Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: qHCYkgeuPsQ8mGszlCA94d2Uawesk/iuhWlqC7hZXIQ=
Subject key identifier: 84:72:35:E8:E9:A2:A0:AE:A6:A3:A3:81:0E:9B:90:A7:C9:4A:32:D4
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01987DC0A6AE0D904BD9FAF2F4BFBDCF46CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 046D
Signing time: Wed 06 Aug 2025 05:00:34 +0000
Manifest this update: Wed 06 Aug 2025 05:00:34 +0000
Manifest next update: Thu 07 Aug 2025 05:00:34 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 793GAasjNcuwLS60uWTzaeAuEhgdqGSu9JwNBEyhUJE=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:a6:ae:0d:90:4b:d9:fa:f2:f4:bf:bd:cf:46:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Aug 6 05:00:34 2025 GMT
Not After : Aug 7 05:00:34 2025 GMT
Subject: CN=847235e8e9a2a0aea6a3a3810e9b90a7c94a32d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:87:8d:33:09:76:60:e0:48:c3:e5:c8:6a:
8f:b5:2a:70:12:20:9e:7b:16:da:f7:45:d4:c9:9c:
cf:61:c0:a8:2f:27:93:1d:21:5e:b1:d0:af:d6:5f:
37:c9:19:65:a9:32:28:6d:64:18:7e:c8:43:dc:7b:
5d:b3:a3:c4:44:8a:d8:51:12:cb:f9:0d:d6:57:98:
9e:2c:ec:14:49:e9:50:6d:1a:4f:76:67:31:f3:e9:
ad:31:dc:e1:31:29:eb:63:b5:99:89:bc:02:16:84:
6a:05:42:bb:41:0e:ca:bb:5f:70:f7:ca:18:9e:da:
6a:db:ef:68:a8:0c:17:30:03:56:ce:20:14:8d:92:
3b:a6:26:94:b4:3b:9a:89:fa:c3:ca:a2:48:e6:9c:
de:3f:93:50:1c:2d:72:b3:a4:2e:39:07:cf:b1:8f:
88:58:a8:8e:c9:73:a7:06:ff:b1:10:56:52:69:3b:
cc:0b:74:ee:fa:72:16:27:c0:f3:ab:e3:fc:e8:99:
26:49:af:da:aa:07:59:55:c1:be:a4:d1:ab:6b:23:
5c:ad:b7:04:81:1d:c9:7a:ed:ce:da:cf:f2:56:7c:
ed:7b:3f:26:5e:55:67:97:b7:99:68:5a:3a:a9:ea:
c0:0a:16:b9:23:f9:37:d9:aa:2d:d3:b6:ea:1c:b1:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:35:E8:E9:A2:A0:AE:A6:A3:A3:81:0E:9B:90:A7:C9:4A:32:D4
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:6c:9c:90:cc:60:c2:69:25:6e:d6:a8:57:62:45:c8:d3:
1b:a7:ac:d9:8e:f7:0a:64:5f:e6:c7:a2:8f:a0:c4:b4:4e:52:
64:95:9d:b5:1d:60:2d:9e:85:59:98:20:db:06:af:47:48:1f:
ce:69:09:eb:fc:5e:4c:59:51:66:e8:4f:a8:5c:6f:17:0b:e9:
6e:21:5e:f2:e2:eb:41:f8:ef:bb:76:0b:93:62:76:3a:5a:e2:
db:66:92:f4:33:36:ac:53:87:8c:8d:5e:5f:8e:0c:22:44:c4:
df:a6:d5:1a:7a:50:5a:28:c2:9c:9a:40:46:66:96:aa:8b:58:
5a:f4:11:dd:dc:77:0b:68:14:ef:c2:fa:79:84:1f:f5:f0:84:
0e:51:e2:dd:d5:57:51:15:43:7a:14:a1:a0:68:4e:ef:b2:a8:
ed:44:c9:cb:47:ca:9e:ce:dd:74:a2:c4:ee:49:fa:69:89:0b:
d2:d3:a5:7f:3d:99:6a:e1:0b:65:36:4a:01:06:68:9f:4d:09:
ec:44:07:9e:18:70:25:37:90:4f:3b:ef:4a:07:48:75:97:23:
91:ce:41:ab:24:d7:e6:08:75:ab:e6:c4:14:a0:15:7e:b5:28:
1a:12:d3:45:09:2f:95:42:e4:5a:bb:12:37:6a:09:83:6d:43:
7d:d5:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:45:36 2025 by rpki-client