Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: QDgI97+/o2c/QqeLDnnGn1HDRQQURNl8XTjcL8pPOIY=
Subject key identifier: CC:AD:30:9F:CF:04:86:F8:10:FC:DE:D6:2B:8E:8A:BC:94:1F:7E:E6
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019A71EE9B6E4C572DCE1E439D52217DBA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0570
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 0mve5hpZDSIKIM5M9ml5e4gFmLLxfGwXjS8Myibsiog=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9b:6e:4c:57:2d:ce:1e:43:9d:52:21:7d:ba:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=ccad309fcf0486f810fcded62b8e8abc941f7ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:f0:c6:68:3f:89:0a:bc:88:0e:2e:78:b4:
ce:d4:3d:59:c7:29:37:b2:3b:da:6f:98:ba:21:d8:
29:a2:d2:cd:b4:70:18:09:53:57:d8:cf:9f:ec:65:
49:63:44:ef:4c:3c:df:42:73:a1:ba:87:f7:bd:73:
8f:9b:1e:1b:11:e9:27:5a:cb:0b:3a:3d:4e:98:63:
5c:3e:f0:0d:8e:ca:03:31:f0:b9:f3:29:c2:63:f6:
82:1d:6a:bd:af:55:d8:90:15:28:20:33:b4:5e:6c:
d4:a5:8c:92:36:5e:9d:4d:af:e6:31:8e:7e:09:98:
da:95:73:d7:83:c2:14:ba:b5:62:06:94:9b:d3:dd:
b5:97:0b:55:10:b3:55:76:23:20:68:4a:41:bc:17:
ef:92:ce:2b:af:5d:da:62:48:67:67:0a:30:c7:4a:
d1:44:d4:2e:22:ff:62:7b:4e:27:e6:b2:6e:2a:05:
9c:c7:41:1a:e9:38:25:0e:fa:d5:58:09:af:0f:3a:
3e:1b:83:7a:4e:3a:76:6f:b5:28:d6:5c:b1:e0:3b:
1a:30:46:46:02:f8:69:b4:de:7d:de:9a:f2:31:0b:
99:d4:8f:90:29:8e:11:23:f6:9e:e3:56:06:eb:81:
70:e1:df:52:4c:2f:84:ca:48:6b:36:db:1f:2b:de:
0b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AD:30:9F:CF:04:86:F8:10:FC:DE:D6:2B:8E:8A:BC:94:1F:7E:E6
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2c:86:43:01:61:41:51:dd:a2:90:b8:fd:9a:3a:83:a6:ec:
41:18:7c:d1:b4:78:43:aa:f5:eb:4d:48:93:b9:ea:41:3c:22:
b9:24:d6:49:30:da:4f:7a:83:03:40:77:8e:e2:66:ce:51:26:
62:c0:25:cc:01:66:cb:32:5e:d1:63:9b:ef:ce:24:16:8e:3f:
52:16:54:d8:30:0c:ee:fb:c1:94:12:95:d1:16:e5:b8:7b:a6:
a8:a0:5c:2a:8b:d9:39:5c:11:50:9f:bc:ce:35:3f:c0:3a:4a:
a1:65:85:5e:5f:5b:88:83:2f:61:b9:7a:b5:52:d5:f3:36:c6:
c5:e8:c1:47:62:61:5b:bb:c5:34:88:a8:c1:6c:4a:55:69:0b:
90:29:e1:65:56:e3:59:4c:0f:da:7d:a2:39:9c:45:df:6d:35:
1f:6f:80:13:bf:22:9e:5c:32:f1:43:15:03:4e:08:26:62:4d:
5e:79:3a:de:0f:95:8d:47:3d:09:c5:14:ef:0a:c3:dd:d3:0b:
ab:95:59:0b:e1:4b:78:f8:c7:7f:4c:3f:e4:29:fd:e7:e1:55:
b7:aa:7b:6c:cf:bf:6c:e0:a6:b5:43:a7:02:be:9c:64:e8:11:
da:c0:9e:3f:8b:2d:7c:70:16:d2:ac:2f:c6:81:6f:30:4c:28:
6c:c5:b6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client