Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: cDPLSYlWddFTIYj5QuNKNCNJ/q2yhOqd2Eplr1iHgLA=
Subject key identifier: CA:75:CC:5B:EB:7A:12:D9:94:C9:2E:C0:BE:66:40:66:9F:B6:F6:7D
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 01964D7F29F3EA26CCB1649065884403731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1149
Signing time: Sat 19 Apr 2025 10:01:41 +0000
Manifest this update: Sat 19 Apr 2025 10:01:41 +0000
Manifest next update: Sun 20 Apr 2025 10:01:41 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: SABRSI4ejrCWZVMSFpoNHONW24GUHtX1Wraz7TwQBm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:29:f3:ea:26:cc:b1:64:90:65:88:44:03:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Apr 19 10:01:41 2025 GMT
Not After : Apr 20 10:01:41 2025 GMT
Subject: CN=ca75cc5beb7a12d994c92ec0be6640669fb6f67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:f3:b5:26:b0:45:e7:12:3b:83:c1:dc:12:
53:e9:f6:e1:93:24:7e:c0:eb:8a:4a:4e:81:2b:fe:
4c:28:2c:2c:7a:4b:f6:53:bc:59:c4:e0:a5:74:60:
3e:d5:cc:97:a9:18:1e:1b:9e:56:41:64:ed:f7:a3:
a1:77:ad:49:99:b0:94:45:bb:f7:d9:8c:03:a4:23:
8c:3b:a2:2d:9f:44:94:36:68:04:bc:a8:2b:22:16:
f7:0d:c8:d7:4d:7f:d2:4a:2c:de:db:87:f3:ad:16:
d0:6e:e8:cd:d2:da:e2:20:ba:d6:a5:53:5d:5b:dc:
e8:56:2d:db:9e:ae:8f:78:bc:d8:f4:40:77:4f:2a:
ff:3b:f9:5f:23:f4:2b:59:7d:aa:a9:0c:91:d9:69:
95:00:c5:56:b0:73:78:13:ed:20:9d:2e:39:32:b7:
4d:6a:80:1b:09:d2:f5:81:1d:aa:b2:08:7e:29:c9:
ac:0a:ea:96:40:71:9f:96:c3:56:c1:0f:93:dd:18:
cd:ce:d5:1b:34:47:19:d1:57:a4:ef:70:87:74:42:
17:11:fe:01:ca:e4:29:29:c4:f4:d5:b3:64:88:2a:
41:24:70:2d:e3:60:b1:11:8e:1a:88:64:78:75:7a:
8c:93:13:89:b8:23:93:0e:dd:63:c5:05:60:2a:52:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:CC:5B:EB:7A:12:D9:94:C9:2E:C0:BE:66:40:66:9F:B6:F6:7D
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:29:f9:a5:67:7d:aa:c1:d5:51:fc:61:6c:b5:a9:34:4c:a8:
e7:07:09:ce:88:22:13:fa:08:bc:77:64:fc:a9:38:7e:5f:93:
fe:91:13:03:cb:14:86:b5:36:86:94:62:23:3f:09:5d:b1:3e:
38:c9:84:b6:00:d5:83:12:e3:f9:8d:c4:63:af:18:04:bc:49:
33:20:82:34:31:4a:b7:49:62:71:37:22:c2:ce:5f:a6:7f:17:
86:69:20:2e:b4:66:30:dd:1b:65:70:81:2a:db:c8:66:a5:10:
91:15:da:36:37:eb:c8:7d:68:d6:0b:bb:ad:40:23:da:c8:3c:
5e:52:2e:de:73:ef:99:2f:70:a9:fa:72:54:05:f1:fe:3a:a8:
e8:63:61:a1:14:e2:04:28:e6:8e:2d:a8:3f:8a:96:ed:78:91:
17:c9:c9:da:2e:6c:f7:32:aa:6e:cd:d0:4a:65:2a:6e:56:ce:
8b:50:27:98:1b:94:16:08:e2:d2:bc:51:38:96:e4:d3:c9:4d:
e7:d3:70:7f:4c:7b:8f:e3:5b:2f:ef:e8:bc:aa:21:61:70:67:
87:c4:84:fe:60:be:af:8b:9e:61:47:83:00:28:69:a8:a3:7d:
84:2d:55:47:64:da:28:e1:08:c6:80:4a:0d:9c:7e:3f:b6:7d:
97:90:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:22 2025 by rpki-client