Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: GxlGzE+n/29GNNbF3xo0L1dEzTReEYztwsHP98TZC9o=
Subject key identifier: CB:45:79:2B:44:3E:AC:44:71:F1:72:8B:D9:93:27:A1:C2:77:F9:72
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 0199FDD9A231BCACD23B9F4BB79DA38BCE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: vsv+od0uc30VfHJ+uCr2SjujV5TV+rfm0q0m5LHJIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a2:31:bc:ac:d2:3b:9f:4b:b7:9d:a3:8b:ce:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=cb45792b443eac4471f1728bd99327a1c277f972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:92:d6:d8:15:18:60:f6:45:5f:c0:f8:da:
e4:d6:d8:7f:ed:b2:a6:a0:d7:2c:bb:a9:8c:c6:cb:
5b:5a:b2:7e:c0:32:f3:29:c6:41:8d:2f:08:42:10:
95:d7:ea:cf:92:74:a7:aa:5b:e4:29:79:9e:3b:0c:
14:7d:3f:04:88:ff:f8:5c:2b:8f:07:5d:3f:eb:47:
c6:f5:1d:77:81:57:54:d5:65:e0:ac:3f:0f:59:16:
59:97:3a:e0:b6:6c:47:77:80:03:98:52:69:59:2a:
fa:62:a6:1c:a2:4a:2f:74:1b:c8:95:ee:40:42:e7:
23:ed:ee:5e:b3:e8:c1:2f:ad:24:9b:21:8d:9b:64:
50:4e:41:09:28:39:87:ff:9c:42:9d:40:d9:b2:69:
6b:f2:99:0e:af:ea:37:40:88:ba:23:7a:cd:44:58:
12:ee:69:d3:f1:46:2c:9e:b8:1e:98:a7:12:b4:e4:
cf:68:8b:5a:b7:31:24:93:a1:d0:e0:ff:de:9f:b2:
f7:d5:03:b2:97:bd:2c:fe:f3:80:09:ea:40:82:18:
55:9d:5c:e8:7d:67:55:33:64:ca:2a:72:19:9d:3f:
64:0e:fa:f3:82:81:15:d4:e2:68:f8:7a:d2:93:77:
6f:90:ca:23:25:e6:e0:c9:8a:50:d7:cb:66:bf:93:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:79:2B:44:3E:AC:44:71:F1:72:8B:D9:93:27:A1:C2:77:F9:72
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:c2:8e:08:78:7e:f9:ae:f0:74:d2:d9:dd:5e:1d:c4:87:
31:86:c8:c0:19:75:0c:79:af:2e:3b:58:19:db:8d:a3:6d:83:
db:0a:28:be:42:49:4a:7c:3b:db:f0:af:98:48:7e:7c:17:dc:
64:77:7e:f6:a8:6f:3c:08:a8:c3:b7:f8:ad:70:52:66:5f:5f:
8e:e6:fc:1e:fc:13:66:dc:29:b5:51:f6:82:b7:63:9e:bd:1a:
1a:db:e5:22:fd:e4:42:c7:a7:25:3d:a5:e9:0b:2b:63:4a:0c:
d9:e3:08:3d:6b:5c:03:fe:6c:a8:32:d7:f5:9f:6a:fd:1d:b2:
db:9c:52:f6:5f:07:ab:9c:cf:00:6d:3d:c2:ae:5b:e5:e0:05:
d5:41:4d:ba:96:2c:6c:8f:17:d2:cb:a2:e9:e9:f7:4a:f6:8b:
2c:26:df:59:38:f5:cd:c2:77:6d:6a:50:b7:5e:17:af:13:d0:
1e:4b:8d:15:10:b1:28:80:0b:be:33:2e:b6:3f:40:8d:d7:fa:
f0:e8:81:ec:01:a1:ef:9d:12:fe:20:aa:d8:91:36:29:e7:59:
c3:92:5c:13:88:b8:0c:47:42:2b:6c:bf:43:e2:4a:33:0a:6a:
38:fc:f5:5c:67:0e:c2:b4:23:30:fc:d6:7f:7f:7b:ff:23:4f:
02:14:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:19 2025 by rpki-client