Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: G5emWxkhP7KxcAKvvIgJfWHwvYGIZ/Z/bHT4t/aM0Pc=
Subject key identifier: 1D:69:9B:AB:86:3F:BC:DE:DF:77:98:85:7A:2E:FE:3E:38:F3:9A:0B
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 019685ED64D9E367966A8C88EA86000E736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0BEA
Signing time: Wed 30 Apr 2025 09:00:49 +0000
Manifest this update: Wed 30 Apr 2025 09:00:49 +0000
Manifest next update: Thu 01 May 2025 09:00:49 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: AAusNGnyuzN3ritpzbJ8WBgDPf+qe5/vnsBzhCc656M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:64:d9:e3:67:96:6a:8c:88:ea:86:00:0e:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Apr 30 09:00:49 2025 GMT
Not After : May 1 09:00:49 2025 GMT
Subject: CN=1d699bab863fbcdedf7798857a2efe3e38f39a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:c5:85:fb:03:c8:96:2c:98:03:8e:2e:34:
a6:6a:11:52:0b:03:18:9f:bd:0d:66:ee:03:72:81:
bc:94:9d:41:ca:62:77:a3:90:5a:27:99:73:05:16:
3d:21:b3:6d:63:96:79:56:95:9e:1d:67:3b:f4:45:
46:aa:dc:6f:33:fa:d6:05:17:33:18:b5:01:00:d9:
10:20:c9:18:d2:50:58:6e:75:d5:c6:66:0c:80:27:
e4:c5:5d:9c:ec:f4:88:72:72:eb:4e:c9:59:d0:35:
40:c3:9d:0b:18:7c:07:73:26:f7:9e:52:68:fb:c3:
98:1e:5f:5e:e1:e1:09:94:1f:24:bf:fe:f0:30:6c:
58:46:9e:b6:65:c9:fe:21:77:8a:98:d0:e5:e8:13:
d8:79:ac:7a:58:c6:d0:68:d1:f9:a0:a8:78:25:dc:
9f:18:24:14:e4:34:79:13:15:6e:83:e6:88:c1:58:
bc:16:af:41:2f:74:39:1e:3a:b1:94:79:97:d9:08:
fa:ff:2b:6e:79:28:2c:78:38:94:d2:73:93:4e:89:
ad:54:17:15:ee:16:7c:9d:9d:ed:73:f7:8e:ad:a2:
d1:b3:fc:72:f0:07:04:bf:93:f2:d8:60:c1:ef:c3:
19:4f:c5:10:1e:09:f3:9d:b8:74:ff:f8:4c:62:75:
79:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:69:9B:AB:86:3F:BC:DE:DF:77:98:85:7A:2E:FE:3E:38:F3:9A:0B
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0e:93:05:c1:17:eb:16:24:8f:f0:dc:51:3d:5a:ef:ff:11:
e2:81:52:73:54:49:7d:fc:00:0b:f3:e2:bc:10:91:11:25:2c:
66:58:9e:0c:da:d2:92:18:8c:d9:1c:6f:41:13:cd:9a:d6:53:
ba:56:ed:b7:65:f4:58:cf:19:e8:39:5f:3f:81:d2:74:39:61:
dc:7c:2f:85:12:bd:99:96:32:b6:7b:a0:f4:59:d9:9f:0b:64:
26:16:55:2a:1a:3d:75:e7:3e:6f:9c:6a:ab:1d:bb:53:ff:23:
1e:83:c2:5e:39:1d:c5:b1:3a:01:3a:39:bd:dc:0f:3d:fe:61:
95:14:ae:37:62:c2:0b:c0:42:0c:39:d6:a7:92:92:5b:53:4c:
2b:71:19:9b:b9:3f:ef:f0:fd:c6:2e:cd:c9:6c:df:4e:00:2e:
6a:c1:82:28:3f:34:b7:24:80:f2:90:bf:81:84:1d:e7:22:31:
fe:81:2f:fa:06:ce:3d:08:5c:4a:9e:5e:33:f0:61:c4:ec:0d:
26:fd:f9:a1:78:0d:85:44:91:cc:7d:e3:5d:32:c4:09:9e:5d:
3f:6c:94:16:01:e1:f8:ab:89:b1:45:2d:87:16:f0:d1:86:dc:
40:8b:68:dd:a9:a3:59:12:72:d0:48:86:40:4d:ec:a6:b3:e6:
ad:3f:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:20:39 2025 by rpki-client