Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: xPANRdJ44XII0YExNKPcj5dF+l6gRkruU/9zo996rO8=
Subject key identifier: 29:CA:38:A8:29:E7:BF:D2:14:EE:BE:FC:BE:F1:21:3A:86:FA:E3:23
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 0198D5F1396CD0CC6C43B9E3547021185A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0D71
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: 7n69EhTzesnWB9z49/OonnD6XXQINFsJuWR1PuAoAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:39:6c:d0:cc:6c:43:b9:e3:54:70:21:18:5a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=29ca38a829e7bfd214eebefcbef1213a86fae323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:94:e4:87:cd:99:31:09:70:9a:fa:e1:a5:
0a:e7:15:7d:c1:c1:64:34:8e:44:f3:0d:e1:a9:a6:
65:c1:40:a4:de:26:e6:69:90:7c:70:d4:b3:ba:7c:
42:a5:c2:b9:9f:2f:df:a0:22:c4:90:2c:af:2c:c5:
d7:3d:9e:d7:68:ce:e8:ca:01:65:d3:73:01:d1:3c:
a3:f4:fa:e1:31:4b:1d:a1:2c:e8:c8:04:7e:7c:fc:
4c:cb:18:b1:af:2c:9e:16:b9:73:4e:32:9e:92:d6:
62:2b:81:c7:8c:5a:88:ee:04:28:c5:55:04:da:90:
c7:72:3a:14:07:4f:b3:80:65:86:c7:42:fb:4e:e7:
bb:53:7b:6c:3e:de:c4:df:9b:5f:58:da:ee:4a:8a:
29:ee:bc:74:aa:0c:72:98:d9:9b:4e:5a:e8:6b:b9:
c0:d4:99:b5:25:7d:eb:e7:ae:58:a5:b8:d6:11:2d:
23:96:e2:1c:47:33:3c:a4:e1:c7:18:d4:f4:4b:37:
bc:e9:e2:ce:fe:77:f2:a9:e9:c7:b8:6a:89:f3:db:
f1:f0:9c:ec:55:bb:00:f8:d4:9c:90:fd:97:c9:fd:
27:25:b3:e9:ed:f0:50:6e:55:d6:34:7a:26:bf:a6:
40:00:48:8a:20:5d:f5:03:a2:a7:c1:21:ff:de:00:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:38:A8:29:E7:BF:D2:14:EE:BE:FC:BE:F1:21:3A:86:FA:E3:23
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:66:ae:99:5c:6b:7c:59:be:3a:48:f0:6a:6b:43:a4:fa:e4:
ba:95:0c:cd:ed:07:a3:af:6e:27:f2:66:98:1f:e6:f6:12:a4:
5e:f1:3e:c6:6c:ca:c5:8a:5f:be:f0:e7:2b:15:13:b4:78:a0:
9e:fc:f2:23:69:5b:ef:78:5c:4e:d7:45:76:df:f3:e1:a4:c5:
d8:b5:b2:f6:3b:a0:22:c9:1d:91:53:8d:d5:43:7c:7b:51:25:
e2:2b:d0:14:8a:78:da:2a:7f:fa:4e:33:b6:54:41:b6:50:f4:
c0:44:57:b3:a7:52:20:08:71:02:07:78:44:13:4a:f0:3d:ec:
e9:6a:94:e5:ca:35:27:2a:5f:8b:00:59:11:ca:1b:57:a4:a9:
fb:5c:1f:65:9b:1a:df:72:86:34:5d:39:b1:c5:b3:91:9d:d2:
01:de:43:3d:15:aa:3e:d5:9d:22:31:92:ac:60:a9:f2:6c:e8:
fb:2d:11:ac:5c:b4:ad:c6:98:3e:48:d6:53:99:c9:9d:67:3c:
05:fb:58:fa:83:96:f7:da:2b:a0:30:73:d1:61:b9:98:87:52:
3e:48:09:58:a2:f6:92:5d:25:25:63:35:e7:99:3a:44:c5:96:
ad:06:09:e5:b4:b1:51:0b:88:c4:55:b7:7c:18:8c:2a:2d:d2:
e9:3c:61:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Tls0MxsQ7njVHAhGFqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTlmMTk3ZjE3MzExN2I3NTMxZmFjYjlhNjM4OTZhMjlk
OWE5YTAwHhcNMjUwODIzMDgwMDEyWhcNMjUwODI0MDgwMDEyWjAzMTEwLwYDVQQD
EygyOWNhMzhhODI5ZTdiZmQyMTRlZWJlZmNiZWYxMjEzYTg2ZmFlMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CU5IfNmTEJcJr64aUK5xV9wcFk
NI5E8w3hqaZlwUCk3ibmaZB8cNSzunxCpcK5ny/foCLEkCyvLMXXPZ7XaM7oygFl
03MB0Tyj9PrhMUsdoSzoyAR+fPxMyxixryyeFrlzTjKektZiK4HHjFqI7gQoxVUE
2pDHcjoUB0+zgGWGx0L7Tue7U3tsPt7E35tfWNruSoop7rx0qgxymNmbTlroa7nA
1Jm1JX3r565YpbjWES0jluIcRzM8pOHHGNT0Sze86eLO/nfyqenHuGqJ89vx8Jzs
VbsA+NSckP2Xyf0nJbPp7fBQblXWNHomv6ZAAEiKIF31A6KnwSH/3gBN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnKOKgp57/SFO6+/L7xITqG+uMjMB8GA1UdIwQY
MBaAFAQZ8ZfxcxF7dTH6y5pjiWop2amgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEt
YjFjYjAzYTNmZDVjLzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lMjgwMjEtNjFkMi00YTc1LTljMmEtYjFjYjAzYTNmZDVj
LzEvQkJueGxfRnpFWHQxTWZyTG1tT0phaW5acWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGaumVxr
fFm+OkjwamtDpPrkupUMze0Ho69uJ/JmmB/m9hKkXvE+xmzKxYpfvvDnKxUTtHig
nvzyI2lb73hcTtdFdt/z4aTF2LWy9jugIskdkVON1UN8e1El4ivQFIp42ip/+k4z
tlRBtlD0wERXs6dSIAhxAgd4RBNK8D3s6WqU5co1JypfiwBZEcobV6Sp+1wfZZsa
33KGNF05scWzkZ3SAd5DPRWqPtWdIjGSrGCp8mzo+y0RrFy0rcaYPkjWU5nJnWc8
BftY+oOW99oroDBz0WG5mIdSPkgJWKL2kl0lJWM155k6RMWWrQYJ5bSxUQuIxFW3
fBiMKi3S6TxhXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:51 2025 by rpki-client