Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: UUn+Iq/KMwieslUZT2TziUkq8p4iSmlGHxbo4s45kGA=
Subject key identifier: DB:E7:42:25:D8:73:80:6A:32:FC:8C:FE:09:80:7B:D0:1D:B1:3F:88
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 0199FB4581722625CB6A8C025FD4970EEF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 07:01:00 +0000
Manifest this update: Sun 19 Oct 2025 07:01:00 +0000
Manifest next update: Mon 20 Oct 2025 07:01:00 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: koKVxl4poI+7135Aad78z3sBmJDUECKRsetWsp6lc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:81:72:26:25:cb:6a:8c:02:5f:d4:97:0e:ef:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Oct 19 07:01:00 2025 GMT
Not After : Oct 20 07:01:00 2025 GMT
Subject: CN=dbe74225d873806a32fc8cfe09807bd01db13f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:f4:04:5d:92:c1:4b:b2:ce:41:41:47:0f:
07:2a:87:20:53:99:2e:e9:7f:20:c4:b0:32:44:fa:
53:46:33:ce:4f:ea:4d:cb:c8:7f:84:06:18:18:aa:
c9:f5:61:29:72:66:0f:8c:6d:3c:09:93:c5:88:0d:
2c:bb:22:da:63:a8:f7:b4:53:56:8d:27:da:c6:68:
49:08:76:26:94:fa:c8:f4:3d:e2:33:cb:bb:76:2a:
de:88:93:6d:36:b7:c2:2b:53:75:71:2b:49:04:b9:
62:ba:c2:a3:b6:ca:c2:73:f3:5a:83:d7:98:b5:07:
86:b9:c7:92:60:7a:9f:a9:80:a6:58:6b:ad:ec:47:
1c:e7:60:c4:35:6f:08:ec:c8:c0:1c:6b:79:e5:cc:
e0:53:e9:0c:ab:ee:d3:b7:f3:fe:65:3e:2a:7e:7a:
00:a7:bc:53:39:06:9a:f8:05:ab:ec:7b:0c:f3:33:
df:cb:b0:0b:94:e8:db:7c:5b:f4:aa:b0:47:ad:3f:
e3:22:22:2e:2f:44:1c:23:2e:af:46:f0:97:ff:d1:
ad:0e:e8:38:7c:66:e5:e3:39:23:fa:41:c4:a7:00:
d8:4a:a4:ea:31:5b:04:cf:73:d0:70:d0:62:3f:c0:
a8:09:d7:70:9e:99:2d:47:14:a6:d0:96:da:12:5c:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:42:25:D8:73:80:6A:32:FC:8C:FE:09:80:7B:D0:1D:B1:3F:88
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a0:95:b1:d9:cb:fe:6c:22:a4:3d:0d:5b:09:00:89:19:68:
3e:42:63:02:ac:4f:12:6e:b7:5f:70:9e:f9:5a:02:08:32:10:
19:dd:7c:c6:32:6f:fb:6b:8c:1a:d0:9f:ca:29:5d:24:85:cf:
25:94:d0:ad:e2:f6:48:9d:42:9e:d2:20:0a:76:3a:d6:df:2e:
fb:83:43:7c:75:eb:67:d7:bd:f9:95:c3:ba:71:cc:14:93:ac:
ad:4e:1f:20:bc:cb:1d:39:b6:9d:40:7d:5b:72:bc:3f:6e:8d:
ba:58:b6:3a:70:3f:c3:45:09:db:3f:40:97:56:6d:38:06:7c:
97:17:66:4a:35:3a:f4:33:4b:5c:68:cf:6a:c7:34:54:0f:26:
0e:dc:e4:60:10:aa:f6:69:69:de:37:5a:8a:e4:03:21:bf:4a:
e1:cb:ee:44:0b:ee:89:9e:32:4c:2e:90:f9:fe:a0:37:18:4a:
2f:7b:ab:5d:1d:c4:9c:4a:f6:0a:80:22:b3:44:ad:7e:c1:8a:
a6:39:2a:b1:70:e1:97:ff:00:2e:3e:aa:69:f2:ff:e8:2e:c6:
9d:91:c6:2e:69:6f:75:3c:4a:4d:19:a4:bb:2b:ab:94:ae:ff:
48:06:5f:19:4a:36:99:ad:be:45:14:1f:81:5c:3b:e0:db:0e:
93:5a:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:10 2025 by rpki-client