Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: XLOXNElm7XnUatqvdTUhehhLnH++hCVlx5kNJT7R3Hc=
Subject key identifier: 95:9F:E7:89:39:FC:C0:1F:2A:07:F4:62:CA:2C:46:A0:76:E5:90:C2
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 0198D47281E029139FC724A8F396C96B540B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: GTmTkmpsvVflt6dkCpOB8I6ulCiZ+gp3LK9ouHRFoYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:81:e0:29:13:9f:c7:24:a8:f3:96:c9:6b:54:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=959fe78939fcc01f2a07f462ca2c46a076e590c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:bd:f6:64:e6:81:76:04:94:0c:2a:50:fa:
12:6c:1d:3e:84:df:1c:e9:e8:fe:2a:37:ea:62:1f:
33:7d:37:b6:3f:09:1d:9b:cf:ea:1f:95:f8:e3:09:
fd:1d:20:2b:7d:2c:e3:19:4b:ea:6d:40:9a:6f:78:
16:11:65:9b:df:ea:b0:e8:8e:5a:b0:1f:8f:dd:94:
af:d7:a4:20:cb:ac:39:a4:76:e6:f7:9d:65:42:c5:
71:c2:b7:ce:da:13:d7:26:5c:8c:68:ee:bf:7b:0b:
ad:38:3a:bf:26:d5:ff:f4:54:27:5f:53:4f:04:7a:
7a:a6:56:1e:71:e5:79:05:4b:f5:c9:c0:fa:20:b7:
ec:64:e6:d8:93:cc:c2:3e:32:ac:07:63:fb:86:55:
27:50:55:48:14:49:e1:65:c3:7f:33:f1:9d:61:da:
b6:e9:14:d6:41:6a:58:18:ab:a7:a8:1d:b2:66:50:
ff:1b:38:76:da:76:e9:f0:14:94:d9:8a:0a:f2:be:
ee:90:30:d0:a3:64:ea:c9:3e:7d:e5:52:bd:8a:3d:
56:68:d9:31:4b:c0:33:2a:4f:b2:93:93:56:55:1e:
14:4b:62:98:97:ad:f6:da:69:55:a6:6d:ba:27:1d:
d6:ad:50:ab:a6:44:ff:e0:b2:c3:63:55:4d:1c:93:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:E7:89:39:FC:C0:1F:2A:07:F4:62:CA:2C:46:A0:76:E5:90:C2
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a2:e4:65:f0:b5:75:a9:cc:5c:24:0c:52:66:17:b2:22:b7:
8b:64:62:71:f0:a6:f8:25:97:e8:0d:d4:75:d2:27:14:e0:fa:
ff:94:3b:0d:1f:2b:df:78:5f:d0:b9:3a:b5:78:be:58:58:a4:
ee:cb:6f:09:ab:56:12:34:57:13:72:33:53:32:7e:14:cd:05:
e5:c9:f4:c3:f0:a0:51:f2:18:42:f8:37:08:ab:1a:d9:6d:b3:
81:d8:c8:e8:cd:93:e2:2c:00:88:94:b1:3d:7b:cf:22:84:b9:
32:6b:41:66:c4:3f:ab:50:9e:4b:c6:9f:f7:5e:e1:ab:f3:6e:
b7:9d:91:45:bd:3f:ff:41:58:71:77:f6:67:7f:4f:9f:d7:75:
34:f8:0b:eb:11:5b:2e:11:33:77:2c:29:89:cc:c5:ec:77:cb:
8a:50:a8:ba:81:6a:3f:6b:ec:c3:57:2f:68:9e:42:ad:aa:1a:
a9:e5:90:1e:25:90:5f:bd:e2:06:9e:8c:1d:2e:af:68:53:81:
95:40:78:36:a3:23:06:32:92:3b:4b:3e:40:84:f6:80:f6:a5:
fd:84:1a:b9:d3:f5:1b:f2:82:f1:2e:07:34:32:67:9b:7f:87:
a9:10:78:1f:05:b1:e2:cf:3c:b9:a9:2f:53:b6:32:e4:5d:eb:
c8:ac:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:57 2025 by rpki-client