
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: qOwen0Sp7bXOKPHF/zgJ/fqnVtvt0bG98hQclrjKAdM=
Subject key identifier: AE:6A:E3:E0:54:3C:7B:F6:D5:A3:2A:5A:EA:28:06:4C:FB:ED:35:54
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01988BEA283428C41900CEEAE1B19C8FDF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0EF1
Signing time: Fri 08 Aug 2025 23:00:35 +0000
Manifest this update: Fri 08 Aug 2025 23:00:35 +0000
Manifest next update: Sat 09 Aug 2025 23:00:35 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: sK6YDgwIzyws0hCT070G95YZ9r16Dr4jZBQTrwPpvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:28:34:28:c4:19:00:ce:ea:e1:b1:9c:8f:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Aug 8 23:00:35 2025 GMT
Not After : Aug 9 23:00:35 2025 GMT
Subject: CN=ae6ae3e0543c7bf6d5a32a5aea28064cfbed3554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:28:50:61:ec:96:2f:0f:da:3c:cd:9f:6b:
c3:7b:76:8b:93:64:3e:1c:75:70:e3:cf:04:f6:b5:
9d:40:3a:d0:68:18:06:81:ee:d1:d6:f2:ca:c8:d6:
b1:61:c8:5a:38:33:db:fe:fe:e3:f5:b4:ab:d4:c0:
ce:d5:de:50:b3:0d:ed:c6:d1:0e:06:32:10:a1:8a:
67:5a:89:ad:b3:00:ca:0d:84:33:dc:af:fe:8a:50:
c0:8b:0e:5e:c2:6f:7b:69:29:15:ba:16:8c:03:64:
8f:5a:26:9a:9f:33:08:c9:45:a3:33:7a:65:09:87:
0c:9b:b9:8f:8d:66:fc:aa:83:87:c5:7a:2b:79:6d:
fb:6b:8f:4a:72:04:29:d7:87:a4:d5:89:d9:f2:91:
91:a4:e5:ae:33:81:21:f6:6a:59:82:92:52:53:4e:
37:0b:68:11:d6:8e:8c:20:25:19:e7:cd:93:89:9b:
ba:f3:60:34:ae:d8:6a:e5:14:27:32:a9:6b:6d:c3:
7c:fd:1f:bc:14:fb:e3:79:1a:c9:f2:60:ff:e1:49:
50:c0:fa:48:7f:cc:a1:d5:70:9f:f9:dc:d8:f5:60:
de:3c:2b:f4:85:3b:67:56:f5:6e:a5:a3:84:0d:92:
13:26:f5:88:f2:61:79:47:23:80:a4:3a:cb:8f:83:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:E3:E0:54:3C:7B:F6:D5:A3:2A:5A:EA:28:06:4C:FB:ED:35:54
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ef:df:db:87:ba:0b:8c:19:e4:db:1a:15:0f:75:5b:69:c4:
0f:4c:54:b4:2b:70:7b:28:41:89:46:93:e4:21:4c:ec:0c:d8:
4e:34:30:ea:d0:d5:cc:69:c6:06:22:70:3d:27:c0:5a:fd:cb:
04:d7:c5:f9:53:e4:31:d3:39:6c:1a:3c:b4:91:e8:e9:a6:f9:
81:3a:c3:bc:19:24:51:f1:74:a8:bd:be:bc:f5:af:9c:09:2a:
2b:74:71:2a:cd:63:f4:b2:d7:12:cb:6c:31:1d:a3:23:4a:0a:
30:7d:5d:47:bd:6a:fd:85:df:d5:58:3f:d0:0a:b7:4a:00:44:
30:69:af:29:1e:97:0d:d8:e0:32:7a:f0:de:cc:a8:a3:32:d1:
66:17:ae:31:27:7a:e2:fd:5a:63:e3:25:41:1b:d8:76:1f:94:
90:31:53:63:8d:53:f9:be:00:1b:f0:3c:30:e1:42:d4:a6:3f:
37:a7:b9:52:94:f7:2b:ec:a5:fd:a1:63:63:db:8c:26:63:bb:
05:8f:6b:f9:b2:5a:70:6a:26:b7:72:7f:cd:f9:2e:a9:b0:34:
81:d8:07:f5:5e:85:00:97:40:9e:09:b5:6a:47:03:c1:e3:d1:
77:01:85:88:6a:2f:ea:04:08:fa:6c:dd:7e:8c:6b:5b:ea:1e:
48:79:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:14 2025 by rpki-client