Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: jnH1vGUgaR9+dMM675J0SlsQEfzkSqTotz+Sb6V23Ck=
Subject key identifier: 66:93:42:7D:FC:D5:FA:8E:00:E2:BF:EA:9A:54:58:9B:0B:71:9E:A0
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 0197B8908699D656C9B0F1B45B1156884A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:02:48 +0000
Manifest this update: Sat 28 Jun 2025 22:02:48 +0000
Manifest next update: Sun 29 Jun 2025 22:02:48 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: xduEWwhLTTPg5RvCOL+Or+83GCBiuNHJveCAy+DcYZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:86:99:d6:56:c9:b0:f1:b4:5b:11:56:88:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Jun 28 22:02:48 2025 GMT
Not After : Jun 29 22:02:48 2025 GMT
Subject: CN=6693427dfcd5fa8e00e2bfea9a54589b0b719ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:d2:05:77:39:81:f0:84:8e:a3:17:75:bd:
a9:82:90:57:b8:8b:30:31:4a:cc:5f:c4:fa:55:e7:
3d:f4:99:1c:30:0a:b1:35:7b:84:07:16:3e:d0:59:
f8:de:eb:54:3d:73:42:60:93:22:89:b8:51:70:c1:
e0:0d:c0:7b:d5:5c:72:b8:8e:8b:47:8c:52:0c:64:
c1:dc:ed:c6:d1:94:08:8c:03:5c:f8:9d:0e:c8:92:
11:27:bd:df:db:55:33:bd:dd:0b:0b:eb:15:fd:8f:
d2:3e:e1:69:02:6e:9c:82:60:e7:3f:34:27:8e:24:
de:60:56:cc:29:35:48:88:78:65:58:36:33:b1:09:
9a:7e:50:05:41:0c:f9:01:03:36:fc:1e:3c:f9:23:
1f:b4:bc:de:11:7b:39:68:dd:9b:2c:49:60:f8:99:
c3:f9:38:f3:a7:ca:68:cb:fa:ca:35:2d:8b:d7:92:
5b:51:50:f0:56:83:9e:38:a4:51:e6:38:9e:d9:c8:
18:59:2b:0b:6b:6a:7d:76:4f:95:89:6f:7f:60:91:
52:89:db:97:41:85:05:a3:57:e6:d3:c2:f6:b9:5a:
42:1c:38:f9:35:99:5a:c0:e1:d9:2c:0e:9c:3d:e0:
49:ab:3b:0f:42:db:6b:63:89:96:cf:50:3b:0c:67:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:42:7D:FC:D5:FA:8E:00:E2:BF:EA:9A:54:58:9B:0B:71:9E:A0
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:89:dd:96:66:39:0c:05:d3:b3:8b:1d:ee:6e:40:78:9a:
9b:1a:9f:f1:0d:22:5c:0e:9f:98:32:40:dd:40:bd:ac:de:ba:
a2:01:d2:f0:02:e2:8b:b7:c7:e9:db:51:63:3b:f2:fc:ed:c3:
e6:b9:9d:28:04:a2:ff:8b:62:90:bd:99:60:7a:45:b0:a6:a6:
08:70:97:1c:3c:45:f4:8d:3a:e3:f9:a5:b6:6c:1d:42:f9:b8:
e5:74:0e:f9:20:9b:f5:39:f0:12:cb:2c:77:6c:cb:6e:c3:dc:
95:65:82:ba:14:c5:b0:6b:7d:a7:9e:13:2d:0e:e0:2c:3c:7f:
e2:3d:c5:43:9e:1e:ec:31:02:ce:fc:84:23:a3:4c:52:2b:ab:
78:e5:97:26:90:a7:81:8a:0b:d0:e1:7f:c0:5a:39:58:c8:87:
a5:c4:e3:6d:b1:f6:70:26:83:c2:cd:da:42:fd:0a:8a:02:1c:
fb:4e:fc:77:55:e5:7c:1e:de:be:5f:df:86:9e:3d:c4:2d:40:
6c:f2:28:c0:a2:0f:af:29:a0:ba:5d:8d:b1:1c:63:49:f1:73:
8a:0a:f3:f1:9a:8c:8f:1a:3d:f6:d1:37:e6:ad:3d:6c:9e:65:
ee:79:d3:e1:b8:6d:88:df:03:7f:94:38:e0:34:f8:39:7c:ba:
36:39:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:28 2025 by rpki-client