Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: GEljDraG67cHv1mo2Os2eyS/1lV4cgY64/fGwL0d8no=
Subject key identifier: 01:69:A6:F7:1C:5D:4D:11:E4:19:41:39:7C:25:13:0B:26:23:E9:18
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 01984AE5C587F2CE5D6ED95A8E6C3B57A629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 0647
Signing time: Sun 27 Jul 2025 08:00:28 +0000
Manifest this update: Sun 27 Jul 2025 08:00:28 +0000
Manifest next update: Mon 28 Jul 2025 08:00:28 +0000
Files and hashes: 1: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
2: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=)
3: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: fYdEoB7zXIA8+yNl8o4m+EHY31WEhttyqRrIRWqn5w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:c5:87:f2:ce:5d:6e:d9:5a:8e:6c:3b:57:a6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Jul 27 08:00:28 2025 GMT
Not After : Jul 28 08:00:28 2025 GMT
Subject: CN=0169a6f71c5d4d11e41941397c25130b2623e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:4d:f3:b9:fe:c1:81:a5:4a:a2:de:07:61:
22:93:66:e0:56:84:f2:87:f4:19:95:90:e3:75:7b:
fb:e3:bc:17:58:05:c5:ab:d3:01:00:7f:4e:6d:e5:
dc:f5:e0:03:ef:45:a2:59:b6:60:10:a9:e8:aa:d2:
f3:b8:bf:ff:81:5b:f7:a0:38:33:b3:08:a7:ce:4a:
47:26:6e:fb:b8:e2:85:ed:5c:49:99:f0:4b:a0:53:
b9:51:35:98:cd:14:5c:44:92:48:42:0d:07:c0:57:
a9:bb:6b:02:8c:4a:6d:f5:40:29:d2:a7:d5:46:c3:
e7:b2:57:1b:8d:b5:21:bc:46:e1:91:49:4a:95:7b:
b5:21:65:44:d0:8a:ec:67:8b:eb:70:da:18:af:bf:
8b:27:3a:0f:9d:e6:fa:f9:af:8c:45:61:25:6a:1e:
87:e0:eb:0c:79:76:e5:f1:ee:28:3d:ac:bb:64:78:
e0:78:5f:ed:6a:98:29:32:c7:d6:a9:1d:5d:7c:dd:
8e:00:06:00:66:6a:4f:27:9d:59:4d:50:3f:12:55:
03:5f:41:38:11:58:d9:f2:89:09:20:17:53:fe:89:
af:87:3d:2a:d2:9e:8c:e4:67:c7:25:e8:25:e4:c2:
b8:82:99:af:7f:95:ca:d7:5e:ee:6f:67:c2:65:4b:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:A6:F7:1C:5D:4D:11:E4:19:41:39:7C:25:13:0B:26:23:E9:18
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:dc:74:34:5c:28:ce:3f:a8:b2:43:85:3f:7b:60:7d:f4:
ac:c3:f0:57:4f:54:0b:e5:fa:f4:19:d3:cc:3e:68:79:43:ec:
3e:7e:71:6a:55:e9:fb:9a:16:a3:e0:86:39:ad:cd:07:b2:b3:
f8:aa:0d:b9:fb:90:4d:fa:af:62:73:d2:d5:0d:c6:b2:95:77:
c7:26:7f:e8:4c:5f:fa:01:54:c9:3b:9b:50:b2:3c:f9:64:f9:
61:7a:bf:6f:cc:2d:ee:34:e6:16:dd:85:30:16:0f:32:df:7a:
35:cb:e3:5e:4c:36:4e:1a:72:66:d4:ff:bf:dc:d1:bf:c5:22:
06:3f:4d:ef:15:42:ad:2d:d0:0d:54:05:ec:d4:8d:8a:d1:4f:
36:0c:0d:37:60:0c:52:3a:e5:a7:0b:4e:84:0b:38:21:ae:0a:
a4:a1:0c:3f:33:e4:13:3d:4d:75:9d:94:b2:aa:f9:19:3a:2a:
0e:3b:bf:33:93:00:cf:22:75:68:5a:47:7f:b1:f4:cf:11:62:
15:e8:79:db:17:3a:88:3d:e1:ed:60:aa:85:8a:8a:c2:49:b3:
11:34:15:7a:63:91:a3:99:83:2e:1a:a9:27:bf:84:10:e4:d9:
2d:8d:4a:33:47:92:11:73:e3:c2:b5:64:10:97:6e:fe:36:7d:
62:5d:07:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5cWH8s5dbtlajmw7V6YpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy
NTI1MGUwHhcNMjUwNzI3MDgwMDI4WhcNMjUwNzI4MDgwMDI4WjAzMTEwLwYDVQQD
EygwMTY5YTZmNzFjNWQ0ZDExZTQxOTQxMzk3YzI1MTMwYjI2MjNlOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmRN87n+wYGlSqLeB2Eik2bgVoTy
h/QZlZDjdXv747wXWAXFq9MBAH9ObeXc9eAD70WiWbZgEKnoqtLzuL//gVv3oDgz
swinzkpHJm77uOKF7VxJmfBLoFO5UTWYzRRcRJJIQg0HwFepu2sCjEpt9UAp0qfV
RsPnslcbjbUhvEbhkUlKlXu1IWVE0IrsZ4vrcNoYr7+LJzoPneb6+a+MRWElah6H
4OsMeXbl8e4oPay7ZHjgeF/tapgpMsfWqR1dfN2OAAYAZmpPJ51ZTVA/ElUDX0E4
EVjZ8okJIBdT/omvhz0q0p6M5GfHJegl5MK4gpmvf5XK117ub2fCZUu6dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFppvccXU0R5BlBOXwlEwsmI+kYMB8GA1UdIwQY
MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt
Yjg0ZWRhMmU4NDZhLzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh
LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvDcdDRc
KM4/qLJDhT97YH30rMPwV09UC+X69BnTzD5oeUPsPn5xalXp+5oWo+CGOa3NB7Kz
+KoNufuQTfqvYnPS1Q3GspV3xyZ/6Exf+gFUyTubULI8+WT5YXq/b8wt7jTmFt2F
MBYPMt96NcvjXkw2ThpyZtT/v9zRv8UiBj9N7xVCrS3QDVQF7NSNitFPNgwNN2AM
UjrlpwtOhAs4Ia4KpKEMPzPkEz1NdZ2Usqr5GToqDju/M5MAzyJ1aFpHf7H0zxFi
Feh52xc6iD3h7WCqhYqKwkmzETQVemORo5mDLhqpJ7+EEOTZLY1KM0eSEXPjwrVk
EJdu/jZ9Yl0Hvg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:50 2025 by rpki-client