Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: 4ItUihIcn5ApixZq8ATcEHsVjdGPxGvtCiZWLRpTd90=
Subject key identifier: E5:CA:74:E6:4E:92:4E:59:87:A4:66:71:CD:E2:CB:E0:BC:C9:DC:91
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 019A26D4B5668C8F9A56BD30D7A65B97CE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 073F
Signing time: Mon 27 Oct 2025 18:01:05 +0000
Manifest this update: Mon 27 Oct 2025 18:01:05 +0000
Manifest next update: Tue 28 Oct 2025 18:01:05 +0000
Files and hashes: 1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=)
2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=)
4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: 6qWbS+WHH/X/6xetZZKEY4BOGygRnAmiewXbrt/m1ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:b5:66:8c:8f:9a:56:bd:30:d7:a6:5b:97:ce:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Oct 27 18:01:05 2025 GMT
Not After : Oct 28 18:01:05 2025 GMT
Subject: CN=e5ca74e64e924e5987a46671cde2cbe0bcc9dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:68:1c:f2:d3:bb:52:d2:ba:7b:7d:04:c8:
75:e9:15:f6:6b:32:f3:96:1a:19:3f:ca:36:0f:f9:
8f:77:24:c8:20:80:12:29:f5:08:45:f2:e4:30:ba:
45:c0:d7:e7:66:a5:db:f4:e1:ae:8d:0e:b7:34:a3:
16:6a:b0:12:ec:30:41:57:e4:6f:55:08:d3:46:d2:
02:b5:89:5f:3f:8c:e7:9d:46:20:38:f8:ef:06:82:
d3:9b:f3:12:47:1e:b5:7e:ce:3e:96:51:ee:07:39:
fb:9b:9c:b2:d1:7e:9f:97:12:f3:0c:1b:99:a5:5d:
bb:80:b3:56:87:24:72:1d:74:b6:2d:b5:41:23:34:
83:60:4d:7f:93:b7:ac:e2:ff:f7:84:97:8c:6d:89:
72:70:4c:04:40:c2:ae:f1:e4:42:90:40:ea:0e:da:
85:12:f0:a6:54:77:43:da:3f:81:6b:93:a2:c1:ca:
ad:45:b6:a1:98:2f:2b:13:f3:63:d9:7e:54:d6:1c:
20:b2:8e:17:cf:1e:64:6e:91:bc:94:af:87:20:47:
8c:60:fb:89:c9:05:03:6e:ba:57:c2:f2:77:8e:c0:
da:03:61:84:b9:5a:84:72:9e:3d:08:1e:c6:e7:99:
83:28:28:d0:33:cd:16:c1:f5:fe:df:90:05:53:2b:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:74:E6:4E:92:4E:59:87:A4:66:71:CD:E2:CB:E0:BC:C9:DC:91
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b8:68:e9:b7:0b:50:c2:04:66:1e:3c:de:7d:0a:56:38:1b:
f6:19:3e:f0:34:dc:78:cd:d9:57:f7:81:8d:af:96:2c:ab:3f:
c2:1c:30:1b:e7:33:1c:db:8c:d3:d1:d8:81:0f:03:38:63:2a:
2b:ba:77:ef:41:fe:34:69:c6:1f:93:9e:42:99:0e:6b:98:bc:
b3:8b:b8:39:1f:f2:77:a1:d1:e6:3b:53:de:65:dc:6a:7b:eb:
86:fe:87:95:e8:61:21:72:f5:59:d4:87:90:bf:21:73:2b:b4:
53:6f:25:be:3f:b4:38:d1:d4:57:7e:3d:50:70:0f:2a:47:5c:
84:97:76:5f:18:74:a2:d4:f2:56:2a:58:5c:fa:07:27:ee:5c:
85:dd:b1:17:13:13:8a:58:44:7e:86:1c:dd:1d:e5:ad:e1:46:
f8:66:b0:58:0a:39:5b:17:15:43:9d:3e:5f:bd:77:b9:c4:74:
3a:46:bf:e5:cf:d5:17:47:55:cf:61:0f:1a:33:3a:6c:70:21:
e9:21:81:f5:f2:2d:da:58:53:c5:28:2f:4c:f9:22:a2:6f:03:
c2:a3:e4:2a:6a:94:af:32:0b:5d:ce:d9:ed:2a:cd:5f:ee:7c:
0b:81:38:e8:a1:9b:75:bb:5d:e1:d4:76:22:4c:cf:31:28:b4:
dd:bc:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:43:17 2025 by rpki-client