Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: HeEG+OwgOU/e/kH2ZOMQCBUPN7f/8XWSUyxxhT+ZLzo=
Subject key identifier: A4:72:C0:D1:A0:47:A6:EE:1B:98:44:DD:9E:57:67:FD:BE:2D:42:69
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0198D5BBC45F27E429AB6EDB6B67AB87B13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: ZMX/kaZODjQz1x0oI8VNkby9CH369cRZyxLybBIvfT8=)
2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c4:5f:27:e4:29:ab:6e:db:6b:67:ab:87:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=a472c0d1a047a6ee1b9844dd9e5767fdbe2d4269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:17:b0:90:3a:f6:eb:72:3a:06:65:b1:fd:
a9:4b:f8:56:f3:38:91:dd:00:be:02:54:7d:d8:f0:
b8:df:8f:81:9e:bb:ad:9b:94:41:7f:ca:cc:ca:60:
fd:e1:75:13:cb:2c:64:58:79:94:20:a3:c2:6d:c8:
ad:09:f4:7f:6f:0c:ad:d9:52:f4:6a:21:3d:59:b7:
b1:b3:47:b9:5c:f1:45:b3:8b:b1:1f:58:21:53:3f:
c8:b8:40:8b:9b:1c:b9:d4:8d:c3:df:95:41:a9:17:
62:25:be:07:70:b9:8a:2e:c6:4f:4a:e9:e2:aa:56:
9e:d7:9d:57:ae:d7:43:7e:ae:88:a7:69:9a:12:99:
85:70:38:2f:73:c9:8b:60:75:3d:60:3e:f5:51:48:
f4:24:f3:ae:4c:c9:7e:45:0e:09:db:6d:84:3f:46:
76:cd:e0:2a:b4:2e:a5:2b:e0:72:fb:4f:dd:fb:cc:
91:ab:31:0a:6e:9e:a6:13:ff:08:b4:d3:66:ce:07:
52:83:08:2b:a2:4b:a5:81:ab:89:36:00:4c:2d:74:
fd:26:e7:a1:b5:67:b7:b7:36:c5:99:1f:cb:df:b1:
41:98:f4:2f:fb:42:b2:28:88:b8:74:78:3c:da:6d:
62:2e:40:25:69:7c:42:2d:d5:0d:44:08:14:22:61:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:C0:D1:A0:47:A6:EE:1B:98:44:DD:9E:57:67:FD:BE:2D:42:69
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:9a:f1:ca:f3:4a:5f:13:b1:fc:3b:8b:ed:21:cd:4f:7f:
d9:39:f8:28:df:91:54:65:36:c3:21:d3:32:92:cd:6e:04:82:
dd:b0:44:f6:47:f4:29:5b:fd:90:d9:00:da:52:fe:b6:42:0c:
60:51:1d:c3:a4:a0:86:3b:5e:f8:12:49:d9:2c:3d:99:ad:a5:
d7:fc:b0:37:93:78:97:50:59:c3:6e:84:67:4d:da:61:4b:5e:
fe:08:d2:ab:ec:14:af:8d:08:d3:60:44:46:ac:e6:0e:5c:ea:
8d:13:62:32:48:57:72:8d:d2:84:2a:f5:7f:55:79:85:e2:cc:
e5:7e:06:e1:92:55:1d:ca:aa:22:b3:91:62:17:83:7b:26:d9:
7c:67:1f:6b:63:27:70:04:7d:98:d4:6e:f6:da:0d:80:be:98:
2a:d9:ad:d5:05:7b:ff:89:b5:e1:c5:d6:e9:d1:95:f4:77:0a:
0b:50:8e:c0:b1:a8:56:aa:66:d8:9e:c6:31:95:e9:87:1f:c8:
78:42:85:ea:fe:e8:be:eb:c3:a3:26:a3:5d:33:03:be:0d:81:
e3:ef:5f:f0:82:48:4b:12:e0:c9:e2:89:87:0f:f1:ac:c8:e6:
f0:b4:5e:06:98:48:03:9d:f6:e9:4c:5d:c8:d1:bd:a4:5c:a8:
5b:a0:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:26 2025 by rpki-client