Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: 02pv/afFbPm7rQ11EWret2bHQ/WEh3pPROKF6Y4NIKg=
Subject key identifier: AF:84:A1:B0:FD:C4:81:36:0E:B7:22:09:A6:27:37:D8:08:8E:E0:0B
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019873E2A9536FCC0BFC8A548E7D65B4473E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1266
Signing time: Mon 04 Aug 2025 07:01:30 +0000
Manifest this update: Mon 04 Aug 2025 07:01:30 +0000
Manifest next update: Tue 05 Aug 2025 07:01:30 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: DWEO852R5uVEt0OpBn9hT1n5W8tXhAQOVaIC2TzOaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a9:53:6f:cc:0b:fc:8a:54:8e:7d:65:b4:47:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Aug 4 07:01:30 2025 GMT
Not After : Aug 5 07:01:30 2025 GMT
Subject: CN=af84a1b0fdc481360eb72209a62737d8088ee00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:4e:5d:e9:29:68:5e:91:de:75:bf:16:a2:
52:2e:ac:a8:a1:2d:cf:95:7a:c2:56:d9:c9:29:e3:
18:6d:2b:9c:3c:79:8e:16:4b:02:d3:50:61:0c:ea:
ee:0c:1a:96:42:72:72:a6:a5:e9:ca:4f:76:fe:a5:
8f:13:2d:a3:27:2b:4a:18:a3:c4:fc:3a:65:0b:7c:
0a:3a:e7:d0:10:df:e2:1e:3b:d3:3d:76:b3:6d:39:
65:4a:e9:3d:cf:41:33:ee:aa:e7:9c:e4:f8:86:eb:
8e:1a:ad:e1:09:9e:15:b6:1d:6c:63:35:05:c3:9c:
fd:9c:69:93:89:72:10:99:1c:68:3f:4c:27:da:2c:
48:90:bc:32:30:43:3c:7e:02:b2:5c:fc:0d:6f:bd:
cb:91:12:8a:e7:cb:66:03:94:d2:48:a4:83:84:33:
55:85:fc:19:9f:6f:ce:19:d4:48:9c:9c:71:93:05:
59:fb:eb:6d:d9:a5:dd:59:81:18:8a:37:3b:82:e9:
c7:80:c5:0b:c5:8a:9e:c6:0b:af:c1:11:40:29:5f:
13:3b:9d:24:45:27:2b:e4:2d:1e:b4:d5:89:c9:93:
2e:4d:a1:37:40:54:ee:4e:d6:95:d3:d2:17:fa:80:
2e:39:b1:bb:e5:39:b8:06:c4:29:0b:34:95:57:53:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:A1:B0:FD:C4:81:36:0E:B7:22:09:A6:27:37:D8:08:8E:E0:0B
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:ff:67:c1:1a:87:bc:69:b5:69:fb:8f:88:17:66:19:06:
21:a3:e2:77:5b:ee:49:3b:0b:58:b1:99:62:87:5a:e2:d8:f1:
b1:35:23:eb:a5:4f:38:8b:04:b2:bc:a5:22:8f:81:54:cb:49:
2e:c9:05:d5:d4:9e:3d:c1:13:89:58:19:69:a7:09:0e:9f:9e:
19:e1:4f:fe:4a:c1:21:43:11:44:51:a3:60:fb:da:71:06:bc:
d1:e4:6a:5f:b9:ee:f8:b6:05:81:36:a6:04:3b:b5:a5:32:e2:
82:87:a8:90:dd:54:ef:d4:ce:b0:d4:20:45:53:10:88:c1:d8:
ff:9d:35:cf:55:d4:07:ad:4d:fb:97:10:ca:35:b7:a8:43:ca:
37:16:92:bf:a1:c8:67:2d:c7:37:9d:27:14:19:9a:f0:14:e4:
36:36:97:6c:b4:b0:68:7c:d3:79:b3:8c:7d:17:1e:fd:9f:38:
d7:8d:78:9d:cc:69:d9:74:0d:8c:fa:6e:7a:43:53:36:fd:d9:
da:cf:66:3a:eb:3f:05:f9:94:1c:44:02:30:53:22:90:53:47:
6c:02:3d:b0:7a:21:67:10:33:a6:6e:ff:55:76:11:e4:b8:87:
df:0c:3e:e7:98:c3:bf:82:c5:2f:1b:b3:b0:48:62:21:b7:58:
26:8a:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:41 2025 by rpki-client