Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: iKEgKV3nUmUrb5COdRzFqguuIaf+mDPcvACxHMJ8E1o=
Subject key identifier: 2A:82:F4:A4:E1:09:FF:D2:59:5C:1A:BB:55:1F:02:9A:AA:9D:DA:2D
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 019A4C984C03B7F347D53A2D58221B88076C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0E33
Signing time: Tue 04 Nov 2025 02:00:40 +0000
Manifest this update: Tue 04 Nov 2025 02:00:40 +0000
Manifest next update: Wed 05 Nov 2025 02:00:40 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: nnCwYt033c+1MilYV1hpoDQFTx4bS9QDy8HE2W8Xi8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:4c:03:b7:f3:47:d5:3a:2d:58:22:1b:88:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Nov 4 02:00:40 2025 GMT
Not After : Nov 5 02:00:40 2025 GMT
Subject: CN=2a82f4a4e109ffd2595c1abb551f029aaa9dda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:6a:19:f7:83:bb:e0:bb:aa:68:41:37:67:
c8:0e:75:58:52:a9:5d:2b:4b:f3:87:1c:6b:6f:69:
c7:bf:60:36:46:3f:4d:fa:c8:99:0c:ce:52:82:93:
70:c1:b7:8c:81:e7:7a:08:72:55:7c:88:f9:23:1e:
35:60:a3:0c:2f:3b:1e:9c:89:6f:aa:d2:07:cd:16:
f3:83:d2:dd:fd:6d:b6:61:3f:fb:87:11:48:3e:cd:
53:61:35:89:6e:8f:8d:cc:af:1c:77:4a:e5:2a:93:
21:d5:2b:ba:8d:55:fe:a7:10:d6:7c:8f:ba:48:c9:
15:80:ff:99:5a:c0:fc:d2:98:ee:12:19:a0:a6:9f:
22:fe:f3:fe:7e:8b:bb:ae:c8:38:48:71:ae:0f:79:
3d:e7:60:84:90:b7:1b:f4:33:e8:81:48:cd:8f:29:
a0:5f:c5:1b:3d:88:c8:62:f0:e0:52:d5:fc:9e:18:
72:be:0b:c2:6a:d3:71:7a:c4:3d:35:f0:11:a2:dd:
f5:48:bf:52:e1:fc:56:94:af:44:4d:46:c6:ca:59:
df:3e:d8:0a:90:a9:0e:e4:bd:10:e7:b3:c0:82:ac:
28:8e:13:56:94:47:00:73:42:d9:e0:c0:2f:03:14:
56:ec:c0:30:d3:62:7a:4e:29:0c:ab:f5:2a:74:e3:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:F4:A4:E1:09:FF:D2:59:5C:1A:BB:55:1F:02:9A:AA:9D:DA:2D
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:fe:e3:76:1a:8f:5c:1d:83:26:35:a7:ef:fd:66:9e:0b:
ef:b5:4c:67:5a:f7:ef:9c:14:2d:92:11:e1:b7:5a:ec:84:3f:
19:cc:48:42:e0:b3:29:1f:fa:fe:0a:18:ea:7c:c5:92:01:2f:
3a:70:89:20:1d:e7:f9:37:14:ae:6f:53:d2:67:a3:d4:38:a9:
9d:a6:78:ed:57:bf:2b:65:65:94:ff:50:4b:5f:4e:76:96:83:
aa:12:b9:59:a1:ec:e2:ec:33:2e:5a:51:ff:7e:e0:c9:4c:4f:
d5:da:93:b4:27:ec:f2:27:92:59:c0:00:d0:72:62:49:e4:c0:
f6:bb:9a:dc:03:03:7b:b3:d6:8c:62:56:ab:a3:58:60:65:9e:
42:83:24:16:a4:37:72:3c:d8:79:89:ff:3d:e8:0d:33:d9:d2:
b3:80:fd:2f:e0:fa:86:2c:67:f6:ad:e6:d9:9c:84:7f:7f:1e:
7e:db:db:10:3c:8c:06:26:ae:11:7b:0a:b9:8b:4c:ec:5d:31:
fd:27:4c:ec:d9:50:12:13:22:29:ed:e9:f2:66:b9:d6:71:d9:
4a:08:29:6b:31:c5:fd:35:d4:f7:b4:c0:3d:67:eb:bf:29:64:
e6:45:31:3c:e1:d7:63:19:50:68:ea:9e:46:52:cd:42:0a:62:
2e:17:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client