Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: PH023TSrmHTrY2cyfAoli2BcB9SOFBKzrDJr/5ezyrQ=
Subject key identifier: 55:66:5D:90:69:A1:8D:0C:C9:63:00:A3:AE:59:73:40:C9:7D:27:18
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 019A53081D447C49489DD25AFD6A64713192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0560
Signing time: Wed 05 Nov 2025 08:00:31 +0000
Manifest this update: Wed 05 Nov 2025 08:00:31 +0000
Manifest next update: Thu 06 Nov 2025 08:00:31 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: ttmLGAgmtB01yE5TF20MD90dDTPwv+w3culr4EIuunA=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:1d:44:7c:49:48:9d:d2:5a:fd:6a:64:71:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Nov 5 08:00:31 2025 GMT
Not After : Nov 6 08:00:31 2025 GMT
Subject: CN=55665d9069a18d0cc96300a3ae597340c97d2718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:f2:a0:24:37:f8:3d:ae:63:2a:d8:4f:44:
50:4a:4e:61:bb:d0:e3:35:ca:b7:74:57:3f:e1:5a:
52:f7:1f:8d:2d:a0:7a:df:43:36:9f:94:dc:7f:2f:
05:dc:8c:6a:1f:fa:47:b3:c2:d1:48:a2:e3:61:de:
63:12:9a:b0:cd:41:98:a2:59:41:4d:ec:4c:6d:3f:
e4:3f:26:28:b1:4c:57:54:7c:ef:a5:0a:2b:e3:73:
24:a0:e1:fc:b8:71:42:b1:8f:95:39:39:42:5b:3b:
91:0c:7b:20:d9:a8:f3:ff:88:2d:10:72:c1:05:ec:
53:06:7f:6d:e2:e1:5c:96:eb:de:f1:20:8c:4b:a3:
b3:74:48:e2:3f:ec:cf:66:6a:4e:b3:3e:b6:2f:f1:
cc:78:2c:ad:7c:4e:a8:f0:bd:b1:bb:74:59:9f:16:
32:26:54:bb:4a:21:d9:78:72:1a:60:75:00:fd:80:
85:29:dd:28:67:bb:94:41:97:89:eb:08:62:0d:c1:
09:84:64:bd:9a:82:7e:ab:42:f1:01:20:5f:ca:60:
67:00:1d:f0:f9:84:b3:fb:74:bd:1e:4a:53:9b:27:
d0:27:f0:22:f7:3a:39:e8:ce:f3:06:5e:52:f6:24:
bc:52:fb:5e:be:4d:3c:fc:53:2b:83:99:f1:57:16:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:5D:90:69:A1:8D:0C:C9:63:00:A3:AE:59:73:40:C9:7D:27:18
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:a1:f1:db:04:4e:10:31:38:07:f1:5e:fa:5d:94:db:9b:11:
7a:26:2b:c8:6a:49:ad:74:7a:1b:86:3a:c7:b1:a7:bc:16:a2:
14:fa:cd:32:c2:dc:0f:70:38:ab:7f:ff:c5:13:6d:f4:e3:bd:
f0:24:27:b5:1e:80:6a:48:c2:ca:87:35:ad:fd:b9:d8:59:bd:
b2:ff:e6:30:ec:c4:27:7b:c1:75:6c:f0:5e:bb:3c:0a:8b:ce:
f8:d2:be:ac:91:74:c1:c8:5f:8a:57:3a:b4:ad:b6:e4:09:5f:
43:0c:68:c8:c4:a4:c4:cc:58:d0:91:76:d0:d9:8d:cc:97:8f:
75:4f:f7:5f:ee:1e:f0:ab:5e:10:cd:ef:54:d6:f8:59:7a:21:
3e:5a:a3:39:49:29:8c:85:3e:b0:94:b2:68:73:81:d6:ca:6f:
65:6a:d0:f8:31:65:76:dd:c7:83:bb:3c:5d:25:67:2d:f0:b6:
33:b6:30:95:ab:03:00:2d:3b:12:46:06:6a:e9:3b:d6:2e:77:
97:a1:e7:3b:b1:03:ca:85:41:4b:75:04:6d:df:7e:09:19:30:
d0:ac:6f:01:5c:6e:31:60:d1:da:dd:1a:92:58:9e:44:4b:a0:
da:21:5f:34:3d:5b:83:1d:8b:c6:c2:5d:5d:46:f2:f2:10:62:
cf:8e:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:14 2025 by rpki-client