Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: ZwDmdRuMxJJz9YHrv6thlNg+YlF/AWqBi9YdJZ2zXx8=
Subject key identifier: 7F:78:82:9F:1F:D1:80:B1:9E:6B:6E:17:48:BD:9A:2A:82:83:1E:BA
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 01984AAE97B7538B7325EBD0AC859F62295B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 07:00:12 +0000
Manifest this update: Sun 27 Jul 2025 07:00:12 +0000
Manifest next update: Mon 28 Jul 2025 07:00:12 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: PkVBwthLVGUJor5ZIHFAkZglbzhHe+C0ArBtCGQFZcM=)
2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:97:b7:53:8b:73:25:eb:d0:ac:85:9f:62:29:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jul 27 07:00:12 2025 GMT
Not After : Jul 28 07:00:12 2025 GMT
Subject: CN=7f78829f1fd180b19e6b6e1748bd9a2a82831eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e0:9f:df:b9:d0:dc:48:40:cb:3a:89:0d:b4:
ea:91:8f:8e:74:a8:93:f5:02:bd:4a:e4:f7:e8:5e:
cf:d9:2e:8d:e9:02:c7:09:91:08:1b:54:21:98:bb:
e8:ff:19:86:c4:cc:bb:b5:45:6a:42:80:a1:b3:f2:
d1:03:6c:6e:98:ff:a8:c6:d7:f8:ab:bc:b4:35:b8:
6e:03:df:3f:c4:b9:66:68:07:dd:78:97:cf:6d:1e:
3a:44:e2:a1:65:6e:8f:0d:70:65:45:6b:1c:11:83:
b4:ca:2a:e5:e8:2e:6b:5d:76:a7:b3:92:ab:af:dd:
af:e3:b0:f4:1b:27:44:3b:83:eb:9a:72:6c:9e:bc:
2f:4c:8b:1d:84:3a:ab:28:94:56:92:c4:a2:6f:26:
38:c9:a0:c7:ee:ed:92:9c:1a:36:65:a6:31:a8:92:
2c:0c:42:50:2e:53:73:6d:03:7c:79:82:95:7f:57:
5c:ab:7e:40:13:ca:88:9f:05:48:3a:47:66:2e:47:
0c:e5:27:4d:37:96:ba:b3:6f:df:44:b9:4d:ea:3b:
23:0d:b7:03:b6:aa:5e:d4:bb:15:d4:89:a1:37:49:
64:4a:27:da:f0:b4:ee:10:2f:79:21:49:95:fd:a9:
20:31:34:05:53:5d:c1:34:43:99:f0:64:c9:bf:b2:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:78:82:9F:1F:D1:80:B1:9E:6B:6E:17:48:BD:9A:2A:82:83:1E:BA
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:a5:7f:b0:e7:62:f1:c3:7f:65:06:ba:ab:e7:2c:a5:10:
bf:f6:b4:9c:f4:a3:e2:ac:14:d8:10:76:61:db:e8:4e:81:f9:
d4:aa:e7:dd:86:ab:64:14:79:c4:23:00:99:20:c5:d5:b3:25:
3b:7d:ed:b9:38:2d:70:cc:a8:93:0c:7b:39:31:b3:93:68:08:
f1:97:d5:6a:01:6e:f8:03:b0:bd:c0:33:96:8f:ed:76:6d:c2:
b4:27:73:05:c8:a1:b9:a4:4a:e0:5a:11:92:28:1b:39:a1:e6:
cb:5f:34:6d:97:48:9f:0a:b6:82:74:72:bf:e3:7a:56:fd:7e:
7a:74:80:9d:37:8a:28:9f:9d:e5:63:c9:80:4f:24:c0:a8:d1:
9b:3a:eb:9c:1b:9b:23:a9:04:83:93:10:49:5d:c6:51:94:fe:
80:28:91:cd:fe:a2:c3:7d:dc:3f:b7:d0:30:14:1c:83:63:05:
53:12:14:05:e3:20:74:a2:7d:f4:8b:e0:16:67:ed:d5:18:08:
45:4e:6a:ee:af:8b:70:c3:45:13:4f:5d:31:0d:01:88:ae:94:
fd:f2:06:18:2e:50:26:2b:71:b2:b4:0d:19:38:60:de:ee:c4:
ab:1f:ad:90:3a:ec:8c:89:1c:8a:5c:17:ad:9a:80:54:b2:24:
29:2a:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:20 2025 by rpki-client