Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json)
Hash identifier: BkIjb8WOM3J1mbszLdQUqVAPRP8sBkuv5SrW0hWAwWE=
Subject key identifier: 79:60:DB:1C:A3:06:23:B1:41:B4:40:65:9D:B8:95:FB:DB:91:1B:D5
Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Certificate serial: 019749D61E71787E103638EF67C8E8B0D8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
Manifest number: 32
Signing time: Sat 07 Jun 2025 10:00:58 +0000
Manifest this update: Sat 07 Jun 2025 10:00:58 +0000
Manifest next update: Sun 08 Jun 2025 10:00:58 +0000
Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=)
2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: INIZtjfQPDBtDlH6jNW/NNOY8gd8GIN30Kmd+JmtH/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1e:71:78:7e:10:36:38:ef:67:c8:e8:b0:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239
Validity
Not Before: Jun 7 10:00:58 2025 GMT
Not After : Jun 8 10:00:58 2025 GMT
Subject: CN=7960db1ca30623b141b440659db895fbdb911bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:a7:7f:d3:06:ab:b3:cf:6b:a8:79:d5:e7:
8b:2e:47:ef:68:5d:5f:eb:e3:89:89:47:99:86:03:
e2:df:27:9f:16:c5:26:14:4f:fd:de:f4:3b:09:ff:
31:89:60:ef:27:c9:e3:0a:20:66:7a:a1:6e:0c:d4:
12:bc:07:e0:a2:15:88:52:eb:9d:d3:ae:c4:f9:d3:
26:84:4f:07:b7:3e:ab:45:03:06:b0:0a:ff:41:d6:
c4:7a:cb:b2:be:05:4d:0a:bc:65:7a:a8:a6:19:81:
64:63:8c:f1:62:c4:a1:9b:3b:3d:47:65:b9:f5:11:
75:0a:53:99:d2:3b:7c:c3:1c:69:73:6d:31:52:2c:
1b:ec:47:a0:8f:3a:d0:86:aa:1e:51:68:84:8c:4f:
3e:e6:56:17:83:71:e2:f9:26:d2:78:cb:12:a5:00:
17:4b:b1:ba:4a:41:29:13:e8:27:29:95:41:81:a7:
00:1d:90:40:ef:17:ac:89:d0:12:9e:69:86:82:4d:
ed:93:5e:10:e7:4b:1f:fb:ad:50:bc:9b:af:3b:30:
d1:ae:5d:34:47:20:39:28:72:48:df:cf:7f:fb:8f:
56:d2:27:d3:09:76:3a:d0:96:94:58:9f:b4:1c:ef:
fd:68:69:41:32:02:0a:28:db:7c:4c:02:ba:c0:e9:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:DB:1C:A3:06:23:B1:41:B4:40:65:9D:B8:95:FB:DB:91:1B:D5
X509v3 Authority Key Identifier:
keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5a:c7:9e:ea:6c:af:d5:ec:d8:6f:88:c2:b5:56:df:b1:46:
bb:9a:3c:14:c3:83:2e:c8:73:6e:d9:13:82:9e:a4:6b:88:0e:
0c:5a:a3:1c:7f:f7:fd:a8:12:ab:3d:9d:85:34:4c:d7:04:33:
7c:69:83:ab:27:62:fb:5a:0e:2d:bf:54:10:8d:42:31:bc:a7:
72:52:24:ac:a2:da:98:f4:9b:d3:d4:ba:6f:11:f4:df:e5:8a:
5f:b7:49:cb:a1:b9:e1:09:af:21:af:9f:e9:e7:9f:1e:52:30:
59:61:ed:da:ed:8f:7d:27:c0:0b:e0:69:10:56:7c:d2:fa:26:
01:0d:59:f8:78:ab:79:2d:77:43:72:14:37:56:56:7b:f0:bb:
42:e9:61:ff:ff:e1:10:a2:c3:d9:3d:24:2f:fd:60:0e:3e:1a:
db:c4:ed:c6:81:3d:40:c0:a0:a9:2e:e5:a7:89:ae:7b:db:67:
55:07:23:cf:f8:90:8f:12:aa:2c:fc:c2:e4:06:a0:53:97:a8:
31:be:07:92:52:b4:8b:8c:87:d0:d0:50:ce:e0:61:16:f0:43:
a5:87:cf:90:b2:cd:99:9d:34:65:d0:4d:8a:c9:d4:23:c0:b5:
47:47:94:fe:2f:f1:b9:06:ef:90:6f:09:7d:99:97:ee:24:9c:
8a:d8:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:05 2025 by rpki-client