Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: Rr6ptHjmG7JQBpmBZ8aHNtdRJmsESg9iRRA3ZGMJHtg=
Subject key identifier: 03:32:3D:52:9C:AF:C6:CB:08:81:D1:CC:58:CE:E7:55:35:8C:1C:44
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 0199239F7B533FB4A47A82B2AA944F27A8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 12C1
Signing time: Sun 07 Sep 2025 10:01:18 +0000
Manifest this update: Sun 07 Sep 2025 10:01:18 +0000
Manifest next update: Mon 08 Sep 2025 10:01:18 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: csvISmsyfxdKbQFUrLw1kAu0g/3Mln6WMPoMVgAT5ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:7b:53:3f:b4:a4:7a:82:b2:aa:94:4f:27:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Sep 7 10:01:18 2025 GMT
Not After : Sep 8 10:01:18 2025 GMT
Subject: CN=03323d529cafc6cb0881d1cc58cee755358c1c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:87:33:4c:36:8e:20:6f:f3:04:db:00:91:
29:86:77:33:87:1d:ca:21:8d:ab:98:d9:b0:8b:ac:
46:d6:d6:2e:8d:60:52:d1:62:3d:d7:41:b9:26:37:
c1:a6:ce:a4:e3:12:bf:7a:93:e9:66:c1:56:07:b8:
63:9c:99:83:42:f1:fa:9c:3b:bd:eb:99:ad:aa:00:
f1:21:74:28:83:7d:b3:69:10:c0:d7:79:9f:50:69:
ea:10:87:f0:0c:71:cd:bf:8f:17:9c:88:52:cd:0b:
72:d9:7e:87:43:c9:ea:20:2f:9c:68:52:ac:33:d6:
a8:6a:68:6e:62:7c:a2:cf:0f:83:25:25:d2:ce:17:
93:4d:37:db:95:eb:81:58:75:0a:7b:a2:7f:5e:9f:
89:ea:e1:eb:99:0d:6d:a0:db:4f:77:34:b8:94:e8:
87:e5:ac:b1:fc:0d:c4:a5:ba:7b:37:02:91:df:26:
cb:2e:ff:a1:df:37:b0:ec:a5:fe:11:d1:19:73:76:
9f:88:38:fe:32:97:12:80:51:56:e1:ac:39:2c:29:
9b:e3:c1:76:4e:4a:47:44:c2:30:1a:e9:e8:eb:3f:
67:1f:9e:af:26:94:4e:5a:25:5d:b0:83:09:c3:fc:
2d:ef:0f:b5:ea:a9:f0:fe:e0:51:20:81:ec:cd:a9:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:3D:52:9C:AF:C6:CB:08:81:D1:CC:58:CE:E7:55:35:8C:1C:44
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:44:83:81:0f:7f:3c:0b:8e:d3:f6:68:52:c9:21:ba:5a:e8:
bb:de:9a:3f:92:e8:81:3f:2b:90:bf:09:b0:8b:42:41:d1:be:
cc:b2:50:8e:3e:e5:81:21:98:0e:bc:be:0b:52:2d:8e:c4:0c:
04:88:1c:ac:b9:d9:17:9f:cf:71:41:4d:d2:84:11:84:4d:94:
21:8b:c8:7c:a2:66:4e:d8:b7:33:72:1c:3b:14:c6:01:8f:84:
9e:19:c8:fe:8b:0a:1e:e5:42:71:b3:2f:bb:23:a2:17:94:e8:
44:aa:7a:b3:92:f2:bf:0c:f3:a5:34:29:42:b4:9e:72:fc:21:
ed:50:a8:89:53:75:8d:d8:91:04:0c:c6:15:a0:d5:eb:b2:6b:
77:be:f4:65:4a:1e:69:e5:1f:b2:2f:a7:52:4f:ef:59:b1:9a:
ef:2d:11:54:73:47:ec:48:5b:46:92:70:7e:52:18:f7:6f:f1:
31:2e:23:a2:2b:30:49:eb:91:02:2e:5b:0b:45:34:ee:0e:e0:
a4:ec:b5:08:16:59:f9:ef:c1:61:65:c9:f3:5a:7f:41:35:80:
d9:cf:31:2f:b8:74:9a:02:bf:a4:b2:00:c1:9b:ca:55:55:72:
ab:e8:a3:fd:19:cc:20:bb:e2:42:de:17:92:e1:a9:34:3f:d8:
98:b7:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:13 2025 by rpki-client