Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: 3sLmlt48ifSLaqLEZXfcrYvaLIKd+57gngNZQxuL/74=
Subject key identifier: D9:E8:B8:C6:0D:1C:AC:B7:4A:2F:5F:87:F1:D6:80:B9:B2:7B:AA:B2
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 019A4F62303DDE0BEE984EEEDA93A4C2DC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0DE0
Signing time: Tue 04 Nov 2025 15:00:26 +0000
Manifest this update: Tue 04 Nov 2025 15:00:26 +0000
Manifest next update: Wed 05 Nov 2025 15:00:26 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: MjcuYj18cPues8hEWmTAbnGtddgEApuysVO5+a1lAy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:30:3d:de:0b:ee:98:4e:ee:da:93:a4:c2:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Nov 4 15:00:26 2025 GMT
Not After : Nov 5 15:00:26 2025 GMT
Subject: CN=d9e8b8c60d1cacb74a2f5f87f1d680b9b27baab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:91:4f:9e:25:09:86:5e:8f:58:42:e4:6b:
e7:44:9f:76:d6:71:06:4f:ec:6c:e8:a8:b2:7d:fd:
41:12:1d:3d:4f:7f:e3:6d:28:da:74:40:c8:cf:42:
13:5f:8a:c4:a9:2c:a6:2e:bd:64:61:b4:06:a5:69:
e7:fd:fc:93:15:88:69:34:b9:44:c7:d8:1f:32:b9:
7e:02:0a:19:de:52:d4:17:19:4d:d7:7c:9d:66:1f:
7e:fd:75:2e:4a:76:02:38:f8:83:de:ae:24:54:a2:
1a:20:d0:7d:df:9c:81:90:5e:36:97:4f:e6:b2:45:
a9:e1:9c:44:1e:4b:5c:b6:1c:f7:e5:7b:96:e1:9b:
bb:05:e6:5f:4d:86:1b:df:72:63:1b:36:06:74:bf:
93:8b:fe:25:2e:df:ee:e8:c1:11:c8:20:63:b3:19:
dd:d1:60:54:57:36:ec:c0:71:22:b0:bb:bc:dc:ec:
e6:4f:16:c9:73:fd:8c:3b:47:34:47:9d:c3:c2:a3:
97:e8:66:04:1c:b5:db:95:ae:31:a9:7f:b8:64:19:
e9:02:92:30:ad:95:e6:ef:5b:b4:c2:bc:82:32:56:
f0:e9:d2:ad:36:fb:7e:b0:e3:ab:ff:40:3b:fe:52:
b2:9b:84:a9:ad:86:fd:e6:1e:ff:fd:99:ca:a3:c5:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:B8:C6:0D:1C:AC:B7:4A:2F:5F:87:F1:D6:80:B9:B2:7B:AA:B2
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:d2:e5:69:82:9f:7c:83:77:8b:52:12:b0:eb:9f:ee:94:b4:
e7:58:b1:b4:0c:6a:34:0c:ff:17:04:01:ee:70:4b:5c:34:3f:
18:0d:44:18:56:9a:9a:0f:c6:a6:83:65:a3:b0:01:d7:8e:a7:
52:57:a8:35:78:e3:b5:96:3f:35:ad:33:24:ee:f1:85:af:5d:
b5:b3:d4:45:a0:da:b4:a7:2e:da:5c:fa:3e:d7:2c:b2:77:78:
04:88:7a:e8:61:44:1c:24:89:bd:f0:be:43:e2:ce:02:a9:e3:
30:a3:cf:91:ab:14:2f:d9:db:80:dd:cc:5b:5e:36:45:32:13:
6d:24:10:58:38:aa:0b:d3:06:84:74:fe:44:fd:4a:e1:8a:9e:
21:b5:ac:44:af:d1:28:dd:c0:2b:58:38:62:e6:13:76:68:4d:
b5:9b:04:19:a8:42:22:da:ba:dd:64:bb:62:ac:a4:57:58:93:
2f:6d:1a:73:ce:68:99:06:0c:48:e2:a9:b5:8d:bb:2f:03:53:
a6:f1:4b:32:44:ba:8b:ea:25:95:95:1d:38:24:0b:f6:c0:8e:
15:b0:b3:5d:b7:54:ec:aa:2d:e2:25:06:3e:84:93:83:15:f0:
0e:56:00:a2:97:51:ac:59:18:77:ab:6a:00:15:55:ac:2c:28:
f6:4d:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:21 2025 by rpki-client