Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: +/mjMveHWg3iaWP0HKBz8aXGl53UU055uHCZwywZNzc=
Subject key identifier: 9C:67:83:34:55:23:6F:34:EC:E0:A8:34:37:3F:0A:64:29:C2:31:D7
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0197B5FC015252F037D170C1E9C02AB92D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 10:01:20 +0000
Manifest this update: Sat 28 Jun 2025 10:01:20 +0000
Manifest next update: Sun 29 Jun 2025 10:01:20 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: Snn5Lxd9pLaGKt5c6SzGcrbQTlWs9B/OB6qCklxCxJA=)
2: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:01:52:52:f0:37:d1:70:c1:e9:c0:2a:b9:2d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jun 28 10:01:20 2025 GMT
Not After : Jun 29 10:01:20 2025 GMT
Subject: CN=9c67833455236f34ece0a834373f0a6429c231d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:a8:75:85:de:53:29:cb:8f:71:2b:ee:34:
74:9b:31:b2:09:00:e4:77:cb:5e:15:bc:c4:6d:44:
ee:ef:f5:a6:00:b0:a1:cb:23:0a:d1:11:ae:fe:6d:
7d:5c:2e:d9:1f:4f:c8:84:ac:8a:95:4f:a5:9d:53:
89:af:c5:64:da:c2:db:bd:93:1a:98:88:1f:f5:91:
ab:05:60:ac:d0:c3:21:88:bc:94:44:02:48:f2:50:
3e:1b:0b:d0:9d:4f:f9:5e:df:4e:b8:9d:96:07:d7:
82:52:16:5a:c6:eb:67:68:45:3e:a0:35:30:c5:ac:
54:ec:3b:fd:be:56:20:ae:82:f7:ed:a7:62:2f:10:
f9:a2:d7:50:7d:9d:62:bc:11:e1:df:b0:b5:59:38:
e6:58:99:2e:70:95:0b:01:eb:08:34:01:52:27:97:
fe:54:30:80:cc:6b:a9:e0:47:09:10:c5:17:d0:4d:
1f:60:b6:12:4a:db:09:72:c3:7e:f8:ac:2c:8b:e1:
12:37:0c:eb:a1:cd:76:65:dd:57:c5:39:0e:39:ce:
86:1a:14:a9:68:53:0e:e2:5e:aa:ad:d9:98:83:6d:
07:e1:35:0b:96:b9:67:99:ef:f8:2b:0e:10:6d:e3:
88:b9:1e:26:7a:6d:0e:5e:b8:fa:a2:6c:e7:6e:91:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:83:34:55:23:6F:34:EC:E0:A8:34:37:3F:0A:64:29:C2:31:D7
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:61:6c:87:36:87:40:63:eb:ab:1a:22:65:69:1e:e9:9b:
dc:cf:ce:3b:22:8c:dc:be:97:73:78:40:14:d2:a8:bf:9d:58:
dd:01:f4:77:00:f6:40:ce:ec:64:f0:70:a2:1d:69:b2:92:d1:
32:8a:28:ac:c5:dd:ba:da:8c:13:c0:9b:fe:66:56:a8:54:60:
de:86:32:93:24:ee:b7:88:d1:e4:56:7a:7d:87:b5:af:08:e6:
34:da:bc:ea:da:de:ca:61:c6:4b:76:67:57:79:8b:99:d2:a4:
2f:11:f9:c1:5a:5f:ac:41:c8:0c:c6:c2:e7:56:de:2c:4c:52:
68:e5:0c:61:07:c7:0e:8d:34:13:7f:a4:1c:86:87:64:81:07:
96:5f:de:ef:63:74:50:31:bb:52:18:e1:15:53:ae:3c:4c:24:
34:ca:9e:47:04:1a:88:55:3b:a6:25:2a:4a:c6:9f:bb:9c:81:
2a:b4:1e:ef:b3:ff:be:49:da:cb:06:80:31:ef:c4:4e:b7:35:
a1:c2:ca:cd:6b:41:a3:f9:b7:ee:93:6f:27:58:83:74:d4:66:
a7:98:0f:c5:2d:2e:4f:87:ef:b9:45:61:8c:a4:15:45:aa:3c:
1e:51:8a:7c:97:4d:87:76:f1:96:cc:2a:17:91:01:ec:5f:f4:
a2:26:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:43 2025 by rpki-client