Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: FxdkfOcqbBwcy7/bUIVzO5OiPafDikRrK6nWvsNBhkQ=
Subject key identifier: F0:88:9A:A8:DD:99:D8:33:82:E8:24:E3:15:9F:37:E0:54:CD:E7:B1
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019769617CC7358308299498CD5C223B25EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 11DC
Signing time: Fri 13 Jun 2025 13:01:25 +0000
Manifest this update: Fri 13 Jun 2025 13:01:25 +0000
Manifest next update: Sat 14 Jun 2025 13:01:25 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: XaAqX+ke0sPfK/Gs3xt6zHQj52QB+afvcxv84ZUp1/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:7c:c7:35:83:08:29:94:98:cd:5c:22:3b:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Jun 13 13:01:25 2025 GMT
Not After : Jun 14 13:01:25 2025 GMT
Subject: CN=f0889aa8dd99d83382e824e3159f37e054cde7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:0b:cd:5d:5b:16:81:56:79:53:70:aa:8e:
02:6b:23:9c:ec:81:27:99:bb:49:a7:54:44:5a:81:
31:df:e7:9e:e1:4d:c7:87:0d:ce:95:ac:99:4f:0b:
11:a8:ac:b7:1c:10:72:98:6d:3c:4e:d6:69:e1:be:
16:75:6d:cf:31:c8:90:9b:af:ad:b0:b3:e2:95:05:
6c:6a:09:da:a8:a9:5a:ca:f2:15:a5:d3:5a:44:28:
44:0a:b5:c8:70:65:5d:1c:3f:8c:40:5c:ef:88:0f:
9d:a9:91:a8:6b:50:e2:39:b9:90:05:08:32:0c:58:
27:7d:6b:be:35:f7:6c:2d:ac:ca:fa:31:b5:28:61:
52:dd:ed:f7:85:4e:53:ee:cc:ae:e1:1b:b5:19:e8:
61:e3:8e:70:ed:df:53:f1:87:6d:c1:da:b0:18:eb:
c3:91:63:99:60:67:f9:fe:23:b1:db:9e:16:57:fc:
6d:76:c8:85:6a:04:c6:20:fb:d4:bc:e0:c3:56:6c:
f0:d6:6d:ec:fc:57:39:23:60:0b:29:18:87:4d:f3:
dd:1d:ab:9c:ad:6f:d3:e8:8f:ce:9a:5e:15:b1:cb:
37:1a:47:73:2e:86:48:30:87:dc:d7:59:fd:f4:42:
10:2c:1b:bd:bd:88:c3:f6:d1:0f:03:db:2a:b9:d4:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:9A:A8:DD:99:D8:33:82:E8:24:E3:15:9F:37:E0:54:CD:E7:B1
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:51:65:c0:e3:35:c3:26:49:6f:11:09:a9:89:21:48:f8:
4d:4d:1a:b7:e5:dc:8d:e1:81:15:48:3f:0f:80:66:bf:ed:78:
e6:56:5c:1e:8c:a4:c4:87:f9:f3:5a:46:21:ce:23:d1:13:d6:
80:1f:59:d8:a7:c6:f5:99:27:02:14:1f:f9:a5:59:f3:88:1d:
30:61:e9:00:e6:99:35:c9:f9:e5:03:38:32:40:2d:37:7b:a0:
b7:66:5e:ab:6c:49:49:05:a0:69:48:10:9c:77:15:bd:f8:a5:
17:6f:42:ce:dc:2e:d1:56:32:87:6c:a5:88:6f:62:3b:c5:26:
34:92:e2:e7:c8:8c:40:73:bc:c0:71:de:83:df:ea:2c:e8:59:
de:53:83:f4:b1:71:a6:d2:ca:f2:e5:cf:6c:69:93:30:bc:b0:
2f:a2:28:72:99:64:33:9a:78:55:1f:bf:22:1e:8d:a6:dc:11:
a4:f2:71:a3:78:50:bb:44:2d:1b:2f:e6:a5:b3:52:94:27:11:
7b:32:ea:a7:f1:89:11:39:7b:6a:fd:6c:95:7d:08:20:76:10:
79:78:a1:4d:49:a1:d3:30:97:9c:a2:79:fa:7e:40:89:4b:fd:
b9:8d:63:41:b7:1d:12:90:20:97:ef:14:ad:a6:bd:3b:18:a7:
94:88:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:04 2025 by rpki-client