Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: X3X8Op1/R+F7qLdx9nY0e7naR6aLSyi9igQcha1kiTg=
Subject key identifier: D8:7C:D0:CC:FB:98:9B:85:B2:DE:5D:55:E3:A1:23:DC:F5:5B:E9:EC
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 0198D5BBB6BBA8A9A91A437E17C0527B1007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: M1Z7XTBSyRhTUxwXoqr+/IW+ZzEnP8OaEwmKxC3vqpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b6:bb:a8:a9:a9:1a:43:7e:17:c0:52:7b:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=d87cd0ccfb989b85b2de5d55e3a123dcf55be9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:86:7b:1b:d7:7a:26:9e:a7:c4:86:b4:64:
e1:1e:50:8b:82:8c:20:3d:59:6e:44:5b:00:6e:b8:
85:64:c6:9e:8d:c9:72:50:4a:e6:dc:fc:59:40:f0:
57:3f:bd:17:18:dd:cb:d2:d9:0e:d9:51:78:8d:71:
62:d2:67:21:88:9b:14:a3:d4:ed:de:89:41:bf:10:
e7:a7:8f:dd:e7:fb:05:c5:63:36:30:fa:a4:f9:5e:
e1:9a:0e:13:3c:7a:5e:18:4c:81:1a:d2:44:e2:2c:
a4:e3:ea:e3:e7:33:7f:98:27:08:e3:0f:77:3a:60:
21:19:96:2a:2b:e9:19:48:42:20:ff:66:3c:9c:c8:
a0:af:bd:5c:96:f3:77:1f:f1:9b:53:b9:54:51:84:
c3:ac:41:87:30:d3:89:c3:98:d4:eb:b3:83:91:85:
f3:b6:75:b2:dd:57:8a:25:d3:a8:b0:cc:b0:b9:76:
34:82:b9:dc:0b:80:be:93:9e:9f:75:12:42:c4:62:
77:a0:dd:49:64:79:22:e6:ee:ab:02:1c:0b:d1:b7:
27:d2:27:85:b0:70:2e:2b:77:3a:d6:0e:76:90:ce:
1f:13:fc:1c:a7:00:cb:31:f5:f3:20:58:72:a0:a8:
e0:96:70:4b:4f:8c:5a:1a:00:34:8e:6a:d5:e2:6a:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7C:D0:CC:FB:98:9B:85:B2:DE:5D:55:E3:A1:23:DC:F5:5B:E9:EC
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:36:0a:a0:a6:ea:92:7d:03:e4:39:4d:8e:d1:12:1a:3b:
ea:57:45:30:09:25:30:db:0b:54:36:55:97:0a:a0:f2:bb:4f:
df:65:c1:0a:66:7f:a1:1a:81:a5:38:66:3b:92:4e:33:62:dd:
5e:ba:e1:b3:58:7a:b0:7a:09:a4:0a:3a:87:cb:a4:a9:58:b0:
1e:7d:df:a1:c8:38:15:05:f7:4b:25:a0:f8:28:a8:6c:a1:57:
20:c3:7e:a9:6c:06:af:b7:01:b2:e1:82:58:5e:f3:fa:f6:d3:
3d:0c:74:6c:9c:c1:b4:57:bb:e9:5d:21:1e:d4:ab:7f:f6:28:
9a:19:38:11:db:5c:c4:bf:3d:68:d6:34:d0:11:db:8e:f4:40:
e2:c2:20:d7:11:83:46:70:d1:45:ed:81:1d:5d:a9:d2:9e:8f:
3e:33:b2:12:96:1c:3b:b5:f6:f5:d8:2a:4e:e9:f3:8c:a0:2d:
66:16:66:98:f6:31:b9:5f:b8:a4:bc:11:11:0c:1b:a6:d1:e7:
f3:cc:ba:9e:c3:71:f3:3a:1d:af:61:5a:f8:30:f4:88:3c:c3:
5a:96:bc:04:26:76:95:cf:76:74:ba:6a:c5:fc:f6:bf:b3:d8:
4b:4c:7f:3d:35:d4:a6:cb:b9:e0:25:5c:91:1e:92:9d:37:2a:
70:ac:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:49 2025 by rpki-client