Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: Ufsmfk9QJZktQyOJeaA0IoY+YUHy02YjQ/qbANu9Pu4=
Subject key identifier: 5F:18:AA:85:22:A6:89:02:7D:42:68:82:46:24:05:AD:99:CD:5C:EC
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 01976997E38AB5C54082134D4EFBD30224D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 03DE
Signing time: Fri 13 Jun 2025 14:00:51 +0000
Manifest this update: Fri 13 Jun 2025 14:00:51 +0000
Manifest next update: Sat 14 Jun 2025 14:00:51 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: cfNQ01YmRMH6UHJ6+AbJdW+GlFB5Em9rWdOtt5QtR34=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:e3:8a:b5:c5:40:82:13:4d:4e:fb:d3:02:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Jun 13 14:00:51 2025 GMT
Not After : Jun 14 14:00:51 2025 GMT
Subject: CN=5f18aa8522a689027d426882462405ad99cd5cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:22:85:bd:ee:14:8a:be:d6:70:ec:33:96:
0f:99:86:c3:fc:ab:73:c6:92:0a:e2:e1:c5:c4:8e:
83:21:08:d4:5f:49:65:bf:82:df:21:cf:03:0f:36:
ac:a3:01:fd:0d:84:b4:aa:84:d5:31:59:3b:07:6d:
ca:65:58:f8:39:3d:5d:57:12:34:2a:d8:47:52:25:
28:43:54:f3:af:b1:d4:b4:42:da:41:87:a1:d4:d0:
43:dd:fc:b0:f6:b6:fe:21:d6:f8:30:81:50:36:8d:
3a:6b:ca:70:c7:38:cb:d5:69:65:d7:34:3f:db:41:
60:35:68:82:75:27:8c:f1:4a:1a:79:17:e1:7c:26:
1e:14:fe:4e:79:51:54:06:ed:4e:69:d9:d1:f9:00:
f2:1b:67:b4:ef:24:5d:fb:98:fe:a1:39:59:fa:0e:
2d:d7:f1:73:8b:ee:fd:22:fa:84:2b:a3:a0:19:47:
fe:cd:23:e8:33:1a:05:d2:26:3e:21:22:ad:16:45:
e8:a6:26:b1:96:f9:a7:c1:99:ea:87:a9:ce:40:cc:
15:1f:b7:e0:4e:cb:18:8a:bf:f0:55:3c:4d:b5:f5:
2c:3e:28:88:c9:ab:8a:64:e1:a7:83:bd:ea:ef:82:
57:e0:ce:e2:07:21:38:31:b0:f7:c3:a2:cf:56:86:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:18:AA:85:22:A6:89:02:7D:42:68:82:46:24:05:AD:99:CD:5C:EC
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a2:7e:12:ec:7a:86:c5:4b:8d:9f:e6:36:71:e9:dc:a0:c5:
14:19:a7:b8:1f:87:43:86:01:4e:88:9a:8c:3a:c9:d3:78:24:
75:52:dd:c8:e1:b9:d8:fe:ae:9d:79:73:21:77:7f:e2:d1:6d:
7d:9b:e2:29:b6:41:47:6a:5c:d1:a9:17:b4:23:55:af:66:80:
fa:47:32:3f:ef:73:33:a7:c3:65:c9:57:59:d2:a9:95:8c:72:
37:15:c5:fe:9b:cc:78:75:9e:7b:e9:d7:86:31:ec:6c:4e:83:
ba:8d:3f:d3:52:64:0f:ac:a4:55:7d:0b:54:43:5a:db:f9:66:
d7:14:c7:23:66:10:dd:01:32:70:e2:c3:41:17:1f:d2:c7:fb:
05:a1:72:a5:45:34:b7:2e:60:8b:b7:bc:18:e9:99:0a:36:bd:
0a:3a:a6:7e:90:85:88:fc:69:fd:9a:bc:7c:ba:6c:aa:b4:8e:
76:ca:67:57:32:c8:e2:17:3a:6f:0e:c1:e8:a1:f1:ab:af:b4:
db:00:30:62:3b:b0:41:09:40:c6:b0:ab:1a:cd:2e:87:09:3f:
3b:79:1d:a8:05:da:f8:99:52:a9:e2:ef:cd:08:90:9c:c9:7a:
d3:75:65:9e:86:c6:12:46:26:f2:c8:64:04:07:d0:c0:98:ac:
c9:98:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:44 2025 by rpki-client