Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: lmAUOB52x0q1aLKbgZS42S6pjGZ42Ws5RYRY8CPNs3s=
Subject key identifier: A9:E2:CF:99:8B:C1:04:52:E1:26:A7:3A:04:25:F0:CA:7B:48:C0:26
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 0197B6D7ACCA7F0E3238B67FE7DB69CD893A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0406
Signing time: Sat 28 Jun 2025 14:01:17 +0000
Manifest this update: Sat 28 Jun 2025 14:01:17 +0000
Manifest next update: Sun 29 Jun 2025 14:01:17 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: d718oQJxjMgn2y2NydbM7BsV9tKexqNj+sGgQkZ+0jI=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ac:ca:7f:0e:32:38:b6:7f:e7:db:69:cd:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Jun 28 14:01:17 2025 GMT
Not After : Jun 29 14:01:17 2025 GMT
Subject: CN=a9e2cf998bc10452e126a73a0425f0ca7b48c026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0a:a5:97:f7:ac:43:50:18:08:6a:a4:cf:4a:
ba:04:0d:ee:d3:35:bc:8e:ac:b2:7a:c7:94:9f:dc:
15:f1:f0:04:d6:ab:27:b5:18:22:9a:3e:9a:3a:82:
dd:df:00:39:ee:0f:29:e9:4a:eb:c3:da:07:a0:5d:
2d:ab:05:33:d5:e6:e0:d9:65:4d:4e:22:b0:62:06:
c8:4d:35:39:10:78:19:f5:08:a4:4d:ca:51:e0:2d:
78:3a:d1:5f:f2:ee:44:5e:e5:94:f9:49:28:58:ee:
15:b9:9b:d1:8b:2a:61:b1:04:1b:01:df:51:f1:86:
4b:e2:cc:02:d3:73:7d:1b:5d:f2:e9:30:09:67:25:
78:a2:d3:b4:08:7d:a1:e4:b9:a7:58:29:2c:24:e5:
a6:6e:68:c2:1e:c9:aa:35:c1:9a:b1:b0:75:76:64:
37:29:62:62:c1:17:33:0c:6f:a8:09:6b:4f:8f:89:
16:7c:dc:89:90:e8:d6:d6:25:5d:49:4c:73:d8:10:
85:4d:b1:19:de:49:f3:79:b2:e3:40:e0:78:05:ac:
12:40:19:f1:84:3a:5a:dd:c7:ba:39:f6:6c:e5:cc:
26:87:c0:21:3f:f5:d9:a6:3c:c0:64:93:7b:21:ca:
a6:d9:01:ed:9b:1d:43:03:28:f3:ad:64:3a:80:f8:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E2:CF:99:8B:C1:04:52:E1:26:A7:3A:04:25:F0:CA:7B:48:C0:26
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:b0:7d:47:fc:8f:47:c2:51:60:7f:b1:27:9c:ea:4c:4f:
d4:06:fc:d0:d0:a7:d5:87:ee:f1:f4:71:5c:ce:4c:13:ac:ff:
20:94:55:be:d0:1c:16:f7:d9:37:71:01:92:25:7c:8b:6d:3f:
e9:c6:ed:7d:c3:fc:2b:99:5c:a2:69:65:38:da:28:37:71:18:
79:17:d2:9c:b7:6e:13:00:8d:70:62:95:be:d2:74:76:e0:20:
85:70:ab:25:4b:05:08:d0:8e:32:fc:60:1e:7b:3d:e3:fb:4a:
ab:34:a6:2b:55:68:be:e6:3a:be:ed:18:8c:13:07:39:4a:5b:
c7:88:a1:9e:45:94:a3:ab:72:c0:a9:51:f4:59:e1:5e:d5:93:
6f:82:7d:3c:1c:0f:83:27:74:8a:a1:8f:15:72:f1:81:98:60:
30:ca:9e:59:e1:01:11:c3:da:a6:ee:b7:92:38:44:29:e2:0b:
cb:93:64:68:f9:3c:5a:9e:ab:9d:5a:04:f8:77:f2:3b:90:dc:
27:b7:0d:86:53:96:9d:ca:5e:a3:da:83:40:ab:b5:37:50:e6:
9e:42:2c:03:a7:0c:ff:54:5d:74:ed:df:20:12:6a:8c:1e:c9:
e1:d4:34:bf:7b:53:72:34:e7:21:b1:2d:50:ce:a9:6a:fa:85:
db:b0:7a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216zKfw4yOLZ/59tpzYk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDNjNWRlOWZmM2NjZTEzMWM4YmZjZGNjZTMzMzk0N2Q5
MjYzNWUwHhcNMjUwNjI4MTQwMTE3WhcNMjUwNjI5MTQwMTE3WjAzMTEwLwYDVQQD
EyhhOWUyY2Y5OThiYzEwNDUyZTEyNmE3M2EwNDI1ZjBjYTdiNDhjMDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9wqll/esQ1AYCGqkz0q6BA3u0zW8
jqyyeseUn9wV8fAE1qsntRgimj6aOoLd3wA57g8p6Urrw9oHoF0tqwUz1ebg2WVN
TiKwYgbITTU5EHgZ9QikTcpR4C14OtFf8u5EXuWU+UkoWO4VuZvRiyphsQQbAd9R
8YZL4swC03N9G13y6TAJZyV4otO0CH2h5LmnWCksJOWmbmjCHsmqNcGasbB1dmQ3
KWJiwRczDG+oCWtPj4kWfNyJkOjW1iVdSUxz2BCFTbEZ3knzebLjQOB4BawSQBnx
hDpa3ce6OfZs5cwmh8AhP/XZpjzAZJN7Icqm2QHtmx1DAyjzrWQ6gPgaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKniz5mLwQRS4SanOgQl8Mp7SMAmMB8GA1UdIwQY
MBaAFATTxd6f88zhMci/zczjM5R9kmNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDkt
OWQ4YmM4MTE1ZjY4LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yNjA3ZmItNmI4NC00NTZlLWFhMDktOWQ4YmM4MTE1ZjY4
LzEvQk5QRjNwX3p6T0V4eUxfTnpPTXpsSDJTWTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4qwfUf8
j0fCUWB/sSec6kxP1Ab80NCn1Yfu8fRxXM5ME6z/IJRVvtAcFvfZN3EBkiV8i20/
6cbtfcP8K5lcomllONooN3EYeRfSnLduEwCNcGKVvtJ0duAghXCrJUsFCNCOMvxg
Hns94/tKqzSmK1VovuY6vu0YjBMHOUpbx4ihnkWUo6tywKlR9FnhXtWTb4J9PBwP
gyd0iqGPFXLxgZhgMMqeWeEBEcPapu63kjhEKeILy5NkaPk8Wp6rnVoE+HfyO5Dc
J7cNhlOWncpeo9qDQKu1N1DmnkIsA6cM/1RddO3fIBJqjB7J4dQ0v3tTcjTnIbEt
UM6pavqF27B6Zw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:25 2025 by rpki-client