Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: zAfRGPr7FTg/GkIWh7hbt9baO/9iniu6tlmT20lNiYQ=
Subject key identifier: 2C:1E:F0:5A:81:22:9C:67:96:23:0C:F0:C3:B9:E1:09:9D:89:ED:F2
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 0198733D2E46FAC6EF8827A585D80D6ABFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 04:00:46 +0000
Manifest this update: Mon 04 Aug 2025 04:00:46 +0000
Manifest next update: Tue 05 Aug 2025 04:00:46 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: ps1wf0a5jzBADH+5ZBeXksPzXXyIUHCpN5v3sXUDzBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2e:46:fa:c6:ef:88:27:a5:85:d8:0d:6a:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Aug 4 04:00:46 2025 GMT
Not After : Aug 5 04:00:46 2025 GMT
Subject: CN=2c1ef05a81229c6796230cf0c3b9e1099d89edf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:ff:84:0c:4f:c7:70:53:d9:eb:23:ba:25:
5d:c6:02:a3:48:e4:d7:a1:5a:f8:a8:e9:6f:96:41:
4c:56:71:63:a0:97:c4:fb:d2:66:cb:76:95:f2:1f:
bb:10:6e:6c:a7:92:a1:71:45:93:a7:bc:92:4d:ba:
8a:d2:ed:06:37:62:61:59:0b:b1:a3:0a:48:06:93:
30:3a:db:49:95:b4:3f:41:66:2d:c1:fb:5e:0a:83:
c4:66:70:e0:bc:e4:a8:ae:24:e1:db:58:4f:5e:79:
eb:d4:85:e7:4e:41:06:09:09:7a:63:e3:d1:8d:a5:
65:d8:6f:65:58:d9:06:96:99:4d:7e:fb:c2:92:40:
05:24:5c:28:e6:f2:0d:9d:9c:b8:c8:ca:dd:17:fd:
66:39:8e:22:c0:7f:cd:1f:09:51:22:99:8a:bd:39:
b6:8c:51:60:3d:94:56:65:f1:3a:8f:54:43:0c:6f:
1d:49:47:a9:59:29:f8:26:af:42:81:38:71:95:9d:
8a:db:b6:06:c7:b0:32:a0:ee:77:b9:6c:4f:d0:ee:
bb:4c:df:c3:eb:99:ab:13:92:84:1e:ad:95:0b:51:
8d:5c:b3:91:d9:75:c3:51:c8:ad:06:97:f7:c1:1e:
8b:27:fa:a2:32:7c:33:87:15:6f:6f:df:80:98:40:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:F0:5A:81:22:9C:67:96:23:0C:F0:C3:B9:E1:09:9D:89:ED:F2
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e2:ce:e8:38:0b:f4:ed:5c:99:62:bf:b5:66:be:99:fa:d2:
ad:e2:a1:68:a5:17:00:75:9a:29:bd:46:1c:83:92:f0:97:b8:
3b:4c:0e:30:11:6d:8a:62:35:eb:15:3d:d6:09:61:47:d1:5e:
fe:b3:66:18:56:ad:ad:f3:88:bc:ff:9c:cc:4c:95:88:45:03:
52:74:54:54:a4:31:a4:21:29:e0:b7:df:80:be:3a:63:de:6e:
a3:a2:80:70:39:b0:7a:da:6a:09:91:dc:ba:a3:30:e5:d6:bb:
ac:25:cb:97:38:aa:be:0b:ac:d5:01:61:1f:f1:61:0d:6b:19:
c9:5c:55:8a:40:16:43:ba:df:a4:dc:b7:ef:8f:11:73:45:ec:
32:f2:f4:0d:6b:5a:86:69:8d:66:36:e4:ce:29:c9:ee:bb:f5:
2d:05:64:f4:66:c5:90:e9:b2:b3:87:d3:01:42:de:15:01:05:
de:a1:bd:f6:f5:8f:0b:3d:b5:af:60:f8:37:2e:79:d7:0c:fe:
32:32:76:5a:a1:84:16:98:9c:cb:66:fa:13:ea:03:3a:b7:a1:
59:59:50:cb:f7:c1:b1:39:b3:c8:d9:b2:74:ee:74:dc:9e:fd:
bd:31:08:b8:42:12:78:17:bf:4c:a9:15:2f:d5:ab:a1:68:50:
c6:30:44:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPS5G+sbviCelhdgNar/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOTQ0ZGYwYTM4ZjNmNTE0OTNmZjJiYTg2Y2ZkODNjMjli
ZjgyMzkwHhcNMjUwODA0MDQwMDQ2WhcNMjUwODA1MDQwMDQ2WjAzMTEwLwYDVQQD
EygyYzFlZjA1YTgxMjI5YzY3OTYyMzBjZjBjM2I5ZTEwOTlkODllZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w7/hAxPx3BT2esjuiVdxgKjSOTX
oVr4qOlvlkFMVnFjoJfE+9Jmy3aV8h+7EG5sp5KhcUWTp7ySTbqK0u0GN2JhWQux
owpIBpMwOttJlbQ/QWYtwfteCoPEZnDgvOSoriTh21hPXnnr1IXnTkEGCQl6Y+PR
jaVl2G9lWNkGlplNfvvCkkAFJFwo5vINnZy4yMrdF/1mOY4iwH/NHwlRIpmKvTm2
jFFgPZRWZfE6j1RDDG8dSUepWSn4Jq9CgThxlZ2K27YGx7AyoO53uWxP0O67TN/D
65mrE5KEHq2VC1GNXLOR2XXDUcitBpf3wR6LJ/qiMnwzhxVvb9+AmED7cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwe8FqBIpxnliMM8MO54Qmdie3yMB8GA1UdIwQY
MBaAFDGUTfCjjz9RST/yuobP2Dwpv4I5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzIt
YjNhZTA1ZTc3NjA4LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzItYjNhZTA1ZTc3NjA4
LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuLO6DgL
9O1cmWK/tWa+mfrSreKhaKUXAHWaKb1GHIOS8Je4O0wOMBFtimI16xU91glhR9Fe
/rNmGFatrfOIvP+czEyViEUDUnRUVKQxpCEp4LffgL46Y95uo6KAcDmwetpqCZHc
uqMw5da7rCXLlziqvgus1QFhH/FhDWsZyVxVikAWQ7rfpNy3748Rc0XsMvL0DWta
hmmNZjbkzinJ7rv1LQVk9GbFkOmys4fTAULeFQEF3qG99vWPCz21r2D4Ny551wz+
MjJ2WqGEFpicy2b6E+oDOrehWVlQy/fBsTmzyNmydO503J79vTEIuEISeBe/TKkV
L9WroWhQxjBEIQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:26 2025 by rpki-client