Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier: YKX6u6zk3ksmtpGIVCTnHrApr/psgHQ98ROLGD//RqI=
Subject key identifier: E1:B4:16:EE:E4:C6:52:1C:F0:CD:B0:9D:CA:A9:A5:EE:10:29:3B:04
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 019A4FCFFF9BF198FA668EC04E1F18F54760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:00:22 +0000
Manifest this update: Tue 04 Nov 2025 17:00:22 +0000
Manifest next update: Wed 05 Nov 2025 17:00:22 +0000
Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: 6necKjFY91RiGOa7qzk7vJaP5c+/AH1DfOqmndmgWDs=)
2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=)
3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=)
4: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ff:9b:f1:98:fa:66:8e:c0:4e:1f:18:f5:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Nov 4 17:00:22 2025 GMT
Not After : Nov 5 17:00:22 2025 GMT
Subject: CN=e1b416eee4c6521cf0cdb09dcaa9a5ee10293b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:da:cd:0c:30:f0:cf:42:dd:53:cb:90:3a:
70:bb:02:ec:15:68:09:26:c5:d1:ee:b4:a9:17:ca:
14:47:9b:97:dd:5b:77:4e:9b:51:d8:df:b9:a7:64:
a9:80:bd:e5:8e:b9:bf:b3:2c:73:18:22:10:b6:c8:
ac:b1:fe:d3:b4:ea:96:cc:b3:69:2e:c6:31:ff:37:
95:02:9b:60:44:43:46:a4:58:67:0f:17:e9:19:cc:
ea:89:95:d9:b5:5b:dc:e8:b9:07:c0:c8:b9:b8:a8:
38:60:b4:9c:73:fd:26:94:02:13:05:4d:0d:6d:53:
d0:f9:4c:f8:0b:72:78:0c:d4:8f:ef:27:12:00:7d:
08:9b:07:0f:fb:be:c2:a8:d8:a9:b5:e1:4d:dd:7c:
38:24:9a:31:e7:87:84:80:84:03:41:a7:23:ae:73:
2f:15:3d:fe:f9:59:b6:7f:68:b9:e7:96:af:41:ca:
61:ec:6f:51:1e:99:cf:5a:9d:96:1c:82:c2:5a:c2:
39:49:0c:2c:01:80:4c:2a:28:b7:60:30:ce:82:8b:
ea:59:c4:93:eb:f8:1a:7a:3c:a3:52:7d:7f:27:86:
2c:cc:72:ac:ad:2a:a6:b6:17:ef:12:34:a7:0a:ad:
5b:36:38:3a:71:19:46:bc:b4:d5:78:28:57:de:c1:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:16:EE:E4:C6:52:1C:F0:CD:B0:9D:CA:A9:A5:EE:10:29:3B:04
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ac:1a:ca:32:58:41:56:3b:a2:30:d2:01:83:20:96:cc:a7:
f0:ff:64:74:63:03:a1:3d:ce:35:2c:92:8d:23:c6:75:e1:33:
36:24:08:51:23:67:d6:25:a8:16:62:9a:44:1c:67:b5:0e:5e:
1d:c7:8f:f9:eb:c6:62:a6:6c:d9:ac:28:18:70:ce:94:c1:fb:
fa:22:be:b3:34:ee:53:93:89:41:9e:c1:ea:36:c3:0b:0b:42:
d2:f3:9c:c7:c0:c8:4e:67:3d:e4:6f:bb:8d:e9:9f:cd:69:0c:
15:b8:e2:b5:6a:84:26:fe:19:16:76:b9:93:b9:6e:aa:99:c6:
39:13:6c:ab:0f:f5:17:a7:55:8e:ed:c4:14:43:8c:5d:3f:ee:
23:06:55:95:0a:94:32:92:1a:86:35:c2:72:db:f5:f5:71:85:
bd:19:84:27:29:e1:73:65:f3:f3:f1:63:3c:26:42:78:04:0d:
5a:89:a2:2e:47:0f:0b:74:42:d6:a3:1d:86:3b:2f:bf:af:d6:
e4:b5:b0:35:99:bd:2b:30:cd:b0:c5:e1:c7:7b:77:bd:9b:6a:
30:5a:d6:5b:26:41:8f:29:c7:36:c4:c5:86:9f:a4:1f:64:86:
dd:1c:20:f4:ec:36:f3:45:e5:ae:31:5b:56:23:46:2a:74:ff:
65:73:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:05 2025 by rpki-client