Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: CFWv0kbcnaBWzir95dXYo0z1GBz8/IydozG6Zc+N90Y=
Subject key identifier: F1:E0:EE:84:33:B8:85:21:7B:42:BA:F0:9E:31:D4:20:EE:9D:13:41
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 0199FFC779F8CA89CF00C3AD80F0078E3906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1333
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: EnU8NV/7ht8o4O2uA5mIxomA/HjRAWKBpcVWXMxS1Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:79:f8:ca:89:cf:00:c3:ad:80:f0:07:8e:39:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=f1e0ee8433b885217b42baf09e31d420ee9d1341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:7e:ed:6a:92:0b:dc:07:c2:9c:ac:d6:c7:
62:eb:cc:e8:05:86:b8:ea:73:43:5b:0e:d3:cc:f7:
9e:a6:c5:da:2e:eb:29:45:b6:dc:c4:90:85:5a:87:
48:c9:1a:24:11:16:d6:f2:a5:b1:c3:12:c2:53:9a:
ca:70:f9:43:0c:74:a3:a3:bc:67:e1:c6:15:d5:64:
4d:4e:96:33:1e:85:4a:15:56:19:4e:ba:1d:79:c6:
a6:31:91:73:8c:ae:70:a6:32:98:fd:d8:90:2e:4a:
2d:15:a0:e7:7b:9f:22:f5:4b:92:03:51:5e:50:4c:
50:19:14:10:44:b4:f1:d5:ee:ed:d0:fc:e7:bc:af:
08:e0:8c:62:1b:da:5a:cb:91:a0:65:f6:43:0b:e0:
81:e2:9e:c5:f9:0a:ac:41:7f:43:06:32:40:8c:c4:
1d:6e:66:2a:f6:63:b0:0d:0b:4e:9e:1a:3a:4d:54:
41:eb:98:bf:c7:ef:50:c0:0f:66:49:9a:f3:20:4b:
27:96:e9:77:85:ca:82:57:e7:b3:60:04:50:e2:ac:
66:66:84:42:10:8d:a4:a9:d6:9e:51:4d:0b:94:98:
be:0e:41:ed:5b:c7:bf:43:ee:f8:d2:40:57:f5:dc:
c0:9b:d4:69:a5:62:0a:c6:b5:c9:2d:84:c7:7e:3b:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:EE:84:33:B8:85:21:7B:42:BA:F0:9E:31:D4:20:EE:9D:13:41
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:42:99:eb:23:22:04:7d:ba:54:db:04:58:e3:fa:53:ae:62:
a3:41:19:ba:aa:47:3a:e3:83:67:e5:ed:8a:96:e1:07:80:3f:
3f:de:ec:d0:70:f2:72:f2:77:2c:4f:d4:a5:77:30:dc:5e:05:
3c:d9:40:71:7a:7b:8b:57:ad:c8:35:7b:90:69:12:3f:3f:3d:
97:2f:c1:91:32:df:67:36:4f:e9:56:57:86:a5:4a:a0:89:00:
02:d7:76:7a:56:94:e6:14:da:84:7d:d8:88:f2:5a:d4:3f:e9:
17:85:00:62:fd:93:ec:a1:7b:e7:36:f5:18:fc:56:12:ea:bf:
19:11:a6:0e:36:41:92:21:e3:05:69:78:ef:08:ab:cf:e6:22:
a3:21:41:f6:a3:75:a4:b1:f9:93:a4:cf:16:fa:4e:6c:df:06:
f7:f3:f0:59:ed:6b:10:69:bb:d5:37:5b:1b:35:e9:55:4f:8a:
f3:d9:45:37:47:d3:83:c5:bd:0a:ea:76:a8:be:23:40:69:55:
88:79:f4:ac:ad:7e:b9:33:b9:96:24:67:2f:c9:74:4a:f2:14:
b9:93:c7:f4:52:21:e9:37:81:08:e2:b5:71:e4:39:b5:89:e7:
39:23:99:29:83:df:de:1a:a8:79:bc:0c:9b:6a:de:5a:89:1b:
11:58:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:47 2025 by rpki-client