Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: zLeCT83qjXpPmGNnb3POt+4xXptiVoYM8kBmBAbdR1A=
Subject key identifier: 6C:37:7B:E3:36:73:FB:D7:21:39:AB:0F:E4:E2:14:65:5E:DE:C4:92
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019A4DE1B42945C7682EA5FDBF8AF2558F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0FDA
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: v/SrF0E2vIkduwpBNelLKmj/89d3d88v+FmcK1T3aI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b4:29:45:c7:68:2e:a5:fd:bf:8a:f2:55:8f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=6c377be33673fbd72139ab0fe4e214655edec492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:86:f4:7a:b7:cd:5e:51:9e:20:3f:01:bc:
a6:5d:51:65:e5:e7:a5:15:cd:b1:5e:c8:c7:c1:2f:
3d:60:20:62:22:3d:be:d3:37:84:e4:40:91:a4:67:
8b:52:e0:51:26:88:75:21:ac:14:29:81:61:e2:d3:
98:3e:0c:3e:94:7d:8f:5a:9b:b0:52:ba:0c:c4:85:
8b:8d:8c:7f:b0:2f:43:f1:af:4e:ca:ff:b1:39:94:
a6:4c:67:c4:d2:0b:54:eb:4c:c9:e8:2e:10:35:67:
b8:ee:75:c5:9b:eb:29:5a:62:cc:51:61:29:ad:80:
2e:8f:80:14:1d:ce:82:b8:cd:50:54:f8:34:d9:e1:
3d:4c:61:14:dd:38:a7:6e:4e:fc:99:10:0e:2d:ab:
e0:ff:7b:5a:fd:cf:db:7e:b0:fd:fc:61:be:db:43:
25:40:1a:2b:5d:a7:2b:c5:fa:0a:03:14:16:78:b2:
ea:98:87:f9:18:6f:57:c5:f0:45:3c:6a:11:d3:1a:
df:86:68:f0:56:ac:58:c4:e4:3c:4b:dc:55:f7:f0:
09:a5:37:97:61:42:4f:8d:d7:49:33:18:ef:d5:a8:
e1:03:6c:de:74:58:68:45:52:4f:62:a6:cc:e5:59:
be:4c:b0:ae:8d:0b:1e:3f:c8:a0:11:b3:f2:6c:eb:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:7B:E3:36:73:FB:D7:21:39:AB:0F:E4:E2:14:65:5E:DE:C4:92
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:79:1c:2b:a6:8d:7f:7e:a9:47:c7:44:aa:75:3f:b4:19:
14:37:c2:97:b8:89:74:79:be:db:ab:cb:46:16:ab:13:9b:1a:
0e:65:1f:97:4f:5d:eb:c9:8d:45:b9:6e:14:ad:2d:80:fa:9b:
4c:5f:05:5f:28:82:7f:b5:b5:be:96:06:2d:23:33:f3:d9:97:
00:83:3d:e4:ca:5d:39:fd:44:99:aa:59:c8:a7:0b:78:c7:ce:
a0:5c:a6:e9:9f:59:ed:ee:9c:1a:bd:e4:dc:2b:2d:cd:aa:58:
dd:9f:87:f1:69:fc:67:19:cd:5f:90:32:3f:35:af:fb:94:27:
b3:9b:7f:7b:39:a2:d6:09:40:63:b6:1b:02:da:cc:06:a8:a1:
fa:6a:3e:30:83:9b:6d:ee:3b:22:f6:2b:5a:44:87:41:6c:e5:
2e:28:d5:bd:63:5f:d4:bb:64:94:1d:76:d9:44:ba:88:b8:bd:
70:b7:cd:20:7b:92:c8:35:93:df:a5:5f:e9:e2:3a:ab:81:40:
a8:df:48:7a:52:5a:bc:2b:4c:41:14:f5:61:7a:41:f8:76:ca:
63:4b:2d:41:4a:22:0b:e1:6e:a5:cd:3a:d5:cd:3a:74:2f:e4:
7a:d1:3d:42:23:ee:37:b7:69:3b:a8:a6:fd:c3:63:a3:d0:8a:
ad:c1:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:55 2025 by rpki-client