Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: OgrIEA/KZuZTjeXW29ZcJ33RKj69O20kzNmQOb8cTPc=
Subject key identifier: 7F:28:58:E6:2F:F0:AC:20:74:F5:AE:F9:1C:62:41:76:08:8E:53:90
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 019A730141987F801B2021B2965291A66DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 13:00:53 +0000
Manifest this update: Tue 11 Nov 2025 13:00:53 +0000
Manifest next update: Wed 12 Nov 2025 13:00:53 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: I1NuO0SXCMciibmImtlmG5M3Ar0ZSkSecrGXvIk4Dx4=)
2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:41:98:7f:80:1b:20:21:b2:96:52:91:a6:6d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Nov 11 13:00:53 2025 GMT
Not After : Nov 12 13:00:53 2025 GMT
Subject: CN=7f2858e62ff0ac2074f5aef91c624176088e5390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:b3:94:2e:e7:a2:ea:4c:b9:65:0e:03:a4:
02:29:5a:13:4e:24:5b:66:5f:e0:0e:b6:34:cb:6d:
2f:ef:1a:cb:65:df:5a:ad:65:24:6f:79:e8:84:7c:
95:41:28:77:d9:43:4b:57:92:08:da:01:d8:97:5d:
f3:2e:a1:99:f1:80:7c:d4:55:c9:45:3d:42:35:69:
e4:f3:5f:bc:c8:99:89:05:11:b0:70:51:11:21:f3:
36:d4:b2:cd:18:4c:0f:7a:44:51:26:d8:67:d3:3d:
24:f1:16:98:5d:f8:c0:ee:e8:6e:9a:4a:6e:e5:ef:
43:31:ea:03:cc:7b:35:ad:18:14:b6:1d:74:7e:59:
4f:06:16:b1:00:37:35:24:a3:6e:9a:1d:c1:02:b3:
f2:e3:98:00:a4:c1:f9:56:29:c6:77:8a:16:2d:d1:
a3:4e:8d:a4:fa:d7:56:65:c7:2e:f8:46:7d:fd:7d:
a8:00:df:ca:39:1e:0c:56:bf:5c:b6:ac:2e:86:dd:
54:e8:fa:28:5a:8e:1c:92:60:cc:86:0d:7e:af:52:
83:18:9b:d2:a8:b5:c6:13:bc:cf:a5:64:37:f9:b6:
4e:93:30:92:95:b5:e4:b7:af:93:f8:43:7f:14:dd:
f6:01:27:b3:48:44:a9:21:ec:e2:b0:88:6d:ac:74:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:58:E6:2F:F0:AC:20:74:F5:AE:F9:1C:62:41:76:08:8E:53:90
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:e1:f8:8a:34:ed:df:ef:94:2c:60:5e:27:04:22:87:91:
72:f1:e6:fe:b7:e2:f5:24:f0:f5:0b:02:82:d9:10:9f:9b:ad:
a9:88:4c:47:1a:ab:3f:9d:b3:b2:4c:f5:a1:05:4c:fb:d8:2c:
49:0f:60:66:8a:96:b1:56:61:32:c9:88:0e:72:2a:7a:e9:65:
c7:29:84:c7:e1:e7:be:d8:61:f8:54:01:2b:10:73:32:94:0b:
0c:40:63:ec:1f:1c:4a:c4:38:ec:ae:57:3d:e5:8a:e4:b8:72:
c2:0d:9d:d6:d2:7c:c5:58:13:db:70:cc:ba:33:c1:69:49:07:
d5:3a:0d:a4:2f:be:61:3e:cd:87:e5:d3:c0:57:5c:91:77:0b:
d8:98:7c:b8:85:ed:24:ec:be:bd:9d:92:2c:09:cd:fa:1b:88:
b8:9e:b3:f1:1d:fd:d3:08:23:b2:ee:ea:90:a7:8c:dc:e5:47:
d0:11:65:a9:97:4f:cb:2f:c2:29:d8:43:c6:ba:8a:58:48:35:
2c:15:3f:f1:5d:eb:73:6c:e5:dd:6a:e0:4b:03:17:ec:ae:58:
83:07:51:69:3e:4e:b4:12:7a:92:00:4f:bd:f2:71:12:ee:89:
dd:80:84:67:ce:75:eb:29:0a:bb:d9:ca:ee:f5:8d:e4:d1:b3:
49:31:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:12 2025 by rpki-client