Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: l+5oSOmLQH9N/u9Fs14J66559HmsGAz7CMsN92IY1Ws=
Subject key identifier: 98:7A:5F:A5:1C:39:4D:9A:05:40:CB:9F:58:F5:97:6B:F5:C9:FA:F6
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019A7149A10F9D43827D06E2FFB73B743AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0E46
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: BRqfphLEQx7IKRJPex3PFVapycxJJU4wvnRmrAmieRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a1:0f:9d:43:82:7d:06:e2:ff:b7:3b:74:3a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=987a5fa51c394d9a0540cb9f58f5976bf5c9faf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:d3:d4:2f:9f:1f:ee:55:98:30:7d:13:c3:
9e:b2:55:82:01:27:83:ba:24:2b:99:4c:5e:d7:86:
15:cb:d8:5e:e0:7a:86:50:31:e9:f0:e6:ea:53:59:
43:6c:4e:7f:2d:03:b2:12:b4:a3:ef:e1:a0:07:91:
c0:35:41:29:e0:20:40:ce:cd:f4:62:14:26:0f:07:
31:a7:b8:cc:d3:e7:e8:2e:73:a6:33:bc:77:7d:34:
ae:7a:a1:da:fe:fd:56:20:78:4e:44:96:7a:9b:35:
a9:30:17:b5:08:a5:96:e8:55:85:9b:c4:27:8b:a4:
d1:1c:9a:4f:5c:73:18:69:25:ea:69:eb:e3:71:67:
db:bb:da:f0:a5:bd:78:e0:33:a5:93:88:5d:29:83:
08:24:6a:51:68:71:21:3b:f2:c8:2b:ad:9f:96:83:
47:6d:aa:87:0e:1b:57:c8:b0:54:0c:8c:55:ab:aa:
a9:92:78:01:3e:37:6e:22:37:26:d0:b9:b8:82:21:
cd:f9:67:a6:19:be:41:04:71:c0:e2:68:50:94:75:
0d:11:62:66:72:48:ba:1f:1c:cd:f1:36:97:a2:a8:
45:4a:58:5b:25:2c:33:57:cc:0b:75:69:5a:2a:11:
60:14:8d:60:88:d6:93:21:08:d0:81:18:c8:07:d8:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7A:5F:A5:1C:39:4D:9A:05:40:CB:9F:58:F5:97:6B:F5:C9:FA:F6
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:5a:04:3e:71:51:08:cf:b0:dc:45:4f:50:b6:8e:c0:33:
3f:60:f8:68:63:1b:ef:cf:da:4c:85:90:3d:39:84:d3:46:89:
d6:15:b2:aa:3c:68:de:78:b8:0b:e3:9b:4e:be:56:ac:b8:2b:
77:32:4f:b3:66:87:a1:44:55:f1:9c:ab:86:24:66:ec:db:5a:
e1:20:1e:cc:72:07:83:c8:06:3b:b5:87:37:fe:2c:60:78:79:
a2:42:85:af:b2:d3:f9:37:72:e0:87:09:b8:7d:53:61:20:23:
e3:ed:6f:80:51:c9:fb:22:dd:05:8e:63:da:3c:44:33:61:66:
72:ef:0a:80:c0:d4:c0:52:80:30:96:d8:4d:11:8b:19:b6:24:
5d:93:db:a9:c4:03:b8:51:a9:01:61:a6:cb:61:29:2b:4d:38:
44:37:ba:f1:6f:b0:de:fa:99:b8:b9:a3:bb:1a:15:d6:ca:01:
9c:db:a4:5a:74:43:43:69:ba:e9:1b:0c:32:6c:2a:af:06:1f:
7e:ca:cf:dc:04:21:f0:6d:74:aa:45:aa:4b:b8:7b:9e:83:ef:
2b:91:73:cf:6c:c0:7e:fc:47:57:da:7a:58:f3:6a:7f:25:80:
c5:ad:e2:a9:b2:38:a1:0e:b9:69:eb:50:58:59:ef:94:6a:39:
8b:de:bb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaEPnUOCfQbi/7c7dDrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk
OWE5YTAwHhcNMjUxMTExMDUwMDQyWhcNMjUxMTEyMDUwMDQyWjAzMTEwLwYDVQQD
Eyg5ODdhNWZhNTFjMzk0ZDlhMDU0MGNiOWY1OGY1OTc2YmY1YzlmYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TrT1C+fH+5VmDB9E8OeslWCASeD
uiQrmUxe14YVy9he4HqGUDHp8ObqU1lDbE5/LQOyErSj7+GgB5HANUEp4CBAzs30
YhQmDwcxp7jM0+foLnOmM7x3fTSueqHa/v1WIHhORJZ6mzWpMBe1CKWW6FWFm8Qn
i6TRHJpPXHMYaSXqaevjcWfbu9rwpb144DOlk4hdKYMIJGpRaHEhO/LIK62floNH
baqHDhtXyLBUDIxVq6qpkngBPjduIjcm0Lm4giHN+WemGb5BBHHA4mhQlHUNEWJm
cki6HxzN8TaXoqhFSlhbJSwzV8wLdWlaKhFgFI1giNaTIQjQgRjIB9iRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh6X6UcOU2aBUDLn1j1l2v1yfr2MB8GA1UdIwQY
MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt
YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj
LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9laBD5x
UQjPsNxFT1C2jsAzP2D4aGMb78/aTIWQPTmE00aJ1hWyqjxo3ni4C+ObTr5WrLgr
dzJPs2aHoURV8ZyrhiRm7Nta4SAezHIHg8gGO7WHN/4sYHh5okKFr7LT+Tdy4IcJ
uH1TYSAj4+1vgFHJ+yLdBY5j2jxEM2Fmcu8KgMDUwFKAMJbYTRGLGbYkXZPbqcQD
uFGpAWGmy2EpK004RDe68W+w3vqZuLmjuxoV1soBnNukWnRDQ2m66RsMMmwqrwYf
fsrP3AQh8G10qkWqS7h7noPvK5Fzz2zAfvxHV9p6WPNqfyWAxa3iqbI4oQ65aetQ
WFnvlGo5i9670Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:16 2025 by rpki-client