Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: 7E0pfnhCbMP7eWf8E2hxsd8rJOcI80E7C6/0gDlBqMg=
Subject key identifier: D4:0D:81:96:53:39:4F:A0:44:7C:C0:5A:F1:68:E6:08:D6:88:56:D5
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019A5119B56F2BA3DE8C1A53F4B680095DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 055F
Signing time: Tue 04 Nov 2025 23:00:30 +0000
Manifest this update: Tue 04 Nov 2025 23:00:30 +0000
Manifest next update: Wed 05 Nov 2025 23:00:30 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: 2jKlsgDQm0BVBbMBaLLi+XCI1sLKF8hkFPcTlidL8mw=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:b5:6f:2b:a3:de:8c:1a:53:f4:b6:80:09:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Nov 4 23:00:30 2025 GMT
Not After : Nov 5 23:00:30 2025 GMT
Subject: CN=d40d819653394fa0447cc05af168e608d68856d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:97:26:a6:e3:e9:33:6f:64:09:d5:e0:24:
60:16:3b:5c:41:62:ff:46:30:e4:b4:84:15:ad:67:
bf:45:f0:a0:e6:4e:fa:c3:d9:89:cb:bf:76:79:cf:
97:75:ac:00:ba:63:76:bd:e4:82:11:75:bc:8d:d2:
eb:e5:95:cb:b3:97:c1:ac:13:24:cd:74:c6:ae:bf:
7d:e9:ac:11:98:2c:76:1a:9a:2a:7b:77:28:66:5e:
16:8e:24:77:77:f0:ed:f2:ff:64:d1:17:f6:d8:f7:
34:2a:1c:42:79:c6:bd:6a:94:53:36:5f:7a:ad:7e:
91:e0:66:29:02:36:e6:72:89:86:6d:12:a1:68:8c:
eb:e3:ba:3d:60:2d:b1:35:d4:ca:8f:b0:47:dc:f7:
50:33:06:3e:b3:9a:57:0e:15:d9:94:e3:04:fa:32:
18:d6:49:4c:5b:69:f7:2a:5e:19:b4:a8:be:05:f1:
dc:89:ba:88:76:97:33:7f:71:1b:c2:b9:fe:eb:41:
e4:62:ea:ea:2b:77:e5:66:0d:31:36:03:99:0c:0b:
ec:26:9a:ca:77:e7:fb:1c:b0:33:7e:5c:9f:59:15:
af:94:6c:fe:2b:39:ab:5c:50:56:c0:22:bf:17:e3:
ed:3d:4c:f7:6f:c7:68:ff:6c:d3:f9:8d:46:77:f8:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:81:96:53:39:4F:A0:44:7C:C0:5A:F1:68:E6:08:D6:88:56:D5
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:25:89:1b:d0:70:cd:82:93:0f:96:19:ea:60:00:1f:9b:
7e:58:a8:ff:ae:a2:80:4a:19:62:2e:40:b4:85:ac:7c:8a:80:
e1:e5:d2:06:ad:42:a5:de:7b:a6:39:45:1d:dd:c2:bb:66:da:
e8:b8:ff:e8:54:ae:4e:9d:f7:30:06:71:f4:0f:af:46:57:72:
39:8c:bb:e0:8f:77:67:40:69:a0:22:f4:08:bb:95:96:8d:ae:
9e:87:d8:9c:c1:03:bf:4a:94:1a:de:f4:df:00:b2:22:b8:92:
c6:f2:aa:ff:58:8b:78:87:c5:93:0a:68:6c:a4:d9:d8:71:c2:
db:b6:8f:bf:7d:31:f3:07:b8:f2:35:91:af:34:82:18:5d:7e:
f6:14:50:b4:c3:40:fe:18:7b:26:0a:f9:48:c2:8e:3d:48:d9:
2c:f4:27:b7:a0:b4:03:fc:5f:92:84:66:36:bf:c3:31:dd:70:
db:c0:48:1e:01:ab:e7:d2:99:3e:90:77:a0:4b:29:9b:17:6a:
05:04:3c:7d:2a:01:6a:d8:b6:bf:be:c7:9f:14:7c:7b:31:93:
9b:c1:dc:0a:6f:be:d7:cd:8b:29:7d:6e:ec:f8:6f:a6:b7:91:
fc:28:d7:49:e5:fc:bb:12:cc:71:85:d3:df:8b:7d:e7:75:2c:
a5:f2:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:48:00 2025 by rpki-client