr 2025 23:00:44 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 7Nsrt/Gw6cblyytuZb3Q41MUcZ/kUCLjLelonOFDo8g=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c2:81:19:af:72:12:5c:9d:10:63:b5:30:45:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Apr 20 23:00:44 2025 GMT
Not After : Apr 21 23:00:44 2025 GMT
Subject: CN=67ad22a3b087a9cdf339d735af1db3df9030399c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:3d:58:e8:c0:27:6c:b3:72:2b:41:32:09:
f3:9a:15:fa:91:6d:ca:3f:3a:90:58:04:10:e5:f8:
a9:55:3d:3a:81:3d:68:0a:92:00:d1:c2:33:be:92:
30:72:14:9a:19:2c:62:2b:52:82:47:5e:6d:67:df:
14:bf:9d:6a:87:77:3b:37:f6:94:23:e3:ec:fb:8c:
14:32:be:7b:e8:28:3e:7a:78:33:bf:e8:61:a0:3c:
10:34:ea:b4:9c:a7:dc:7f:50:a4:ab:31:6e:e9:d3:
8a:a0:9a:e7:56:e9:e4:ea:87:6f:f5:d3:b8:3e:39:
1f:7d:f5:89:33:bd:44:7e:74:39:3e:1b:27:d6:21:
67:b2:86:fb:f2:d0:94:e0:bd:a3:9e:bc:e1:a6:a5:
75:00:c1:41:5a:b9:24:66:5f:48:0c:f4:f5:27:ac:
53:65:7e:ab:9c:b4:8b:4f:53:2e:86:8d:cb:0a:56:
39:a5:97:5f:27:be:38:aa:8e:5f:b9:20:0e:67:b1:
f5:53:ea:c6:9d:fa:e7:3f:ab:a6:5b:36:72:e8:7b:
2d:17:c5:b7:04:11:dd:18:9f:4f:8e:36:1f:2d:f8:
51:d7:ef:03:eb:f6:84:8e:53:16:71:80:c3:a6:ed:
ca:9e:a1:4c:62:48:16:5b:84:de:f7:ff:4c:9e:4c:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:22:A3:B0:87:A9:CD:F3:39:D7:35:AF:1D:B3:DF:90:30:39:9C
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4e:4f:37:86:eb:95:cc:e4:00:d1:a1:c7:39:c5:7b:8a:ee:
f1:ab:d6:be:8e:b3:8c:00:f2:e4:ee:05:1b:58:da:98:38:36:
13:41:bd:aa:b8:39:3a:4e:53:09:86:27:e5:14:0a:ab:6f:b8:
10:fc:4a:be:d1:5c:9a:b5:56:45:18:8e:a3:5c:66:e9:b4:af:
ef:c2:20:7d:95:73:1b:25:30:97:e6:80:21:46:a0:18:62:b9:
1e:d4:c2:e8:c8:40:60:c3:02:4b:a7:da:1f:66:79:44:4c:96:
59:b7:b9:62:ce:3e:08:6c:53:29:c1:19:93:36:59:db:ff:df:
33:0d:26:a5:c1:eb:2b:4c:73:af:fa:8e:8a:61:2a:ad:8e:00:
49:09:3d:66:66:19:3d:59:ee:02:f4:05:6a:f2:86:d4:fd:48:
70:b8:cd:e2:39:9a:03:9e:43:87:81:97:d5:0f:a8:38:2a:ca:
53:5c:2d:b4:f6:7b:db:96:2b:9e:dd:d4:48:fe:41:fc:ee:2b:
c1:d7:a1:69:aa:58:f7:db:c8:fd:af:45:2d:6a:91:90:46:ec:
f5:a9:f6:9f:72:75:1a:f2:e8:8d:f9:c8:e5:54:69:fb:51:bc:
03:78:96:43:e2:85:e3:37:22:12:a1:46:2a:0c:34:25:1e:e5:
2b:45:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:37 2025 by rpki-client