Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: 9HCE7vs2NsJ73mP8zVwXlTlmYklvD+fP+AJ3v3r7iYI=
Subject key identifier: 44:71:C1:0D:1D:90:57:29:8A:67:57:49:F2:4B:8F:09:6C:71:FA:64
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 0198D6CDAB3E5E3C3064A7B927601F5FBDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0D1D
Signing time: Sat 23 Aug 2025 12:00:59 +0000
Manifest this update: Sat 23 Aug 2025 12:00:59 +0000
Manifest next update: Sun 24 Aug 2025 12:00:59 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: gtlsBEJL12FYGq+ZbXvXYQ/ZkGoUOF/sFR+5tHcMzp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ab:3e:5e:3c:30:64:a7:b9:27:60:1f:5f:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Aug 23 12:00:59 2025 GMT
Not After : Aug 24 12:00:59 2025 GMT
Subject: CN=4471c10d1d9057298a675749f24b8f096c71fa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:60:f0:9a:98:7a:cf:85:6e:71:6e:a2:63:
0f:f0:e9:48:5f:13:9b:a3:7b:fb:89:53:5a:40:1d:
9d:08:6f:fc:17:b0:e5:d8:a4:5c:8c:d1:eb:ed:7a:
c6:7a:d1:d6:19:33:46:ee:a9:69:54:fe:22:44:75:
80:37:22:66:31:17:03:79:83:ca:1e:47:ed:6d:3a:
db:41:dc:99:32:4f:cd:70:b1:f3:8c:bc:fe:51:49:
6d:b9:a9:24:1c:3d:25:e0:38:22:ac:38:05:91:88:
8d:16:e4:71:10:83:11:fe:55:30:00:dd:99:09:4d:
1b:39:df:e1:42:35:01:ad:52:88:84:dd:a0:1a:6e:
69:da:8e:6d:9d:5a:ef:63:6f:c6:ea:a5:bb:3f:f9:
01:76:2d:2f:c7:26:1d:73:b0:8a:06:ab:fa:77:49:
69:2d:80:ce:0b:62:48:47:52:cf:38:5f:51:46:01:
ea:d2:9f:21:8f:3d:40:81:36:f8:e2:c8:0b:1e:8e:
d7:c1:66:f9:fb:9b:43:89:14:ff:dc:cf:52:98:17:
5a:5e:92:bd:b1:36:25:ee:49:77:64:70:e2:e6:10:
75:2f:49:bc:22:55:fb:2e:23:66:d9:78:44:d6:e7:
89:8a:1d:54:24:6a:99:f5:6d:1c:48:9a:7d:b2:1e:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:71:C1:0D:1D:90:57:29:8A:67:57:49:F2:4B:8F:09:6C:71:FA:64
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:35:ea:a2:6b:4f:30:69:5e:34:92:ba:49:95:45:20:94:78:
e5:ca:89:6d:e6:9f:89:76:73:5a:3d:1c:ab:c0:30:00:b7:08:
17:c7:ea:64:ec:af:60:a0:ed:66:ea:d1:11:e3:0c:80:bb:ef:
19:45:f5:b1:89:63:7c:f6:02:63:0b:a8:3f:da:0a:e8:fe:e9:
6c:1a:3d:23:a4:ff:25:8a:90:7c:42:be:32:ea:75:ff:30:22:
5e:17:a6:3c:52:0b:11:8e:00:3a:24:73:43:1b:52:2d:39:6b:
29:56:fb:f0:38:f4:e6:aa:66:46:b8:73:c3:3e:aa:91:7a:82:
d0:99:91:d4:42:a9:d6:f2:b8:6d:13:d7:fb:31:6f:21:0d:dd:
fa:18:43:2a:c4:3e:be:21:a9:45:31:cf:07:ff:13:ae:4b:8b:
f7:38:13:98:76:82:17:cb:52:ce:37:6d:a5:d9:a2:e5:d0:d8:
59:ae:c6:d4:b3:30:98:a6:cb:e8:55:c6:08:07:e4:25:30:19:
a4:c6:62:e4:ae:36:6d:cc:44:62:c6:b3:bc:39:ee:14:96:bb:
ec:5b:48:b6:57:82:b3:f6:32:23:53:90:98:86:1d:4e:65:5e:
8b:a3:0e:76:d3:b8:20:9e:9e:b2:4e:65:2f:de:33:40:f8:d5:
9b:a4:d5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:35 2025 by rpki-client