Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json)
Hash identifier: iaYNKq1So5ZAGCfgsVhyGwpwW7jUR1CKudwv3/N2yts=
Subject key identifier: CE:87:6C:07:9F:CA:37:A3:33:1A:CF:0F:BE:EF:CB:C1:9A:24:A7:E8
Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12
Certificate serial: 01974A7B0198FA6ED8CF2876E5BFB319EC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:04 +0000
Manifest this update: Sat 07 Jun 2025 13:01:04 +0000
Manifest next update: Sun 08 Jun 2025 13:01:04 +0000
Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: nV3bySoGjHKEXlDUaqll4bT/vC4dB3r++OsU6rOCgs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:01:98:fa:6e:d8:cf:28:76:e5:bf:b3:19:ec:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12
Validity
Not Before: Jun 7 13:01:04 2025 GMT
Not After : Jun 8 13:01:04 2025 GMT
Subject: CN=ce876c079fca37a3331acf0fbeefcbc19a24a7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:14:95:2d:e5:66:0c:55:f8:70:d8:66:b1:
25:66:7e:79:50:32:35:5d:d1:af:1b:1e:31:ef:4b:
fb:13:6e:00:61:87:5a:66:cc:d4:78:e4:cc:e6:5e:
59:2a:34:92:96:71:6a:26:14:48:fe:be:60:d3:53:
71:33:39:68:c7:10:1c:6c:0b:6c:96:c6:75:8c:45:
2a:34:76:58:1b:ac:06:1a:bc:19:56:de:d1:04:8c:
9e:c8:ae:35:c1:80:66:d4:b4:09:1e:19:cf:ca:f2:
a3:58:78:ab:f3:02:1d:f4:f8:aa:60:42:39:5c:c7:
6a:7c:0e:06:ef:0f:a7:d3:84:a0:8b:c7:e8:a8:af:
5b:a9:7f:a4:3a:79:2d:73:cf:85:60:83:52:72:78:
8d:ae:ce:ee:a5:7e:ea:a3:96:fb:50:ca:d8:1e:d5:
28:b2:95:fc:96:e3:ce:1f:22:ff:e6:4a:5f:d9:ba:
0c:3a:9d:2d:98:33:40:49:2c:33:68:58:2a:57:28:
6d:18:6d:60:d3:b3:ba:08:cd:9f:8e:56:8f:f8:5d:
4d:3b:c1:bd:b7:ad:ed:c3:92:f9:2f:9b:20:46:c8:
68:02:7b:4e:1b:40:9e:8a:9d:b7:10:ef:94:7d:cf:
1d:e6:c9:75:b8:a6:6a:a2:e0:8c:d7:bf:72:04:09:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:87:6C:07:9F:CA:37:A3:33:1A:CF:0F:BE:EF:CB:C1:9A:24:A7:E8
X509v3 Authority Key Identifier:
keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ce:e7:99:89:0a:ec:55:a9:ff:14:b0:f6:97:b3:fe:ea:1d:
6f:cd:b7:5f:ac:3f:42:af:aa:6a:9c:9c:51:c4:21:e2:cd:53:
f2:57:d0:dc:7b:42:84:e5:da:62:28:b3:e0:d5:7d:c7:2a:b3:
66:2d:46:76:de:7d:14:fa:8d:44:b4:a4:5e:49:0b:2d:41:d4:
50:b2:74:3d:b8:93:74:5b:f6:c3:22:02:c0:93:d4:44:b1:2b:
a5:c7:70:bb:1e:9b:e1:da:85:0c:7b:85:aa:35:be:e3:39:c0:
38:20:05:d2:82:58:0a:77:e8:27:00:4a:72:f4:7f:ec:3b:e0:
9e:3c:49:fa:e7:3a:f6:a9:ab:cd:7f:15:79:7b:ee:0b:31:94:
00:c8:83:9b:e4:98:8b:4b:38:3d:96:e3:de:bc:ab:50:ce:f0:
cd:95:99:7c:cb:73:4b:d1:4d:9c:d0:a3:70:c4:23:d9:6b:92:
57:ea:7f:fb:d0:8d:d7:2d:6a:00:a2:51:e0:de:1e:e9:4d:0f:
c9:9a:a8:27:44:ce:5e:aa:84:72:c2:c4:6e:8b:f2:81:34:4b:
e5:54:89:24:af:61:e1:00:3b:38:7f:5b:7f:42:7e:a9:dc:fa:
09:92:48:f6:1b:40:06:33:7d:f4:78:b1:74:b5:90:eb:a6:58:
45:da:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:27 2025 by rpki-client