
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: 6rulR+/ailrhBUnRPhfz98Q6z0FFK5HFaN7veDWFKfA=
Subject key identifier: B0:EE:91:79:76:F9:49:4A:C3:75:5E:86:97:A7:5C:B7:E2:57:03:B3
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 0197469E072F186C8E9A4D769CC11D93DE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 11CA
Signing time: Fri 06 Jun 2025 19:00:50 +0000
Manifest this update: Fri 06 Jun 2025 19:00:50 +0000
Manifest next update: Sat 07 Jun 2025 19:00:50 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: /vNY7/UyWlxUmnppUTHEokMWrROCGnYa/ZcUeqVsHsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:07:2f:18:6c:8e:9a:4d:76:9c:c1:1d:93:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Jun 6 19:00:50 2025 GMT
Not After : Jun 7 19:00:50 2025 GMT
Subject: CN=b0ee917976f9494ac3755e8697a75cb7e25703b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:03:03:84:c3:21:96:22:16:88:c7:1d:d9:
9c:24:dc:4f:11:76:b8:63:19:36:d8:2a:56:25:17:
26:b7:11:70:d7:bf:8f:eb:43:36:f9:2d:b9:db:87:
46:5e:73:68:6e:bc:1e:e6:a5:9a:2d:ec:e4:a0:6a:
5c:d4:62:08:9b:0a:26:3d:4b:b5:bd:92:c1:0f:80:
8a:7f:53:fe:3b:5f:80:43:e4:5a:91:ed:94:17:84:
b1:82:90:90:ed:2b:5d:a2:a2:f1:8d:3c:ce:32:72:
ee:44:76:32:ef:9c:66:f9:22:a1:d1:e1:63:03:b7:
2a:c3:ab:8a:49:3f:5e:e3:e4:38:51:1b:92:55:f6:
07:a0:cd:52:d0:83:c0:dd:30:65:42:a7:5e:1a:27:
73:b6:90:13:a4:e4:55:75:b9:d3:36:34:da:1e:26:
95:bd:13:23:f9:7c:d2:0e:b6:9c:45:a2:81:be:a6:
c9:77:8d:81:b6:14:53:42:8d:2f:19:eb:f3:da:23:
e0:f0:40:c5:7a:fd:28:4e:09:76:75:ae:a8:e9:68:
9a:1d:dc:d0:0e:15:a5:f5:91:55:d3:a4:7d:98:a8:
7c:39:05:73:40:77:a9:9a:19:0a:25:e8:95:d0:2e:
37:35:8c:d6:45:7d:0d:0d:93:91:82:8d:ff:a8:59:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EE:91:79:76:F9:49:4A:C3:75:5E:86:97:A7:5C:B7:E2:57:03:B3
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:55:85:f4:a2:c2:04:8d:3a:3f:9e:56:2e:8c:d1:22:b6:c2:
4b:b0:d7:ae:96:ea:b6:fc:02:3a:06:49:15:e5:09:b1:46:ac:
31:62:d9:c7:65:70:22:6c:17:eb:a1:cc:7f:d7:07:39:a2:81:
37:2c:f7:8b:46:63:a9:b3:23:a5:8b:5c:ba:d8:a2:31:88:54:
23:f7:13:92:2f:72:79:f9:65:35:09:d3:f5:0f:a7:29:44:cd:
a0:f1:37:c0:40:f1:89:47:ca:65:8a:58:e7:b2:79:b8:25:b7:
b3:ed:8a:08:e3:30:9c:6a:f6:07:98:71:7b:da:ea:b5:27:11:
6e:db:05:29:f9:fc:14:6c:49:d7:37:39:69:71:9a:c4:dc:58:
b6:1a:09:df:92:7f:e9:fd:fe:bf:48:9d:b5:c8:3b:fc:0b:80:
d8:72:8f:62:cc:bf:e1:fc:a3:c6:8e:ce:36:58:8d:59:27:29:
ad:bc:a2:77:2b:e3:74:9b:8b:6e:be:5e:c2:49:ec:bf:8e:7f:
5a:a6:01:9a:a5:a5:ac:a3:e6:b6:aa:7d:9f:5e:65:ec:ad:ae:
f5:a7:8f:ee:be:6e:2d:a1:ea:cf:ef:73:d3:ee:89:34:31:11:
36:c5:99:a4:ef:b6:27:5f:62:a0:d8:4f:ba:2a:a3:0e:9b:ce:
b7:ea:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:17 2025 by rpki-client