Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier: f+7JoAkFklWO7R4OwopSn5SZ4IUMrs1A1mA7UU1DrSk=
Subject key identifier: BF:58:F8:AE:66:80:23:5F:81:DF:47:ED:D4:8F:AC:A0:F3:21:AD:41
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 019889FC8F650710CFC8F5C78FEAFB3D0694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 14:01:26 +0000
Manifest this update: Fri 08 Aug 2025 14:01:26 +0000
Manifest next update: Sat 09 Aug 2025 14:01:26 +0000
Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: ZlI8jDJpfiC1W+YIbNyacgBsjHpVqd6+aX0noaiGq3o=)
2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=)
3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=)
4: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:8f:65:07:10:cf:c8:f5:c7:8f:ea:fb:3d:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Aug 8 14:01:26 2025 GMT
Not After : Aug 9 14:01:26 2025 GMT
Subject: CN=bf58f8ae6680235f81df47edd48faca0f321ad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:8e:8c:d6:7a:ef:ab:69:d5:25:dd:f3:28:
9f:fc:31:0e:68:6b:e5:2d:f7:29:d1:53:88:2b:62:
f3:12:af:07:8d:ef:0a:57:8e:e9:48:62:91:f6:0c:
67:68:88:e8:92:bd:77:4d:60:da:36:b5:47:6c:63:
51:6a:aa:c3:0d:d3:f9:68:df:43:61:f2:f0:63:f4:
a3:00:9b:11:a7:df:ed:d2:54:e4:6b:ed:6c:2f:97:
a8:ae:e4:dd:4c:21:4e:7e:24:45:e6:6f:8d:69:5b:
fc:39:9f:59:40:d1:b7:8c:09:a0:f3:ae:49:f7:7a:
b6:3d:66:12:88:2b:9b:13:f9:76:6c:35:b6:bd:c6:
55:65:1d:92:ed:12:8f:81:14:da:0b:70:01:04:ea:
1f:84:95:fd:92:c8:cc:44:bb:84:f6:8e:fa:ba:49:
d5:1e:d1:75:9c:8a:f1:b8:61:7a:6b:d4:80:f1:9f:
32:41:3d:dc:d6:53:99:72:86:df:03:ea:8b:c3:a2:
97:1e:32:90:4f:37:39:3e:ef:d5:17:05:a2:c2:b1:
81:a7:cc:33:dd:cf:6c:60:ca:47:3f:03:b5:5d:d4:
ba:0f:c5:11:03:de:8a:08:97:38:7a:16:39:d6:df:
de:b1:b7:46:96:d4:04:2f:0a:c5:85:64:5c:ff:7b:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:F8:AE:66:80:23:5F:81:DF:47:ED:D4:8F:AC:A0:F3:21:AD:41
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0a:de:cb:00:07:8d:4d:77:a6:d0:40:ad:66:20:40:5a:21:
68:62:b8:a6:0d:a8:d9:8a:f8:84:54:3c:dd:cc:4b:80:3b:b8:
e1:8e:a0:06:45:0f:3b:4a:3a:04:f1:18:33:a8:a6:0d:6a:2f:
d9:ad:33:3f:e1:3b:b6:cd:f7:d0:a6:26:45:db:a8:3a:ed:9d:
6e:2f:4e:a0:44:26:04:05:ad:ec:6c:60:6b:8c:9a:2b:47:69:
e0:82:7f:e3:a5:6f:98:b7:64:52:12:5d:ef:3e:77:3c:35:c8:
67:59:e3:d1:07:8c:7f:9d:5d:7d:0e:d1:ac:a0:22:7b:f6:ff:
d0:1e:ed:1e:c7:1c:0f:57:2d:1c:aa:ca:22:05:7c:e4:75:cb:
41:9a:6f:e0:54:16:81:fe:1c:da:a8:46:09:fe:78:f0:65:1a:
86:30:6a:f0:7b:5e:c3:fb:71:57:42:8d:8f:90:07:b9:99:14:
a4:c4:4c:7c:f6:de:41:10:50:49:c0:ad:46:9d:e8:07:43:71:
d1:7f:35:89:3d:02:25:48:c7:20:6e:ab:f8:5c:60:4b:35:e7:
10:a7:b2:09:85:25:b1:e3:4e:98:d9:97:d6:ac:09:c2:49:07:
06:f8:8b:4c:53:15:ef:c5:45:c7:32:0c:cf:6b:51:3f:91:10:
fc:77:69:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:46 2025 by rpki-client