Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: tCXIyFLRcinnEnDbPehNm9ex8V2C4lJUVk93Y+FWYwI=
Subject key identifier: 1B:1F:0D:96:AA:30:17:04:64:37:0B:52:20:C5:72:23:CF:9F:9E:BB
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 019A4D7452FFCCE8A7E41E4E52DE42A86DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 0753
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: 0KTmbSRfcRK8-n1qcmKR418DNUs.roa (hash: P50v6XitnoLdzzBD57fVGVtkTs/as999tNUAveVrHNg=)
2: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
3: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (hash: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=)
4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: fUzTHoYsBuTVelXE5Zp1SBi7g7yfhpLI7c4TqrYg1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:52:ff:cc:e8:a7:e4:1e:4e:52:de:42:a8:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=1b1f0d96aa30170464370b5220c57223cf9f9ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:1f:e3:d3:a7:8d:7d:b3:28:4a:78:5b:99:
48:02:20:e9:da:25:ca:fe:49:1b:d6:d4:8b:66:83:
bd:b4:31:57:84:24:e1:9b:a6:93:8c:81:93:21:1b:
a1:e0:2d:2b:f9:22:6d:c9:46:0f:f9:31:55:d8:a5:
9e:e4:0e:a6:a5:bc:fd:fc:77:c3:29:cc:48:dd:f0:
54:8b:ec:d2:ae:a7:51:61:2e:72:b9:20:2e:58:ef:
bb:5c:48:02:8d:95:f3:57:f7:a2:8c:5d:29:d9:10:
09:54:81:29:4c:83:70:98:96:4b:c9:ad:a2:8e:b4:
21:c7:46:74:cf:a6:2c:9d:e8:48:3a:71:28:c4:64:
7d:6f:b6:ff:9b:3b:0e:9e:87:f1:49:09:1f:73:77:
97:e8:d4:ca:58:a3:65:bb:c0:3e:11:87:d2:d2:78:
f3:0f:c5:7e:93:31:e1:bc:e6:f5:81:27:63:4c:07:
d9:32:5e:7e:16:cf:0c:a8:07:e3:63:41:57:6d:2e:
9d:5f:a9:19:86:42:8f:5b:0d:b2:47:2b:19:c7:e6:
7e:3b:de:b7:c5:b9:f6:59:ed:7c:c2:3b:d2:09:6e:
17:dc:e8:a4:4d:be:c5:c3:d9:b6:40:4c:3f:4b:6f:
d5:ea:ad:37:99:51:e0:f9:5c:15:04:3c:00:ee:78:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1F:0D:96:AA:30:17:04:64:37:0B:52:20:C5:72:23:CF:9F:9E:BB
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:6e:d1:34:18:4e:11:56:22:de:0c:a3:57:9f:b6:b4:32:
20:8a:fe:41:0e:c1:42:a5:1c:92:30:20:35:85:c5:5a:6c:60:
f9:8d:11:8b:e6:5c:75:f7:46:b2:1f:6b:c2:ee:c7:b1:85:ff:
f8:c8:66:3c:2d:d8:ca:6b:2e:cd:b5:43:31:eb:bb:7d:f6:fc:
8b:34:5c:a3:99:eb:c3:e8:40:02:53:10:4b:54:ea:89:e8:1e:
44:99:c0:31:e6:7f:ab:76:90:1b:c0:b4:12:67:31:2a:0f:7d:
e1:ae:ae:0b:3f:44:d1:b0:87:e6:d3:85:0b:89:61:3c:f7:29:
03:9c:33:25:26:c6:47:ff:64:02:6f:06:e6:87:7b:2c:50:97:
86:0e:44:db:ce:55:75:44:77:98:63:b3:54:ec:f6:8e:3c:04:
41:c6:39:c0:80:5a:60:8f:5c:c7:d5:dd:78:89:d5:42:07:ce:
20:ac:4c:4c:8b:74:45:93:cd:db:af:a2:e3:93:87:c3:86:0d:
1f:d9:cf:55:7e:ee:c7:ba:93:8b:0c:37:16:d0:9a:32:e2:be:
f9:c3:7a:ae:87:d3:5d:f8:e6:6c:fc:85:33:62:8e:11:ce:ba:
3d:22:a6:b7:58:4c:a8:84:28:f0:43:d4:0b:bd:f1:5b:26:e0:
12:1a:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:47 2025 by rpki-client