Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: pzDLKite+21PTdSA5ns/00xjt/O6zmrFraOZ6SzTStk=
Subject key identifier: E1:A9:29:2E:C9:BF:2A:85:20:51:2D:B8:EA:84:AD:2F:17:5C:BF:69
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 01983ACDA003E90BB9230AA6D3475A2E3505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0EC7
Signing time: Thu 24 Jul 2025 05:00:11 +0000
Manifest this update: Thu 24 Jul 2025 05:00:11 +0000
Manifest next update: Fri 25 Jul 2025 05:00:11 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: dZNqNlkYX12ge8he7MT6PRznmYqL5kl9gSp4yrS8MN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:cd:a0:03:e9:0b:b9:23:0a:a6:d3:47:5a:2e:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jul 24 05:00:11 2025 GMT
Not After : Jul 25 05:00:11 2025 GMT
Subject: CN=e1a9292ec9bf2a8520512db8ea84ad2f175cbf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:59:67:08:0a:15:06:5d:ce:45:2e:57:5f:
b4:ad:a4:1b:67:89:5d:8f:e3:b5:ab:8d:6c:5e:8f:
4b:4f:f3:40:76:b9:16:67:f2:6d:ea:d3:a4:64:56:
72:b9:7a:59:bc:68:4c:d6:17:6b:28:eb:1f:13:e7:
6e:d4:27:1a:61:7f:b2:87:da:77:8d:d7:9e:52:20:
81:81:25:f2:27:05:07:48:7b:82:6b:6f:1b:26:ff:
15:2e:c8:9c:58:7d:93:71:fc:d4:45:79:86:29:04:
34:a8:11:fb:ef:6b:63:a9:ee:a9:1b:6c:52:d0:52:
b2:87:56:ec:c2:8c:ce:99:c1:90:34:11:b8:27:cf:
e2:df:c1:36:dd:52:8d:19:bb:4d:70:f7:5e:82:de:
b6:5c:89:de:4c:c3:cf:30:e7:40:0a:77:c7:53:0b:
fc:ad:de:98:bc:94:16:5a:e7:0c:a1:dd:61:18:ca:
7f:86:34:62:a5:94:0b:a5:1b:b6:8d:ea:30:84:5c:
cd:d0:33:6e:3d:44:eb:5a:d6:1a:29:0c:67:1b:b7:
9d:a4:44:f3:ac:e6:3b:b8:81:3a:2f:e1:6a:2d:e8:
7a:29:74:54:15:0f:26:bb:c5:ec:79:de:90:8a:a7:
0c:b2:27:55:c2:25:5c:42:69:5b:eb:54:a0:24:1b:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:29:2E:C9:BF:2A:85:20:51:2D:B8:EA:84:AD:2F:17:5C:BF:69
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:eb:67:0c:97:22:f4:ff:e4:f8:22:af:b9:4c:6a:e4:ac:
9a:80:95:de:88:59:8f:99:ee:25:25:be:d8:bf:8f:4c:dd:a3:
57:c4:bb:bb:74:e4:85:73:0e:94:38:ff:fb:c5:e7:0b:8d:ac:
07:25:f3:14:a3:e1:09:be:20:66:f8:b9:50:72:0e:96:3c:ed:
cd:d4:f7:c6:c1:a8:a8:67:41:74:d3:39:02:b4:aa:85:03:99:
77:ea:ad:1a:53:2b:e1:5e:ae:c5:74:c3:08:cf:48:4f:e8:46:
af:37:b9:55:39:e6:4c:f6:4c:95:a2:fa:5e:01:5a:d2:fe:e8:
de:49:6d:06:59:fd:27:12:eb:ff:fb:4c:4b:02:c2:b2:54:3e:
aa:1b:ae:fb:06:d9:59:0e:1c:8d:fe:4b:05:5b:15:4b:8c:f6:
c0:b7:8a:f2:e3:c1:a7:41:09:3b:c8:8f:d7:fa:77:5f:85:88:
06:e8:7d:54:17:5e:e8:a9:d6:f6:c4:dd:56:0c:68:2f:bb:13:
3b:4d:88:3d:ad:61:a1:16:ca:7c:48:32:b2:e3:61:05:5d:40:
66:6c:1f:52:79:28:d6:8e:b0:cd:f8:a4:4e:c5:bb:4e:40:7d:
ea:24:e8:74:d0:de:63:12:47:3f:86:65:08:76:ed:4d:80:96:
21:e3:6e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg6zaAD6Qu5Iwqm00daLjUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjRjZTAzODljZjkzZTJkNTdlMDgyZjFiZWM2MWRhODI3
MmZmZjEwHhcNMjUwNzI0MDUwMDExWhcNMjUwNzI1MDUwMDExWjAzMTEwLwYDVQQD
EyhlMWE5MjkyZWM5YmYyYTg1MjA1MTJkYjhlYTg0YWQyZjE3NWNiZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzhZZwgKFQZdzkUuV1+0raQbZ4ld
j+O1q41sXo9LT/NAdrkWZ/Jt6tOkZFZyuXpZvGhM1hdrKOsfE+du1CcaYX+yh9p3
jdeeUiCBgSXyJwUHSHuCa28bJv8VLsicWH2TcfzURXmGKQQ0qBH772tjqe6pG2xS
0FKyh1bswozOmcGQNBG4J8/i38E23VKNGbtNcPdegt62XIneTMPPMOdACnfHUwv8
rd6YvJQWWucMod1hGMp/hjRipZQLpRu2jeowhFzN0DNuPUTrWtYaKQxnG7edpETz
rOY7uIE6L+FqLeh6KXRUFQ8mu8Xsed6QiqcMsidVwiVcQmlb61SgJBsR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGpKS7JvyqFIFEtuOqErS8XXL9pMB8GA1UdIwQY
MBaAFAv0zgOJz5Pi1X4ILxvsYdqCcv/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMt
NTYyOGZhZWZlMTFkLzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYWM3ODMtOWZhYi00NjIzLTg5NGMtNTYyOGZhZWZlMTFk
LzEvQ19UT0E0blBrLUxWZmdndkcteGgyb0p5X19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACi3rZwyX
IvT/5Pgir7lMauSsmoCV3ohZj5nuJSW+2L+PTN2jV8S7u3TkhXMOlDj/+8XnC42s
ByXzFKPhCb4gZvi5UHIOljztzdT3xsGoqGdBdNM5ArSqhQOZd+qtGlMr4V6uxXTD
CM9IT+hGrze5VTnmTPZMlaL6XgFa0v7o3kltBln9JxLr//tMSwLCslQ+qhuu+wbZ
WQ4cjf5LBVsVS4z2wLeK8uPBp0EJO8iP1/p3X4WIBuh9VBde6KnW9sTdVgxoL7sT
O02IPa1hoRbKfEgysuNhBV1AZmwfUnko1o6wzfikTsW7TkB96iTodNDeYxJHP4Zl
CHbtTYCWIeNujA==
-----END CERTIFICATE-----
Generated at Thu Jul 24 08:19:58 2025 by rpki-client