Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: hyokz5ojMYcnmWaNKapGLcb/Cl+GyJkmay4wqftO0Ok=
Subject key identifier: A4:16:6F:8C:01:19:49:25:08:C2:F2:4D:41:84:32:B3:A8:C0:FD:49
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019A71B79B03EE99FD7E2ADC2861D5AA993C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 136E
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: YVAojg098ri+FDkNmi76oDJxe15WlDj0pDLBi4DNJJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9b:03:ee:99:fd:7e:2a:dc:28:61:d5:aa:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=a4166f8c0119492508c2f24d418432b3a8c0fd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:1f:b7:1d:ba:ff:f1:db:23:46:55:b4:e9:
dd:50:30:54:68:83:20:ef:c5:21:6e:96:a1:3b:9e:
d4:b1:d4:7b:3c:e9:46:18:57:80:ec:6f:d5:00:24:
e8:2d:b3:67:cc:2e:0f:81:e3:14:7f:a3:be:08:af:
c7:5a:46:cc:ee:00:b0:51:56:ec:2b:cc:e0:a8:e5:
4f:05:26:59:f1:fe:95:03:dc:96:bc:d7:2e:6d:7b:
31:70:e9:62:04:a4:59:07:1f:02:2f:c0:85:e0:42:
0f:83:2c:2b:35:c0:ea:2c:c8:74:70:dd:2d:59:c2:
c5:25:04:82:21:f5:a1:4b:7a:d4:37:1b:5e:24:cd:
9b:91:01:45:91:e4:97:b1:85:31:b8:4c:51:37:5c:
de:5e:69:6d:77:cb:0c:ab:28:40:57:01:9f:27:33:
e0:ec:1e:88:ab:a8:c9:0b:40:0d:ca:43:2e:1e:ae:
19:6c:8e:9e:63:ec:4e:d1:49:7c:b5:e5:00:d3:ba:
9c:65:2f:b0:13:26:8b:4f:b8:e2:cf:da:84:67:09:
de:49:f1:b7:e5:db:19:dc:2e:6f:d2:bb:37:a7:ae:
ac:09:81:a0:5f:a8:c0:1d:f7:03:e3:75:d4:ce:5a:
e2:e1:1e:ee:a5:04:12:0e:78:77:6f:53:46:f1:ba:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:6F:8C:01:19:49:25:08:C2:F2:4D:41:84:32:B3:A8:C0:FD:49
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:39:43:75:a5:1c:cb:91:a8:6c:43:4a:8e:4a:16:67:69:
85:14:f7:be:b3:d3:7a:13:27:f1:8d:7f:aa:55:c1:97:fd:3b:
2a:60:ea:38:7c:b1:ee:81:bf:aa:d1:86:cc:25:23:e3:e1:64:
26:fb:91:2c:a8:4e:95:f3:1e:fa:87:dc:2e:cd:ea:f8:50:4f:
28:75:b2:68:98:db:20:6d:0a:2c:95:c7:46:60:ca:38:a8:7b:
e0:aa:e1:6c:69:b4:3c:83:d4:2c:80:3b:6f:e9:1f:6e:3b:04:
82:91:89:3e:d4:b4:a3:9b:d0:1b:1f:b8:55:33:ed:6e:55:e9:
a4:89:0a:57:00:66:d7:18:33:27:27:9c:d3:f9:28:05:76:1f:
07:1d:ad:24:c1:8c:3c:27:4a:65:53:c0:44:49:2c:d4:4d:58:
1c:cf:f9:2c:8c:32:6b:27:5d:18:72:44:7a:47:e3:90:12:0b:
f2:16:27:9c:36:19:e3:e7:b2:f2:5d:5b:23:2d:49:3f:5d:e7:
f6:c8:e2:77:da:a2:0e:31:fc:cc:09:60:91:56:bf:b5:e2:fa:
df:f9:2d:13:07:40:d9:f7:df:bb:41:f8:8c:16:09:99:31:75:
bc:23:7b:95:fa:fe:80:76:4d:1b:db:36:ff:72:e9:68:9e:f3:
e7:a1:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:03 2025 by rpki-client