Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: +f3t7UcsV0ndHlNGVm5oR+tCdiCXaVsLgD7jwCNOX1M=
Subject key identifier: CB:9D:31:C6:23:DF:8C:C3:A8:87:43:11:2E:2D:DB:BE:9F:D1:F4:FA
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019A4EF4A056DE09244770E9032154E2281B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 135C
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: VTkmN6kk9RxrEchHP3o8ofm5lKehFOeoy2cmOroJrIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a0:56:de:09:24:47:70:e9:03:21:54:e2:28:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=cb9d31c623df8cc3a88743112e2ddbbe9fd1f4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:0d:9c:e1:95:60:1e:65:2c:e7:8c:16:48:
6f:83:41:7a:f1:25:f4:10:2a:e5:a8:b7:14:5b:d8:
e1:0f:d7:bc:80:b5:ab:b3:5d:ca:3d:a6:9d:9b:17:
96:77:f6:c9:4d:93:95:72:8a:a0:ae:92:1e:ea:be:
d8:bb:43:8f:b6:a0:0b:4f:87:ea:10:54:92:71:a5:
67:95:f6:fc:84:43:62:13:af:7c:97:92:1a:df:3f:
a8:0c:d1:81:69:c1:3f:95:a4:82:01:46:a9:f3:4b:
4a:74:bf:01:a2:ed:8c:76:19:5f:48:cd:66:32:b6:
65:e5:23:dc:39:0a:04:ac:44:ec:3a:10:84:b1:76:
50:32:74:ef:97:40:8d:86:65:96:b7:95:d5:de:eb:
73:7e:c2:75:1d:01:45:a0:8e:97:c6:08:3b:e4:48:
1b:43:c3:6a:1c:36:2d:90:a1:0e:3f:d2:ba:0c:f4:
35:e4:05:1d:b1:29:db:e1:4c:d3:7d:05:4b:e4:7d:
ef:52:3b:2d:91:00:8e:0e:d1:03:ef:f6:84:cb:b3:
9d:8b:46:0d:19:f0:4f:cd:3d:54:0b:5d:18:46:d1:
96:9f:cb:95:50:8a:e2:71:79:69:de:e3:a8:d1:17:
5b:d0:56:ff:c3:ab:6f:d6:18:c2:62:27:1b:e6:fc:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:31:C6:23:DF:8C:C3:A8:87:43:11:2E:2D:DB:BE:9F:D1:F4:FA
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fc:42:0c:52:f4:43:fd:0f:a5:8a:cd:04:f2:12:3a:42:da:
7e:26:f7:1c:98:da:7d:41:3e:c3:c4:e0:c8:3b:df:fc:f1:3c:
80:0d:b0:d9:ab:14:b6:14:4f:12:dc:fe:cc:62:81:5c:49:94:
34:4e:4a:44:5d:60:fa:38:85:9f:fe:5a:bd:77:58:79:68:81:
b2:2a:ba:cb:1b:18:83:f5:63:5c:9f:3b:9c:e8:ae:bf:e6:ce:
61:41:81:1b:ae:fd:49:b7:94:63:fc:11:68:84:ad:db:d6:15:
2c:a0:2d:43:19:5a:6a:43:bb:c6:7e:2c:16:2d:93:cd:c7:a2:
9b:76:b8:4a:79:bb:0a:d5:8d:91:79:23:42:fa:4d:42:f0:0e:
41:b1:fe:b7:13:b1:fc:24:96:9c:87:84:03:e9:1a:58:2c:80:
90:a0:ae:b4:34:79:2e:8e:64:c1:43:90:2b:4b:58:1f:a1:a1:
fa:ba:d8:9b:8a:f6:a8:18:77:b5:f1:99:8c:29:e5:ac:0e:df:
01:0b:33:0b:75:29:f0:9d:76:48:39:46:58:81:7d:ba:14:4f:
a0:2e:1d:d9:0b:7c:7f:ab:b0:8b:fd:60:b2:ec:f6:f8:98:4c:
73:a2:b9:01:df:21:db:74:a1:c7:1e:64:91:8a:8d:dd:56:34:
8b:bb:25:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KBW3gkkR3DpAyFU4igbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw
ZjU2MWUwHhcNMjUxMTA0MTMwMDQ1WhcNMjUxMTA1MTMwMDQ1WjAzMTEwLwYDVQQD
EyhjYjlkMzFjNjIzZGY4Y2MzYTg4NzQzMTEyZTJkZGJiZTlmZDFmNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhcNnOGVYB5lLOeMFkhvg0F68SX0
ECrlqLcUW9jhD9e8gLWrs13KPaadmxeWd/bJTZOVcoqgrpIe6r7Yu0OPtqALT4fq
EFSScaVnlfb8hENiE698l5Ia3z+oDNGBacE/laSCAUap80tKdL8Bou2MdhlfSM1m
MrZl5SPcOQoErETsOhCEsXZQMnTvl0CNhmWWt5XV3utzfsJ1HQFFoI6Xxgg75Egb
Q8NqHDYtkKEOP9K6DPQ15AUdsSnb4UzTfQVL5H3vUjstkQCODtED7/aEy7Odi0YN
GfBPzT1UC10YRtGWn8uVUIricXlp3uOo0Rdb0Fb/w6tv1hjCYicb5vxQhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMudMcYj34zDqIdDES4t276f0fT6MB8GA1UdIwQY
MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt
MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2
LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvxCDFL0
Q/0PpYrNBPISOkLafib3HJjafUE+w8TgyDvf/PE8gA2w2asUthRPEtz+zGKBXEmU
NE5KRF1g+jiFn/5avXdYeWiBsiq6yxsYg/VjXJ87nOiuv+bOYUGBG679SbeUY/wR
aISt29YVLKAtQxlaakO7xn4sFi2Tzceim3a4Snm7CtWNkXkjQvpNQvAOQbH+txOx
/CSWnIeEA+kaWCyAkKCutDR5Lo5kwUOQK0tYH6Gh+rrYm4r2qBh3tfGZjCnlrA7f
AQszC3Up8J12SDlGWIF9uhRPoC4d2Qt8f6uwi/1gsuz2+JhMc6K5Ad8h23Shxx5k
kYqN3VY0i7sl6w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:14:56 2025 by rpki-client