Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: U+otdg40A/GzHW3IBAB3/4czlerBHxtVVPCpDBj2PHU=
Subject key identifier: 71:24:F8:75:C1:0F:56:F7:B5:36:A8:9E:A1:6D:70:4E:E2:C8:7C:4E
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 019A71134BDA41EAF1E3DF30810C6059D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: Y1gh+KSwTIXGQSCMMj9/VosT4WsCAzVueComEE42lEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4b:da:41:ea:f1:e3:df:30:81:0c:60:59:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=7124f875c10f56f7b536a89ea16d704ee2c87c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:27:f1:bc:7f:45:ba:e7:61:79:a2:c0:ce:
92:b0:53:71:62:21:53:18:a7:50:4f:19:b9:a1:b6:
3d:e4:5a:6e:39:ce:34:5b:b2:10:0c:6d:7e:a2:bc:
85:55:fb:ee:79:3d:a0:46:48:a2:8c:80:bd:86:da:
3e:13:a1:7c:49:63:cb:b2:d8:e1:da:30:36:74:f9:
b8:e7:c9:38:59:1b:50:66:44:a3:a5:03:28:79:40:
05:5a:9b:aa:ee:46:07:72:c6:71:70:2c:c0:f6:b8:
50:15:9f:85:bc:c8:da:b3:50:19:7f:71:53:eb:28:
2b:ec:54:ee:03:3e:83:66:07:95:62:84:b8:63:20:
57:e6:b4:71:db:6e:61:e7:70:40:1f:e8:09:df:f8:
45:33:86:e7:fa:4f:13:f0:bc:d1:cf:ea:ac:e8:1e:
5b:42:51:5e:a5:b9:41:39:58:85:d5:b9:69:dd:e5:
d6:95:0a:5e:c3:20:b0:68:97:82:51:1d:3c:0e:77:
6c:42:ca:40:a3:30:48:8d:6c:dc:dd:65:ef:2e:e4:
ff:2c:ba:e7:48:42:35:53:65:13:ae:f0:a1:58:fe:
b0:a5:c7:20:d7:43:ac:e4:bf:97:bf:13:64:0d:37:
2c:b2:b5:ef:3d:45:36:b4:42:b8:e2:d6:c7:5b:9e:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:F8:75:C1:0F:56:F7:B5:36:A8:9E:A1:6D:70:4E:E2:C8:7C:4E
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:bb:1b:d5:d6:5f:7f:cb:c5:ba:79:30:63:c6:c2:99:88:
50:16:6e:26:27:31:bc:b6:61:76:97:24:84:78:22:fa:16:a1:
03:7d:a5:86:f6:2b:92:a2:bc:7a:1b:d8:08:17:6b:73:e4:f2:
95:ab:cf:e0:9d:90:f6:1d:8f:f9:42:5f:7d:18:8a:d4:df:f2:
6f:69:4f:b7:1e:5b:f4:eb:e9:12:21:ad:fe:87:4a:50:9e:da:
fd:44:06:52:ab:c1:9e:8d:4a:45:fe:f0:d4:75:03:3e:b4:62:
83:7f:72:82:d1:71:cf:78:91:56:da:16:d2:0d:d4:f5:4b:96:
92:06:db:2a:5d:38:b6:4a:4a:92:62:e5:95:4a:b0:b8:e8:a8:
4d:ea:bb:63:b3:92:ce:47:34:dd:54:53:0f:12:b7:f0:81:e2:
30:c2:85:c4:4c:cd:a4:8f:5d:03:45:40:1c:81:60:8f:da:98:
5f:c2:03:18:74:1b:0e:20:08:c9:85:e1:2e:34:90:3e:37:22:
25:a2:a7:1c:3f:6a:2c:a9:ca:5c:21:c8:7f:9a:6b:99:19:ac:
79:a8:ab:8d:a1:f1:c9:6a:75:07:b5:c5:f8:ec:ff:60:fc:c3:
14:d2:51:e4:bf:e9:99:3f:8e:d7:ea:a3:45:d9:fc:ef:f5:a3:
f7:ab:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:47 2025 by rpki-client