Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: xP5fhdPDpla+BgGIC/it6gezufR++w/pnqhPCwYK9z8=
Subject key identifier: 3F:9E:0D:C4:04:2B:8B:37:68:1E:53:24:CE:5C:4C:BB:97:1B:63:54
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0199FB45F29CCF7F458FDD7C815DC2B0A5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 07:01:29 +0000
Manifest this update: Sun 19 Oct 2025 07:01:29 +0000
Manifest next update: Mon 20 Oct 2025 07:01:29 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: 1OFQMv29JsU6Gcn0i9GZb07p7EuX9lwax6w96l+24F4=)
2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f2:9c:cf:7f:45:8f:dd:7c:81:5d:c2:b0:a5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Oct 19 07:01:29 2025 GMT
Not After : Oct 20 07:01:29 2025 GMT
Subject: CN=3f9e0dc4042b8b37681e5324ce5c4cbb971b6354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:0b:0c:1f:e9:eb:2e:6a:04:d4:58:c8:fd:
56:79:ee:42:d9:34:4b:99:6c:ac:f5:a0:0a:c5:be:
bf:73:88:a8:53:d6:13:05:17:e9:90:6c:54:0a:b9:
39:ed:55:75:e8:a3:94:c7:b9:9c:13:94:f5:37:12:
b4:d3:2f:82:d8:fe:37:9c:89:7d:d0:da:f1:b3:6c:
fb:c8:ec:c3:14:66:34:ef:1e:5a:5b:b9:8b:ee:62:
85:3b:84:64:b4:f5:28:95:16:8d:60:3e:6b:a8:d7:
b9:a8:70:b8:f3:cf:f5:a0:b3:5a:d8:93:92:39:ea:
a9:b7:28:6b:af:e7:f2:d4:54:41:73:f5:84:b6:0d:
69:b2:a2:98:f6:29:01:fe:7b:54:4e:4f:b0:01:08:
c2:e8:d3:d4:72:9b:9e:9c:da:d9:bc:0f:1f:c7:23:
1b:b0:c9:f5:41:a0:eb:d2:cc:1c:9d:ab:59:14:7c:
7c:cb:5d:a4:a0:2c:02:c8:5f:6a:ea:c1:3d:4b:ed:
87:a0:b9:80:aa:fb:87:16:94:ba:cf:7b:69:9c:10:
ea:ce:29:a6:d9:56:8d:2a:b7:65:65:a8:07:00:7f:
a2:ee:48:fb:74:71:b3:6e:b7:9d:df:1d:59:46:34:
03:32:23:e1:56:8e:33:43:50:3f:72:a4:12:77:31:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:0D:C4:04:2B:8B:37:68:1E:53:24:CE:5C:4C:BB:97:1B:63:54
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:db:87:fe:e5:92:ba:b3:96:42:6c:b5:19:68:42:f7:62:
41:b3:97:1c:57:92:20:d4:e0:9e:c9:76:ca:d3:4c:35:94:7f:
28:b0:84:71:01:a4:8e:8a:6f:a8:76:94:0e:cd:7c:56:09:33:
45:85:45:a8:18:bf:06:e4:d2:61:58:7e:bf:b1:f8:f8:79:79:
fe:d5:29:6d:7f:97:64:98:28:7d:d5:c2:82:90:56:89:db:75:
72:67:b1:ba:f1:94:05:a0:b0:90:75:70:81:bd:2c:22:5a:13:
d6:3d:56:d2:98:8e:30:8a:02:d4:50:12:fe:30:e0:7d:0d:64:
58:05:7f:3f:53:89:99:58:9a:3f:1f:a6:98:70:4c:cb:5a:0d:
af:65:80:f5:33:3a:e8:93:54:d3:6d:8a:9b:27:a1:24:e2:18:
a5:bf:c8:52:60:8a:2a:32:a3:c1:a8:8e:cc:94:44:4b:a7:7a:
8c:fa:85:ef:26:f9:7b:52:b0:7f:25:36:c7:69:93:e9:4a:4b:
c8:69:86:3a:a5:df:fa:cd:6d:0e:dc:7f:df:42:d5:a9:ca:2f:
ab:18:f7:21:f8:9c:fd:f9:e0:fe:fa:70:23:5f:52:39:ea:6d:
25:82:45:12:19:d8:02:16:25:38:b0:02:30:d9:78:67:14:c0:
fd:dd:91:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:32 2025 by rpki-client