Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: 4DjrvFowkI7x2bbppYrDvPJi2ahn7KieqEv6Y0NB4/Q=
Subject key identifier: BA:E1:EC:1D:37:06:11:9F:24:62:F2:24:3F:4F:D9:DB:D9:CA:82:6A
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01977007C7D655DF819795405BD2C04C8EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0E5E
Signing time: Sat 14 Jun 2025 20:00:47 +0000
Manifest this update: Sat 14 Jun 2025 20:00:47 +0000
Manifest next update: Sun 15 Jun 2025 20:00:47 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: LqqNIqlY/678yrvVNMO09zMXh9SU3f+PHvrdD2pWsqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:c7:d6:55:df:81:97:95:40:5b:d2:c0:4c:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jun 14 20:00:47 2025 GMT
Not After : Jun 15 20:00:47 2025 GMT
Subject: CN=bae1ec1d3706119f2462f2243f4fd9dbd9ca826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:41:ec:e4:32:3a:0b:b1:db:4c:e6:15:70:
c8:1a:62:92:66:4b:4d:e7:8c:1e:14:df:0a:b1:ff:
44:97:bb:2d:67:88:6b:a1:97:5a:82:07:18:fd:e0:
c2:3d:8c:1c:ba:84:07:ad:b9:74:0b:37:32:fd:e0:
c8:2a:e7:d5:de:3a:9b:52:cc:45:ed:c0:20:22:c4:
b2:23:8c:ff:df:8f:82:c1:52:aa:b8:8f:f2:e7:9a:
0f:84:12:2c:bd:73:f3:fa:b9:95:d3:27:ff:8e:1c:
11:89:e8:6d:91:c6:dc:a5:1c:d3:f0:86:21:8c:0d:
28:31:71:2f:47:2f:e6:24:64:d6:4b:0f:2a:e9:df:
ea:9f:4d:f0:1f:3f:1b:25:98:7f:33:12:6d:3a:ca:
1b:3f:f7:fe:9b:d3:e9:d4:29:db:53:3e:d6:57:34:
ef:a6:12:32:23:85:d8:e7:e2:36:d6:78:c1:2f:5f:
54:c5:d9:9f:98:a4:5e:18:cc:3b:7e:c5:49:7f:4c:
48:15:68:46:4a:05:cb:d6:96:2c:6e:e1:a7:06:f7:
2f:b1:24:07:a8:2e:fb:d2:c6:92:12:d7:e6:9d:88:
e2:62:eb:c5:92:c7:1f:93:b6:ba:f8:c2:95:d4:76:
12:a8:84:4a:7d:d6:a1:e8:48:9a:e3:56:98:38:08:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:EC:1D:37:06:11:9F:24:62:F2:24:3F:4F:D9:DB:D9:CA:82:6A
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:f4:62:90:21:c4:8f:e7:e8:44:14:c8:db:04:68:7c:0c:
78:79:74:a5:ac:7b:4d:c9:76:f8:6c:ce:18:f8:26:a8:50:be:
b4:e5:51:2b:70:eb:64:6d:6d:52:bc:98:c6:91:a2:a1:e4:11:
39:e7:d4:3d:95:e3:bf:fe:07:80:fe:a7:d2:63:9f:42:49:59:
59:88:87:bc:85:cb:0b:2f:3d:b4:f9:c7:eb:40:3b:51:1c:2c:
2b:3b:48:86:8a:5f:29:fd:2f:71:bb:a8:90:61:6e:12:82:2a:
40:4f:b6:48:31:d5:bb:23:21:84:3c:fe:2d:f8:5d:b9:c6:89:
7e:0d:bc:ed:30:e4:d1:ac:9f:8d:d9:a6:5e:2c:95:6d:a0:d4:
15:19:73:06:d7:2e:e3:1a:56:99:de:82:7e:02:21:0e:b9:61:
1b:56:11:93:a6:de:9d:87:ef:a0:0e:b7:02:73:7a:7c:20:29:
e6:d6:58:ce:fa:00:75:65:55:b6:8c:fe:90:4f:83:78:c2:20:
38:97:7d:4e:12:7b:4f:30:3c:55:23:6e:83:b2:4f:f0:b0:a5:
99:28:6e:ab:26:59:23:28:8a:6c:51:83:b6:93:dd:17:5a:ea:
64:22:a6:d0:76:77:c2:ee:57:d4:9c:c8:63:ca:9f:12:4b:25:
de:1c:9a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB8fWVd+Bl5VAW9LATI7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjRjZTAzODljZjkzZTJkNTdlMDgyZjFiZWM2MWRhODI3
MmZmZjEwHhcNMjUwNjE0MjAwMDQ3WhcNMjUwNjE1MjAwMDQ3WjAzMTEwLwYDVQQD
EyhiYWUxZWMxZDM3MDYxMTlmMjQ2MmYyMjQzZjRmZDlkYmQ5Y2E4MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRlB7OQyOgux20zmFXDIGmKSZktN
54weFN8Ksf9El7stZ4hroZdaggcY/eDCPYwcuoQHrbl0Czcy/eDIKufV3jqbUsxF
7cAgIsSyI4z/34+CwVKquI/y55oPhBIsvXPz+rmV0yf/jhwRiehtkcbcpRzT8IYh
jA0oMXEvRy/mJGTWSw8q6d/qn03wHz8bJZh/MxJtOsobP/f+m9Pp1CnbUz7WVzTv
phIyI4XY5+I21njBL19UxdmfmKReGMw7fsVJf0xIFWhGSgXL1pYsbuGnBvcvsSQH
qC770saSEtfmnYjiYuvFkscfk7a6+MKV1HYSqIRKfdah6Eia41aYOAi4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrh7B03BhGfJGLyJD9P2dvZyoJqMB8GA1UdIwQY
MBaAFAv0zgOJz5Pi1X4ILxvsYdqCcv/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMt
NTYyOGZhZWZlMTFkLzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMtNTYyOGZhZWZlMTFk
LzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVf0YpAh
xI/n6EQUyNsEaHwMeHl0pax7Tcl2+GzOGPgmqFC+tOVRK3DrZG1tUryYxpGioeQR
OefUPZXjv/4HgP6n0mOfQklZWYiHvIXLCy89tPnH60A7URwsKztIhopfKf0vcbuo
kGFuEoIqQE+2SDHVuyMhhDz+LfhducaJfg287TDk0ayfjdmmXiyVbaDUFRlzBtcu
4xpWmd6CfgIhDrlhG1YRk6benYfvoA63AnN6fCAp5tZYzvoAdWVVtoz+kE+DeMIg
OJd9ThJ7TzA8VSNug7JP8LClmShuqyZZIyiKbFGDtpPdF1rqZCKm0HZ3wu5X1JzI
Y8qfEksl3hyaEw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:46:36 2025 by rpki-client