Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: GDcGWH53o9Bmb5xwRaK9l6cgJ5jTaCK3KHC9GZELx9I=
Subject key identifier: F9:26:00:BE:D4:74:B9:DA:7F:68:49:45:27:99:17:CC:BB:19:18:C3
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 0199FF5991C447CDEFB6DB7695AE144CDFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0E0B
Signing time: Mon 20 Oct 2025 02:01:24 +0000
Manifest this update: Mon 20 Oct 2025 02:01:24 +0000
Manifest next update: Tue 21 Oct 2025 02:01:24 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: Q5WACnr2sV1CZsilE9gZLyU48o17tJYe0xIabuCOfpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:91:c4:47:cd:ef:b6:db:76:95:ae:14:4c:df:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Oct 20 02:01:24 2025 GMT
Not After : Oct 21 02:01:24 2025 GMT
Subject: CN=f92600bed474b9da7f684945279917ccbb1918c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:eb:9a:10:3f:b2:ae:45:40:9c:72:17:17:78:
47:3e:a7:ed:bd:5f:e4:93:da:fc:03:a2:f6:bf:0a:
c8:b8:c7:c7:7f:47:2b:d0:91:70:88:1f:11:d8:53:
13:79:6f:cd:62:82:9e:f2:f2:1d:da:55:2b:c8:ab:
c3:49:cb:74:25:a2:61:34:e8:f9:ad:b2:cf:04:b0:
68:22:82:13:85:7a:83:95:67:c1:29:41:59:4e:51:
ce:61:48:2c:61:e0:0f:c0:00:26:18:a0:17:82:8f:
6b:bb:fd:ae:8c:51:9c:e1:55:48:b2:f4:25:74:16:
57:79:5d:a0:47:15:2f:51:17:29:2e:55:1f:90:28:
ff:84:e3:9c:08:d3:b3:18:8f:fd:dc:88:bf:9b:d9:
e4:6e:ba:75:59:63:0f:a2:0b:2c:7a:47:1f:49:cd:
e1:d0:75:59:bf:4c:c4:a3:9f:73:bf:69:f2:61:de:
13:38:81:1d:3e:b9:5c:38:f5:f8:1d:e4:b3:eb:16:
91:3c:ca:61:e4:41:2e:27:1c:6f:3b:21:73:b4:d6:
26:81:d1:39:0e:0e:f9:da:64:64:99:a3:c9:98:0f:
b8:cf:e3:74:73:96:2e:25:49:06:93:4d:7f:63:fe:
bc:11:cd:41:2d:ee:f1:46:d2:80:f8:18:b4:83:14:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:26:00:BE:D4:74:B9:DA:7F:68:49:45:27:99:17:CC:BB:19:18:C3
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:94:26:e9:39:36:94:06:ff:f1:4f:7a:f9:6c:84:ae:2e:
2b:0b:43:7a:47:e5:26:36:8a:44:7a:f1:4e:ae:95:ce:ee:9c:
fe:07:8b:bb:b7:dc:9a:ba:1f:fb:c2:c4:b1:e5:f3:03:69:f7:
eb:92:af:5d:16:22:74:e1:c2:3f:76:d3:b6:fb:5a:ef:58:96:
40:7f:a8:ce:6e:24:23:f7:69:87:69:13:f1:a6:7e:33:f5:4e:
8e:de:0b:4d:f7:5d:02:af:2e:b5:8f:f1:a0:d9:c4:c4:07:d3:
be:4f:22:c9:11:b7:e3:35:70:06:f6:cb:de:cd:d9:31:c6:37:
1f:83:1c:7e:b1:77:f6:85:36:67:f1:0e:08:51:61:71:61:69:
8f:59:01:d6:a3:77:0d:b5:b8:65:e1:00:6c:22:0b:00:8a:f2:
2d:83:95:a9:35:00:15:13:87:63:eb:79:a9:e2:3a:a0:1a:fb:
21:b5:5e:59:48:25:31:ca:28:13:7f:d8:91:a7:15:66:ed:ee:
9f:52:62:0d:8c:e3:ac:c7:81:a3:11:4b:24:00:7b:82:f4:b8:
3a:ba:9b:45:5f:8b:53:2f:5e:1c:56:4c:e0:26:44:7e:23:12:
71:1e:27:14:d9:c0:4a:54:4c:d1:ff:39:54:da:54:9e:7d:15:
fc:1e:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:37 2025 by rpki-client