Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: 6V86xtkBSKG9bqQpYQcdiGmvPlyBURp90VRhhJ04xlE=
Subject key identifier: 9A:59:4D:FE:67:2A:42:AA:67:D5:75:24:86:26:24:37:4F:2C:21:CF
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 01976F2CFC25C624CBA2569478BD381A7DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:01:48 +0000
Manifest this update: Sat 14 Jun 2025 16:01:48 +0000
Manifest next update: Sun 15 Jun 2025 16:01:48 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: 3J/8fEQaNWqKHke5K+sOaLe6tUWVlLhArkq/L0zQNdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:fc:25:c6:24:cb:a2:56:94:78:bd:38:1a:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Jun 14 16:01:48 2025 GMT
Not After : Jun 15 16:01:48 2025 GMT
Subject: CN=9a594dfe672a42aa67d57524862624374f2c21cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:42:b1:27:5e:6a:90:34:db:a6:c4:c5:a7:
cb:e7:51:fd:a1:c6:97:eb:48:13:59:44:f0:9e:89:
c3:bc:79:a3:92:48:ba:ae:06:32:7d:d2:d9:40:39:
6c:c8:e0:8a:0f:e7:d7:9c:b2:1d:26:bd:83:35:98:
48:eb:a8:cd:f2:cc:50:4c:5f:17:52:cf:df:34:81:
ad:68:08:9e:cc:e8:14:7f:d6:59:e2:10:09:66:67:
26:5d:dc:dc:14:70:27:78:d9:01:74:41:b8:8c:f4:
9d:1c:ab:4d:1e:9f:6d:d9:55:9b:b6:21:95:6d:42:
5c:92:4c:c1:11:b6:f3:4e:65:b5:23:e1:c1:90:78:
d8:74:8f:ed:cf:77:42:d6:b4:92:07:cb:f6:63:00:
4c:a1:70:38:89:26:e5:d8:f4:a5:1a:ba:0f:9a:85:
c1:fb:f3:ef:40:8f:f4:bc:77:53:e9:bb:7d:fb:3c:
cf:68:91:5c:18:f2:f5:f6:17:ac:d0:15:33:9f:ce:
8f:6a:87:38:3c:07:d2:b7:a1:28:4e:c3:13:b0:bd:
64:ae:4b:95:aa:53:dc:3f:e6:0d:ff:cd:ca:69:cf:
5a:04:4f:20:3e:a8:22:8d:27:bd:0d:23:46:0a:9d:
2f:01:78:25:bf:63:dc:1f:9d:bf:86:90:5e:fd:77:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:59:4D:FE:67:2A:42:AA:67:D5:75:24:86:26:24:37:4F:2C:21:CF
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:50:ca:ec:0c:dc:55:37:51:8d:45:6a:82:7b:64:7f:5d:
91:88:d2:e8:0d:1d:4b:d8:d3:ac:38:4e:ac:e5:d3:4f:65:5d:
e8:14:8a:ae:1b:d6:98:ca:50:df:39:ba:2e:04:e4:7f:7c:30:
a9:5e:73:75:fb:b0:5b:5c:7d:d8:d6:c5:aa:51:90:b4:93:e0:
8c:f8:75:1c:eb:d1:1d:f9:11:52:94:91:28:8d:83:65:32:c5:
58:e1:23:4d:13:c3:bd:50:42:e5:f7:05:70:c3:37:71:bf:95:
1b:36:1f:ef:a3:20:07:01:74:79:ea:13:c1:66:ee:24:16:a4:
b1:60:68:06:8e:e7:0b:91:12:3f:78:4d:4b:1e:ea:84:2a:34:
ae:f2:62:32:87:91:e2:1f:06:82:16:d4:c1:aa:d2:03:a6:f5:
d6:f2:c7:24:a8:74:69:6b:90:7c:65:3b:07:a1:81:8e:0f:fa:
69:6e:6d:fc:0c:10:6b:f0:cf:91:49:42:65:1f:01:97:b9:48:
5a:64:5d:7b:bc:a1:74:c4:8b:2c:fd:08:ce:ec:73:d7:a0:c1:
df:5a:f8:cb:ce:19:18:be:22:4e:78:cd:03:cc:0a:88:e2:20:
ed:95:15:5c:d1:96:16:cb:53:5a:70:de:09:d7:cb:3c:10:ae:
15:cc:32:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:53 2025 by rpki-client