Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: paImYWXswbHDdHLikSjNl0FcHfeiYBvYWM2vTWsxlw8=
Subject key identifier: 9E:2B:F8:47:2C:91:46:99:64:7C:18:2A:16:D7:CA:46:47:DA:E5:11
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019A7293919A7B8EF4B18EAC578938EC13A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0FED
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: 509UySfn+fE0KuOz32XG1bQoYiX1dumajsZ3Y8aVfLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:91:9a:7b:8e:f4:b1:8e:ac:57:89:38:ec:13:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=9e2bf8472c914699647c182a16d7ca4647dae511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:15:7b:40:2a:8a:38:78:aa:7f:c7:5a:49:
52:09:41:45:e5:ee:e3:e1:7e:3b:0d:44:3c:df:2a:
29:71:b8:a8:79:be:16:95:e3:c6:7a:c7:4f:c4:6f:
41:65:11:ce:50:b4:cf:b3:cf:50:f2:46:75:cb:e7:
44:4e:65:8e:7a:86:95:ab:e0:8d:33:3a:ac:4b:76:
3a:91:c0:8e:06:9d:7d:32:13:05:e8:b2:78:c0:3c:
08:23:2f:5b:44:12:64:6a:81:27:c2:a2:2e:16:bc:
c4:60:27:d2:b1:94:7a:e6:2f:d5:a5:db:c8:be:3a:
e8:d9:33:58:22:16:e0:44:42:b4:a3:59:1c:e6:bc:
5a:f1:1b:67:7e:8b:92:27:b6:b7:b6:f9:ae:c7:a5:
09:89:54:75:1f:c3:27:ac:c6:ff:dc:3f:f7:10:11:
08:71:fa:dc:28:dc:f2:56:8b:ce:91:d1:7e:09:21:
75:32:63:57:94:6a:7c:cf:59:b3:ad:28:a9:39:c6:
35:b5:72:6d:c0:09:a1:d7:6e:c0:88:89:21:85:22:
55:0d:e3:75:e9:9e:4d:91:59:5e:2d:70:ad:f0:e8:
fe:68:19:22:eb:e1:cf:76:d4:cb:59:4c:bb:11:fc:
62:31:f8:cd:fc:b0:e8:c8:f9:d7:3a:a1:13:ed:33:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2B:F8:47:2C:91:46:99:64:7C:18:2A:16:D7:CA:46:47:DA:E5:11
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:be:54:5c:91:6a:94:b0:6b:41:77:e2:f7:0f:18:ca:0d:ea:
53:be:2f:ca:8b:6a:45:f8:a0:7d:85:40:21:7e:d4:44:8b:0d:
4c:a0:2d:94:00:dc:b7:2b:db:35:7a:48:59:1b:be:fa:0a:8c:
6b:05:38:62:c7:13:2a:dd:74:96:e7:f9:de:51:b1:59:df:df:
8e:b7:93:41:5a:69:32:1a:55:d0:8f:0f:03:c3:14:eb:c3:89:
0b:71:0e:ef:59:e0:0b:d9:8c:70:c1:d3:ff:fe:e8:ff:0f:00:
e3:30:50:2f:9e:5e:e8:16:7b:2c:19:54:d2:fb:d9:b5:18:96:
d1:bf:bd:30:46:8d:16:95:2c:fd:6b:80:b6:5e:03:61:43:f7:
0b:b6:2c:d5:a5:e0:97:d9:e2:9c:3e:a1:74:34:49:25:66:a6:
a5:22:e5:0d:09:cb:18:b4:c2:66:bb:56:c7:23:1a:f1:d2:9f:
81:68:49:58:8f:f2:16:32:f7:83:bb:91:7e:ba:19:a9:11:af:
50:d1:08:16:50:f1:b7:10:90:17:a0:e4:e3:3b:d8:c7:87:f0:
b3:28:82:7b:29:9f:33:61:2a:61:57:78:9f:4a:51:98:88:79:
b2:d1:29:ef:d0:64:67:7b:d7:fe:8f:2b:2d:c6:a2:65:fb:b8:
db:2b:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:30 2025 by rpki-client