Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: skt4PNR8aJzNLUPFKOGwZr2CQVLJBaA1Ug6cM0Gj9ZQ=
Subject key identifier: C6:B0:9F:52:F7:D8:81:CC:4C:1F:EF:48:99:79:2E:AC:38:CD:32:C5
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 019873E25D7E9CBF90AEC0301866C32D04BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: /c1CVjjj25o38rBQXaBf43XMHL3j3Pf1Y3xo21eFkqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5d:7e:9c:bf:90:ae:c0:30:18:66:c3:2d:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=c6b09f52f7d881cc4c1fef4899792eac38cd32c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:07:13:a8:9a:07:97:51:1b:c3:e0:78:2d:
fd:c3:1f:a9:9e:1d:82:48:4a:43:12:3c:0d:20:1d:
9a:58:78:0b:4e:fb:65:be:1a:79:2a:c8:e8:52:59:
90:14:44:31:e5:53:cd:2f:b9:d7:d8:ea:dd:38:b0:
25:18:b3:a2:e5:c7:7a:9b:71:20:ef:79:fa:61:ed:
9e:33:f5:8c:bb:b1:9a:a8:29:21:30:fb:9b:ca:ed:
80:6d:19:59:6d:df:a4:ed:8a:5d:40:b0:aa:aa:a1:
d9:4e:dc:a5:61:b9:f3:38:96:e6:b0:cd:3c:e2:ef:
fc:0c:59:bb:5a:23:55:21:a2:a5:e0:a8:03:5e:3a:
66:63:76:38:fc:60:87:02:f1:e2:7e:84:2a:c7:6e:
32:57:a5:02:6d:0c:a8:46:1b:cd:22:14:ab:61:c3:
d7:a5:1f:09:cc:f5:29:20:e6:9f:a0:d7:98:31:ea:
28:a0:f7:fd:54:cc:28:82:f2:85:14:d0:04:1f:87:
a5:f4:40:ee:96:af:7b:93:e6:f0:a4:c4:75:2f:87:
0c:d4:63:6b:71:4b:e2:e0:c5:41:01:12:c3:1b:c7:
56:f5:33:88:56:64:b6:c8:61:5b:88:95:46:fe:55:
78:c9:b2:3c:ed:bb:32:5f:1f:ff:1a:0a:25:ba:d3:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:9F:52:F7:D8:81:CC:4C:1F:EF:48:99:79:2E:AC:38:CD:32:C5
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:f1:97:28:e5:05:96:28:b0:1f:9a:3b:f9:ad:c9:15:0c:
54:9b:d0:eb:0f:bd:f2:7a:d2:b0:4c:cd:c5:0e:b2:76:e7:10:
aa:e4:ac:ca:b7:0c:54:da:1c:bb:71:19:62:22:cf:93:83:a0:
b3:f7:53:4d:5d:0f:0b:a1:45:a4:33:58:7a:1a:7a:ed:79:80:
97:b7:2e:10:23:14:60:31:02:5e:4e:c1:a9:7f:72:c0:f6:85:
ef:d7:81:cd:5f:1f:21:27:ae:de:ff:60:8f:d0:6a:f8:85:d6:
c0:21:bb:8e:33:58:c4:14:2f:b6:f7:0f:59:00:4e:97:04:00:
74:c1:be:f5:c7:81:f9:78:fd:d5:5f:ee:a9:14:4c:fa:f2:36:
cb:75:6c:70:cd:a1:ea:df:4a:35:f6:1d:0e:35:23:2e:91:a3:
d1:66:c4:93:2f:ec:29:59:97:1d:68:5f:7e:bb:f9:12:3b:ae:
f7:53:c0:bc:71:5a:59:fc:2d:88:b3:3c:3d:3e:21:18:6b:81:
ab:7a:5d:dc:ad:86:43:35:e4:b8:45:d8:df:46:b5:28:b3:35:
d3:4e:c3:38:16:78:47:41:3f:da:a5:96:01:f2:9a:ac:f2:91:
eb:91:ff:41:71:fe:c3:35:a0:62:bc:87:6e:9c:8d:c5:ea:8c:
5e:6b:cb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:18 2025 by rpki-client