Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: WC/PWWhp011uTrkxToq3XLSvqhqA085hYP7eSLNfUMg=
Subject key identifier: 56:3D:BA:6A:4B:54:68:3E:F4:BB:AA:3C:DE:4F:11:07:29:17:CA:5D
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 019653495C86936988DF799BAD7778978DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 13:00:38 +0000
Manifest this update: Sun 20 Apr 2025 13:00:38 +0000
Manifest next update: Mon 21 Apr 2025 13:00:38 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: XS/7lxLnMLMPxxw4U8wMVTHziZFk7Lpo6/+eMidMKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:5c:86:93:69:88:df:79:9b:ad:77:78:97:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Apr 20 13:00:38 2025 GMT
Not After : Apr 21 13:00:38 2025 GMT
Subject: CN=563dba6a4b54683ef4bbaa3cde4f11072917ca5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:22:0e:bf:a3:a2:87:f1:8f:0a:8d:a4:7f:
02:9a:c7:3e:e9:d9:d3:3a:8a:44:8c:dd:a7:81:c5:
be:7b:64:5d:6a:6f:f7:ff:c3:72:12:19:06:5e:c3:
7b:97:24:cf:c3:4f:8d:2a:92:82:8e:b9:ec:f5:45:
0a:68:e9:f4:8d:b1:b9:d7:61:a2:1c:50:ac:97:cc:
2d:d3:e1:52:b7:c2:d3:33:53:9c:18:42:44:d6:37:
c2:fe:a2:a4:8a:82:d9:52:56:38:ee:bc:57:cf:e5:
7a:9e:32:ed:f9:d7:31:c1:4c:f0:e2:33:e3:8b:bc:
70:29:6b:d1:61:e9:23:d6:2c:33:50:14:2b:be:29:
49:64:d9:31:94:f1:67:82:47:fe:56:ad:b4:6f:cf:
11:0a:43:84:81:03:9b:a6:77:66:85:76:6e:64:ee:
a2:0e:70:d1:35:71:23:1b:92:eb:4d:f5:48:e0:74:
0a:ad:6d:fa:00:c3:3f:7a:83:7e:06:11:59:38:f2:
ff:fe:90:53:d9:19:96:0e:9d:4c:d1:58:6d:42:3f:
4f:8b:6b:41:15:d3:35:e7:ce:f9:41:08:14:f4:e8:
b6:b7:98:31:b2:4c:5d:ad:24:54:b2:d2:c6:31:f1:
2f:4b:b9:19:b3:c8:aa:25:18:7c:2c:e8:cc:ab:16:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:BA:6A:4B:54:68:3E:F4:BB:AA:3C:DE:4F:11:07:29:17:CA:5D
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7b:ec:33:b2:e6:4b:8a:34:9f:17:da:e5:2d:60:f6:8c:80:
f9:f3:93:58:71:00:aa:a1:1f:ce:1c:f8:5e:94:d5:d0:b7:05:
f4:81:ca:2f:01:b6:a1:45:4a:bb:49:4c:45:45:1f:91:b6:1a:
cb:46:e8:90:1c:cb:7f:5a:a4:db:3a:d7:42:0d:90:d8:7f:8d:
d3:cb:64:a6:9b:90:cc:c9:fc:02:4c:aa:b5:a3:4b:74:aa:07:
c7:e5:71:db:ef:e0:0a:19:f7:a0:56:6e:c9:f1:79:98:7b:34:
c4:92:93:00:ba:0e:73:d1:48:b1:41:21:d7:cb:5b:82:50:67:
db:50:39:5d:65:8f:20:ef:5d:b9:83:ad:ec:01:ff:46:1e:c9:
ee:69:1f:02:83:7e:e4:9a:eb:32:ea:93:34:2b:2a:52:45:c9:
92:51:78:9e:51:ad:38:32:44:1a:24:4e:6e:42:2c:eb:f2:29:
4b:12:ce:80:06:07:2c:b1:ed:cc:70:48:bd:51:b4:a0:86:f3:
83:3a:f6:d3:c7:ea:3c:a4:04:68:ea:6a:54:9c:1b:2b:f5:d9:
63:ed:80:fc:65:15:88:90:d9:22:3b:f6:fc:56:9d:e0:8f:6f:
99:e7:2f:5c:d2:c0:61:e1:d6:97:7a:e5:79:e0:c5:1b:cd:3f:
eb:74:b7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:27:44 2025 by rpki-client