Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: wvRnT/MR6vsoSl2Ybmfu0Oi7jo9Syish3JVWbKyxCxY=
Subject key identifier: 77:CA:2D:15:80:63:BF:86:3A:8E:58:23:EA:33:3D:46:15:24:38:AE
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01967EA1834B2648A338E11ECF411C402857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0DE1
Signing time: Mon 28 Apr 2025 23:00:36 +0000
Manifest this update: Mon 28 Apr 2025 23:00:36 +0000
Manifest next update: Tue 29 Apr 2025 23:00:36 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: up/FK9HwyjdZ7NBcjI2JM1AswmSjyGCqPmfhn6PA2P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:83:4b:26:48:a3:38:e1:1e:cf:41:1c:40:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Apr 28 23:00:36 2025 GMT
Not After : Apr 29 23:00:36 2025 GMT
Subject: CN=77ca2d158063bf863a8e5823ea333d46152438ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:70:53:fb:f4:96:c9:a5:27:2a:0c:16:ff:
3b:12:ab:d8:ab:db:5a:c1:ba:e6:5c:9d:be:a7:2a:
e5:36:0c:1e:e4:19:01:47:92:75:76:19:8a:df:3a:
c8:c4:76:69:cc:81:cc:80:33:bc:34:2b:0a:64:67:
85:0a:f9:50:fe:13:08:16:7c:75:b3:28:43:ed:a0:
b4:ca:99:06:fa:63:f3:94:68:4c:22:58:b5:55:d9:
1e:56:e0:45:48:0d:dc:a2:79:48:0c:73:f7:65:0d:
6c:a5:dd:29:89:bb:8a:4e:68:08:e8:a3:a6:e7:6b:
54:ca:9d:1e:9b:43:cc:5b:90:f5:8a:50:b9:f2:31:
a7:b3:98:ec:86:cc:5e:be:ff:36:4c:63:5f:ad:29:
86:76:88:38:a8:5b:5f:b8:22:76:9b:53:35:a5:92:
8d:fb:16:29:7e:15:3e:07:1e:f1:9b:68:e5:05:2e:
a9:b0:53:15:8b:5d:23:b3:2e:02:42:3e:b5:9b:f7:
80:9b:cd:a3:d0:29:73:1f:dc:91:33:d0:d3:d4:45:
4c:54:51:0f:76:c0:31:16:46:70:f9:f3:3e:01:13:
60:89:a7:6f:83:6f:88:32:7b:45:36:fe:c1:07:ea:
b4:6e:51:b3:ed:28:47:5e:23:f0:92:83:8b:65:9c:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:2D:15:80:63:BF:86:3A:8E:58:23:EA:33:3D:46:15:24:38:AE
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:ee:d9:b5:b9:8f:fe:bb:ed:b5:5e:09:5a:d2:4c:10:d5:
02:84:92:21:75:d0:14:bd:c3:00:61:4e:a8:1a:62:2d:b1:dc:
81:00:04:1f:b3:9e:83:09:fb:2b:9d:58:9c:b7:f8:68:22:6d:
98:de:f1:31:c2:ab:33:c3:23:97:d8:6d:42:c3:7f:ef:84:20:
31:ab:6d:71:d7:c3:aa:dd:b4:48:e6:60:b4:44:b9:4d:b4:1b:
9b:67:61:f8:37:70:06:df:3f:e4:48:a1:04:66:80:04:f1:a2:
4c:a1:60:50:75:ab:02:86:d3:3a:6a:e9:38:4f:09:d0:3a:f1:
79:fe:34:9e:90:84:cf:7c:63:81:2f:f5:bb:81:fb:58:70:2d:
56:b3:0e:55:e2:f2:22:83:31:c2:92:95:17:34:41:dc:bf:be:
fe:51:8d:99:3c:48:51:8d:99:87:d9:a1:df:c9:af:4e:e1:af:
c0:95:e2:85:b3:46:ff:78:3d:59:66:4e:3a:28:4d:b8:f9:84:
3b:34:e4:11:e3:4f:a4:bb:04:fd:f8:47:59:b5:7a:fd:a0:ab:
a6:e6:ab:e4:ee:d0:3e:7e:65:c7:69:8e:4e:3d:ab:fe:aa:90:
0f:50:62:e1:40:37:f7:b1:74:79:83:99:88:41:94:d7:70:38:
0c:b1:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:11 2025 by rpki-client