Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: Ppm2uRb3FoL8SGQsMyh5dDW5RmuhsVhP6CQF/9zNPEc=
Subject key identifier: EA:72:46:C9:B7:68:C8:C3:04:70:8A:DB:04:89:69:03:32:6B:D9:2C
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 0198D4A84B8350A2DDB7396DFC8335FA920F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 049A
Signing time: Sat 23 Aug 2025 02:00:55 +0000
Manifest this update: Sat 23 Aug 2025 02:00:55 +0000
Manifest next update: Sun 24 Aug 2025 02:00:55 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: k7fGT6dEXvWwBjXeuxnUwdXw4hM+VvVmrutuSgDBnD8=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4b:83:50:a2:dd:b7:39:6d:fc:83:35:fa:92:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Aug 23 02:00:55 2025 GMT
Not After : Aug 24 02:00:55 2025 GMT
Subject: CN=ea7246c9b768c8c304708adb04896903326bd92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:7a:c6:17:19:19:17:1c:e7:f7:17:7d:44:
01:27:14:27:b2:c5:12:7d:eb:84:6d:86:8d:8c:5a:
a8:7d:bc:7c:5e:47:9b:88:d3:35:31:fa:96:51:9d:
1a:4e:79:67:21:01:e5:60:1c:b4:3a:e8:55:0c:80:
a6:ef:cc:c7:9e:c7:16:56:5d:92:a6:df:3e:3c:76:
25:f3:d8:48:c2:15:7d:b6:c4:0b:7d:f2:f7:3f:ca:
4b:91:d5:0c:28:7e:f7:e2:57:ab:6b:01:0b:de:cc:
c7:2f:41:58:08:80:a1:e0:89:0b:db:b2:bb:ad:3e:
6f:1e:73:95:61:de:9b:5c:62:a4:b4:85:27:a9:b2:
39:63:f9:57:21:c4:74:c7:01:73:9e:23:ad:dc:dd:
cd:bd:d6:30:25:9f:44:41:f6:6b:6f:62:40:2b:87:
1c:69:d9:f7:ee:48:59:5f:4b:98:eb:d4:40:e7:c4:
3f:44:e9:14:56:9e:68:84:06:aa:e2:6b:7a:62:24:
60:f7:a1:86:51:64:e7:49:47:3c:9b:c0:79:a1:aa:
cf:92:6c:c7:b7:9b:b3:7e:00:8c:29:98:36:6e:40:
9c:9c:a1:28:c9:4e:46:6a:4a:1f:38:9a:66:d0:c0:
2a:1e:fa:3a:c6:c3:41:7c:89:ab:55:9a:18:59:e0:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:46:C9:B7:68:C8:C3:04:70:8A:DB:04:89:69:03:32:6B:D9:2C
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d1:78:8e:e7:67:cd:3e:55:c2:85:b1:b7:c8:5f:8d:94:93:
f7:ed:cd:8f:6f:c5:c6:89:7e:16:0e:81:fe:5a:e0:1f:4d:4b:
04:87:ac:71:82:ce:51:7b:65:55:dd:41:19:01:68:3c:39:8b:
b0:aa:4a:a9:17:f5:93:63:d8:16:a9:1b:81:72:bc:2c:66:1d:
ea:61:0e:63:88:f9:19:6c:c8:10:e0:54:5b:97:c7:6c:6b:5b:
33:3d:c8:fd:10:4e:7b:98:5b:47:58:d7:6e:63:3a:8c:32:c7:
cc:76:cb:ac:46:82:57:fb:89:d4:20:c3:83:c5:45:5e:bf:b6:
c9:a7:d4:18:b0:e5:64:3f:8c:fe:2d:62:4b:5c:b8:14:b0:e1:
03:db:95:81:f4:62:e4:fa:27:89:e2:06:af:da:a3:2f:17:47:
f2:1b:05:ac:c8:41:41:27:7d:a0:1c:ba:7a:22:f2:a7:04:f8:
b1:f5:42:12:f0:b5:c6:53:8c:e3:56:6f:88:fd:31:fd:b9:5d:
42:25:41:5c:6e:a3:61:8e:f3:1b:63:50:98:13:07:91:24:cd:
1f:d5:b3:de:0c:26:26:ed:31:75:cd:ba:fb:fc:2a:65:f9:9f:
72:c5:84:6a:8d:75:b3:b3:f4:8f:8f:81:e5:64:41:f2:b0:55:
73:35:4e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEuDUKLdtzlt/IM1+pIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjUwODIzMDIwMDU1WhcNMjUwODI0MDIwMDU1WjAzMTEwLwYDVQQD
EyhlYTcyNDZjOWI3NjhjOGMzMDQ3MDhhZGIwNDg5NjkwMzMyNmJkOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh856xhcZGRcc5/cXfUQBJxQnssUS
feuEbYaNjFqofbx8XkebiNM1MfqWUZ0aTnlnIQHlYBy0OuhVDICm78zHnscWVl2S
pt8+PHYl89hIwhV9tsQLffL3P8pLkdUMKH734lerawEL3szHL0FYCICh4IkL27K7
rT5vHnOVYd6bXGKktIUnqbI5Y/lXIcR0xwFzniOt3N3NvdYwJZ9EQfZrb2JAK4cc
adn37khZX0uY69RA58Q/ROkUVp5ohAaq4mt6YiRg96GGUWTnSUc8m8B5oarPkmzH
t5uzfgCMKZg2bkCcnKEoyU5GakofOJpm0MAqHvo6xsNBfImrVZoYWeAzOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpyRsm3aMjDBHCK2wSJaQMya9ksMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNF4judn
zT5VwoWxt8hfjZST9+3Nj2/Fxol+Fg6B/lrgH01LBIescYLOUXtlVd1BGQFoPDmL
sKpKqRf1k2PYFqkbgXK8LGYd6mEOY4j5GWzIEOBUW5fHbGtbMz3I/RBOe5hbR1jX
bmM6jDLHzHbLrEaCV/uJ1CDDg8VFXr+2yafUGLDlZD+M/i1iS1y4FLDhA9uVgfRi
5PonieIGr9qjLxdH8hsFrMhBQSd9oBy6eiLypwT4sfVCEvC1xlOM41ZviP0x/bld
QiVBXG6jYY7zG2NQmBMHkSTNH9Wz3gwmJu0xdc26+/wqZfmfcsWEao11s7P0j4+B
5WRB8rBVczVOtQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:10 2025 by rpki-client