Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: jJv9ysEW6k+QzyBBHBONCQ27iMNfjpv5Lr81roXtzZE=
Subject key identifier: 55:52:52:53:C2:02:3C:3F:9C:7C:85:58:8F:31:84:C5:E3:26:CD:62
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 019848C0CCBD308C65D2AA01CAA5B2266868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: B6
Signing time: Sat 26 Jul 2025 22:00:51 +0000
Manifest this update: Sat 26 Jul 2025 22:00:51 +0000
Manifest next update: Sun 27 Jul 2025 22:00:51 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: alxNGL1lsehQQQkiR2LAzr99/isDq60zGiTTTtDublI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:cc:bd:30:8c:65:d2:aa:01:ca:a5:b2:26:68:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Jul 26 22:00:51 2025 GMT
Not After : Jul 27 22:00:51 2025 GMT
Subject: CN=55525253c2023c3f9c7c85588f3184c5e326cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:09:2d:5d:1b:2f:a4:b4:63:a8:48:b9:18:
b1:29:49:3d:d9:14:e8:f3:0d:08:8d:b8:a7:03:6b:
a3:5f:eb:e0:fc:f4:dc:1d:ca:64:c5:10:7f:04:ef:
32:90:c4:fb:a1:30:9b:f0:e2:8f:ee:50:62:74:57:
0f:72:88:57:e8:29:9f:93:00:dc:38:07:c8:12:e0:
b9:fd:90:4a:91:98:4f:3d:33:38:58:da:c3:8f:86:
25:b0:7d:0c:3b:f5:3f:d5:eb:3c:7e:10:36:7a:9f:
70:3f:8c:b8:83:e6:9f:18:d8:fb:09:d7:1b:f5:12:
77:a6:40:70:4a:4b:e4:7b:12:c4:d5:fe:cc:98:7f:
4e:be:cd:53:d3:1f:22:91:43:ab:38:c0:58:9f:66:
62:2c:99:6f:62:27:95:97:d3:2c:61:dc:99:4c:08:
22:b1:2e:f2:90:9a:82:ee:19:29:76:d9:a6:70:a9:
4d:cb:65:a4:a6:11:66:66:10:49:b3:ef:58:69:fc:
73:b5:ad:d2:a1:a9:f8:1d:fb:0c:f0:6e:6b:69:3e:
ad:0b:9c:01:f3:5c:74:a4:a1:b4:08:e1:54:ff:57:
59:2f:dc:07:a0:19:e0:7f:38:4d:bb:f3:b4:b3:83:
71:09:c0:8c:ee:74:77:52:e2:95:82:91:ce:8f:ae:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:52:53:C2:02:3C:3F:9C:7C:85:58:8F:31:84:C5:E3:26:CD:62
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f9:c1:91:01:77:39:27:b1:eb:e3:47:77:06:f4:dc:52:0a:
08:58:26:9a:81:1c:26:02:f7:28:94:e0:b4:4f:24:42:12:a8:
47:86:6e:c7:31:dd:55:59:d2:38:33:9a:d3:9c:0f:9a:a5:19:
da:de:4e:8f:35:85:14:ac:64:a3:5c:da:b4:81:9b:74:94:0c:
aa:f1:dd:61:51:43:da:76:5b:aa:96:f2:8d:90:e4:49:a2:a3:
08:b5:62:24:2e:ee:07:2b:2e:4e:2e:00:f4:01:9e:4d:0e:8d:
6b:ae:20:24:fe:ca:b0:98:76:59:03:5d:91:0e:ca:8b:61:c1:
d9:d5:d1:bc:f1:56:74:ee:c4:bc:7a:75:27:50:78:ff:f5:43:
8e:63:0b:19:ef:8a:9e:88:4d:f6:fe:9e:93:29:8e:09:77:cd:
37:15:50:2d:6e:98:fb:98:72:1d:e0:32:e3:94:da:71:ad:c6:
d5:bd:bf:be:5c:8e:b0:ef:8d:e8:3d:7d:ac:e4:db:a6:44:e2:
f5:78:8d:68:12:f5:79:7b:8d:2d:45:90:69:3b:2c:9d:60:62:
3c:32:9d:fe:56:f1:c6:4e:47:c3:36:a7:24:38:f8:6c:bf:18:
92:de:fa:b5:44:0b:60:fa:85:58:ff:30:58:7a:92:87:c8:ca:
2a:96:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:21 2025 by rpki-client