Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: Hsiana4AbdxtBb200tVCF9RFHQiWZndPGGVuI1Iq0hg=
Subject key identifier: CB:70:A6:2E:22:BB:9E:85:E3:AA:51:A2:F8:CB:D6:E1:A0:8F:34:A3
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 0197B5FC659309C52BDBD32503A5CB97F156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 10:01:46 +0000
Manifest this update: Sat 28 Jun 2025 10:01:46 +0000
Manifest next update: Sun 29 Jun 2025 10:01:46 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: lXjWBBtJGK/KiB0QicyfmDSj9m0JE+CMkI+Uk2fh2po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:65:93:09:c5:2b:db:d3:25:03:a5:cb:97:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Jun 28 10:01:46 2025 GMT
Not After : Jun 29 10:01:46 2025 GMT
Subject: CN=cb70a62e22bb9e85e3aa51a2f8cbd6e1a08f34a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:e6:e0:6a:c8:cc:56:81:c7:4a:be:ae:d1:
0f:27:6f:0b:ce:f4:65:f1:a1:54:b0:07:94:0a:3e:
86:47:ef:57:42:10:00:b6:82:33:fd:99:cc:90:3c:
e0:f7:09:6b:37:38:8b:73:4b:98:10:a5:1b:09:2c:
6a:4f:5f:75:c2:1f:dd:70:f2:05:7d:07:56:4e:0a:
34:4a:09:b1:1a:87:59:f8:78:05:22:d0:ff:d3:3f:
ec:86:67:65:4f:4b:9b:ee:81:91:1b:6a:a4:8b:30:
b4:eb:b8:34:03:43:d8:24:8e:c2:13:54:ee:75:da:
08:e3:ba:4d:9d:f7:6b:c7:e8:b0:ed:9a:c9:ec:31:
95:ba:40:ae:36:a3:91:8d:c6:83:25:57:21:41:62:
cb:20:00:db:b1:4d:82:dc:0c:44:cf:9c:f0:fc:d8:
9d:98:81:41:05:25:4b:e4:3d:c5:1c:e5:41:4e:93:
07:ae:8e:b1:e6:22:85:22:17:90:35:f4:16:25:a3:
33:02:29:91:5f:b9:ff:3a:b3:fc:6a:c7:1b:ec:e3:
96:0c:f9:e3:63:db:26:08:a7:a9:ec:08:72:77:c3:
a9:c7:19:9b:b5:3e:ce:62:a0:ba:8a:20:0a:f3:83:
32:ab:d7:97:b8:15:f3:5a:79:19:19:75:fd:95:1b:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:70:A6:2E:22:BB:9E:85:E3:AA:51:A2:F8:CB:D6:E1:A0:8F:34:A3
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c5:7f:e0:c3:04:95:c4:c3:cc:2b:0d:7c:8a:9f:ce:bc:af:
f2:19:ce:ad:4a:0d:c5:a8:f4:27:a6:f1:4a:28:46:66:67:2b:
39:d2:fe:80:1e:4a:8d:e2:c5:5e:93:14:b3:07:03:44:23:65:
b6:0f:b0:2b:68:60:47:f3:70:61:22:ca:d8:bb:3a:ce:3f:ff:
a1:78:d0:33:0b:be:42:7d:18:6e:9d:09:b1:f8:eb:80:ce:1b:
5b:de:89:72:0a:0e:cf:ff:1d:9d:3b:6f:1d:61:25:c8:fd:f9:
bc:aa:f1:d0:ba:15:59:17:65:23:9a:00:9e:95:aa:98:af:2d:
ff:5e:85:7e:73:3c:03:95:47:22:c9:c2:76:31:89:c4:ce:50:
01:2a:1d:6a:20:1e:49:98:79:f0:d3:73:a4:b6:61:2d:5e:21:
d1:3b:f8:9a:84:40:49:b6:b1:1d:d3:1e:a4:c4:4d:27:c1:43:
5c:0d:c1:4a:dd:ce:f4:9f:60:1c:75:ab:77:bb:c4:cd:d1:77:
df:84:3c:64:85:bc:4e:c7:b4:68:3a:2b:e7:93:8b:50:81:f8:
3c:a6:17:9b:b1:b6:75:52:a4:80:3b:a3:79:ea:8d:87:20:7d:
bd:4b:20:77:fb:c1:35:f0:ca:e5:ac:47:6b:36:2c:e8:4b:9c:
ab:cf:a1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/GWTCcUr29MlA6XLl/FWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOTQ0ZGYwYTM4ZjNmNTE0OTNmZjJiYTg2Y2ZkODNjMjli
ZjgyMzkwHhcNMjUwNjI4MTAwMTQ2WhcNMjUwNjI5MTAwMTQ2WjAzMTEwLwYDVQQD
EyhjYjcwYTYyZTIyYmI5ZTg1ZTNhYTUxYTJmOGNiZDZlMWEwOGYzNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySnm4GrIzFaBx0q+rtEPJ28LzvRl
8aFUsAeUCj6GR+9XQhAAtoIz/ZnMkDzg9wlrNziLc0uYEKUbCSxqT191wh/dcPIF
fQdWTgo0SgmxGodZ+HgFItD/0z/shmdlT0ub7oGRG2qkizC067g0A0PYJI7CE1Tu
ddoI47pNnfdrx+iw7ZrJ7DGVukCuNqORjcaDJVchQWLLIADbsU2C3AxEz5zw/Nid
mIFBBSVL5D3FHOVBTpMHro6x5iKFIheQNfQWJaMzAimRX7n/OrP8ascb7OOWDPnj
Y9smCKep7Ahyd8OpxxmbtT7OYqC6iiAK84Myq9eXuBXzWnkZGXX9lRtp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtwpi4iu56F46pRovjL1uGgjzSjMB8GA1UdIwQY
MBaAFDGUTfCjjz9RST/yuobP2Dwpv4I5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzIt
YjNhZTA1ZTc3NjA4LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzItYjNhZTA1ZTc3NjA4
LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcV/4MME
lcTDzCsNfIqfzryv8hnOrUoNxaj0J6bxSihGZmcrOdL+gB5KjeLFXpMUswcDRCNl
tg+wK2hgR/NwYSLK2Ls6zj//oXjQMwu+Qn0Ybp0JsfjrgM4bW96JcgoOz/8dnTtv
HWElyP35vKrx0LoVWRdlI5oAnpWqmK8t/16FfnM8A5VHIsnCdjGJxM5QASodaiAe
SZh58NNzpLZhLV4h0Tv4moRASbaxHdMepMRNJ8FDXA3BSt3O9J9gHHWrd7vEzdF3
34Q8ZIW8Tse0aDor55OLUIH4PKYXm7G2dVKkgDujeeqNhyB9vUsgd/vBNfDK5axH
azYs6Eucq8+hgw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:19 2025 by rpki-client