Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: Qlk6V6OccsePW5Nhpeb18STRHtLGFDnm47kdKB5LorA=
Subject key identifier: 5E:D7:9C:C7:BB:6F:C3:28:FD:B4:1E:B4:06:B0:EE:78:AF:18:75:DF
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019510FE0E7A14E7761C3283DB635482CC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 02A7
Signing time: Sun 16 Feb 2025 23:00:39 +0000
Manifest this update: Sun 16 Feb 2025 23:00:39 +0000
Manifest next update: Mon 17 Feb 2025 23:00:39 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 2I5EE8VSm8LUf+4rLmfU7rOJX4aQXipyGjrSVuJR2og=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0e:7a:14:e7:76:1c:32:83:db:63:54:82:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Feb 16 23:00:39 2025 GMT
Not After : Feb 17 23:00:39 2025 GMT
Subject: CN=5ed79cc7bb6fc328fdb41eb406b0ee78af1875df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:65:80:af:75:e3:7b:fd:68:7f:fa:b7:e6:
03:29:90:f2:16:4e:b6:a9:5e:17:36:8e:e2:9a:32:
ca:3c:6b:4a:8b:f0:6f:00:bc:21:21:19:19:bf:2e:
24:1d:dc:15:f1:d5:7a:ba:a0:59:2c:f4:51:20:93:
6f:3b:66:d1:0f:61:1f:19:18:14:89:ca:25:df:50:
77:96:2e:4b:65:7d:cf:9f:19:e7:b7:69:c6:2f:8a:
ff:67:e9:99:01:fb:79:12:51:a5:73:48:3c:80:00:
6d:50:e9:f7:00:3a:84:b1:8b:17:5f:4e:64:20:fd:
f1:98:7a:64:df:49:9a:3c:eb:fb:53:bb:7a:2e:96:
56:72:5a:60:0a:c2:33:fe:41:0d:1a:e1:40:1b:71:
98:a1:c9:1f:17:4e:e1:01:7d:e7:fd:01:07:5f:0b:
d4:dd:16:86:d5:76:91:93:52:69:0f:6f:3d:ac:61:
69:e7:ca:9b:e1:d2:b9:7f:39:c7:c6:1f:0a:b7:d9:
68:61:5f:af:8d:78:fb:ea:3a:1e:e8:3c:85:76:ae:
a9:86:0d:21:f3:2e:c0:da:c2:a6:c9:05:60:2d:82:
87:e7:7c:e0:0e:81:dd:33:a4:78:e0:0f:08:3a:08:
b5:da:1b:95:da:13:58:2c:f8:25:12:83:1e:de:6a:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D7:9C:C7:BB:6F:C3:28:FD:B4:1E:B4:06:B0:EE:78:AF:18:75:DF
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:90:db:ec:8d:32:c7:44:e8:57:ca:b2:88:73:e0:72:fa:26:
42:ae:69:87:19:c3:c9:1c:ad:17:a5:75:60:a9:c1:d4:97:ab:
b8:27:35:12:2a:cc:78:c7:85:cd:60:22:d0:a4:c4:85:b4:df:
e9:e0:0d:66:ed:8b:a4:61:c1:f0:a9:61:f6:1e:1f:da:c2:13:
1b:d6:59:7d:dc:fc:df:49:b0:86:4b:2c:4f:00:d0:7a:35:ee:
75:3f:84:31:82:db:59:d0:b3:fa:55:67:d5:88:3d:7e:4d:f9:
23:6a:bb:b9:58:73:bf:a0:20:09:64:0c:24:25:26:26:10:5e:
ab:4a:d3:7b:02:3b:61:b4:71:34:03:5b:24:f3:b6:f5:9f:55:
75:ad:62:d5:91:9e:cb:e1:7f:e5:7f:47:a4:8c:09:4b:2d:af:
a3:8c:0d:90:83:92:e7:e9:ee:67:18:6d:28:d4:41:e8:a4:8a:
bd:14:31:15:d5:17:0f:cc:2f:ce:cc:80:dc:10:91:70:57:31:
a7:aa:93:03:f9:16:f9:2e:af:c6:2e:44:ab:77:9c:7a:1a:4e:
09:92:a4:3e:4a:d1:83:4b:3c:68:7c:ab:dd:69:51:7e:f1:b0:
f6:7a:0c:60:90:1d:18:35:dd:64:92:62:f2:06:74:de:5d:27:
44:f2:c9:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/g56FOd2HDKD22NUgswKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjUwMjE2MjMwMDM5WhcNMjUwMjE3MjMwMDM5WjAzMTEwLwYDVQQD
Eyg1ZWQ3OWNjN2JiNmZjMzI4ZmRiNDFlYjQwNmIwZWU3OGFmMTg3NWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWxlgK9143v9aH/6t+YDKZDyFk62
qV4XNo7imjLKPGtKi/BvALwhIRkZvy4kHdwV8dV6uqBZLPRRIJNvO2bRD2EfGRgU
icol31B3li5LZX3Pnxnnt2nGL4r/Z+mZAft5ElGlc0g8gABtUOn3ADqEsYsXX05k
IP3xmHpk30maPOv7U7t6LpZWclpgCsIz/kENGuFAG3GYockfF07hAX3n/QEHXwvU
3RaG1XaRk1JpD289rGFp58qb4dK5fznHxh8Kt9loYV+vjXj76joe6DyFdq6phg0h
8y7A2sKmyQVgLYKH53zgDoHdM6R44A8IOgi12huV2hNYLPglEoMe3mpT2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7XnMe7b8Mo/bQetAaw7nivGHXfMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4JDb7I0y
x0ToV8qyiHPgcvomQq5phxnDyRytF6V1YKnB1JeruCc1EirMeMeFzWAi0KTEhbTf
6eANZu2LpGHB8Klh9h4f2sITG9ZZfdz830mwhkssTwDQejXudT+EMYLbWdCz+lVn
1Yg9fk35I2q7uVhzv6AgCWQMJCUmJhBeq0rTewI7YbRxNANbJPO29Z9Vda1i1ZGe
y+F/5X9HpIwJSy2vo4wNkIOS5+nuZxhtKNRB6KSKvRQxFdUXD8wvzsyA3BCRcFcx
p6qTA/kW+S6vxi5Eq3ecehpOCZKkPkrRg0s8aHyr3WlRfvGw9noMYJAdGDXdZJJi
8gZ03l0nRPLJCw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:17 2025 by rpki-client