Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: AXWZjvj9x6m7sPHprOXGwp5U7OAmPdfNn3n8LnJpGDw=
Subject key identifier: 14:14:39:AB:91:33:24:FF:17:99:BF:58:48:6F:CA:6A:05:92:E2:D6
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 0199FFFE819AA9423E512035B204F2988E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 0535
Signing time: Mon 20 Oct 2025 05:01:33 +0000
Manifest this update: Mon 20 Oct 2025 05:01:33 +0000
Manifest next update: Tue 21 Oct 2025 05:01:33 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: G6rk2OE+3PObNEbx4PXD7e7Txc5QfT8haz+55Ij3gKs=)
3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:81:9a:a9:42:3e:51:20:35:b2:04:f2:98:8e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Oct 20 05:01:33 2025 GMT
Not After : Oct 21 05:01:33 2025 GMT
Subject: CN=141439ab913324ff1799bf58486fca6a0592e2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:fa:fd:db:08:49:96:e4:17:87:4b:da:d6:
cf:36:fe:79:97:1d:08:d0:9b:5c:35:ac:85:81:49:
2a:6f:18:62:71:82:22:cd:1a:b7:43:58:3e:34:2c:
f7:c3:a8:4e:4a:5a:0a:c6:e3:6c:9d:fd:92:76:cc:
37:dd:a7:19:89:a2:63:c2:0d:02:62:cd:be:bf:d7:
5f:00:0a:c5:ea:d2:b9:32:4b:fb:24:47:d3:4f:c5:
17:75:c7:0b:cc:a1:22:a3:2e:fa:37:47:fb:50:0d:
e8:27:02:f4:56:6b:f5:59:2e:31:d5:46:e7:ed:d0:
cb:89:3a:1e:7b:49:4b:da:a8:ad:85:41:6c:80:d8:
0d:cb:93:ce:64:de:6d:91:8c:4c:26:bd:bd:49:b5:
25:44:f4:f5:fd:a7:2a:04:78:f5:31:40:f7:1b:10:
38:41:1f:75:8e:1b:c6:0a:d1:e1:5b:e2:d2:6c:fc:
4f:db:cd:11:df:f4:7d:03:a8:4d:4e:c5:a9:3c:4e:
71:8f:96:2d:24:69:98:b3:aa:25:d1:6d:c3:a8:4d:
64:28:29:2b:22:d9:cf:bb:7c:bb:35:a9:4f:db:dc:
c4:57:5b:ba:7c:f6:fd:03:a8:20:da:72:2c:b1:e0:
5f:96:47:a1:60:ff:df:e5:c0:9f:b0:88:1c:e0:4f:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:39:AB:91:33:24:FF:17:99:BF:58:48:6F:CA:6A:05:92:E2:D6
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:c1:ba:a9:0d:59:89:77:96:bb:16:72:ac:a2:37:1e:d1:
98:2a:3b:ca:55:cf:ec:4e:76:53:d6:c2:dc:38:aa:2b:c1:1e:
80:32:84:ee:e1:77:dc:e7:25:c5:50:bb:a5:da:45:46:0c:c0:
66:c0:e9:17:65:04:d6:c5:9f:cc:16:1d:ce:59:fa:86:97:b8:
14:f5:8f:57:43:4d:05:35:52:2c:e4:51:61:87:34:5e:9d:6f:
a5:8a:bb:c1:c6:01:53:06:af:68:b9:f8:dd:26:35:03:3d:7f:
1f:4d:c0:2e:f6:b5:cf:f9:a6:86:c9:bf:91:c5:02:13:41:3f:
31:6a:17:8a:a7:dd:50:c1:c1:97:2c:76:3d:2c:c3:89:40:17:
77:af:ea:50:96:30:b6:df:75:ba:2e:be:54:ee:14:b4:a1:bb:
5e:41:43:45:bb:d1:6c:ab:f2:45:2b:4d:1a:14:ef:44:eb:fb:
fc:aa:f4:3d:93:9f:81:38:5b:ea:88:fb:a6:5b:b9:47:6a:e0:
11:e9:14:cf:7d:62:d7:9e:70:54:3a:87:04:d9:e8:30:43:0b:
b4:91:88:a8:a4:59:27:4d:9f:e6:c0:5f:fa:39:28:03:f0:f1:
c1:90:25:f7:51:af:b2:be:c7:fb:6e:c0:33:6f:ea:3b:b7:10:
a6:23:c9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:37 2025 by rpki-client