Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: 3t8WuZdFDR24tGR+0VTKGwPa708zeAIAvgC0gsBMJcU=
Subject key identifier: 0E:8B:6F:C7:38:52:92:82:E5:4C:CD:AF:5F:3F:32:36:8E:48:7E:93
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 0197B70F0EECB906E4A1C5E6BEB0128431E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0C88
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: /IQDZWnw3L/UDuCSsPOJyv71ycLhXPA0Rc/udefnQ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0e:ec:b9:06:e4:a1:c5:e6:be:b0:12:84:31:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=0e8b6fc738529282e54ccdaf5f3f32368e487e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:51:9a:42:90:66:ec:b4:f8:2d:1b:2b:84:
cf:71:6f:7e:4e:30:71:8e:40:73:b2:19:4c:1b:11:
c1:04:d0:fe:db:5c:57:ed:2b:a3:ac:4a:0a:19:c4:
ac:7f:43:01:96:a7:f9:d8:8b:00:23:3f:87:dc:60:
47:8a:93:ee:7c:5a:a0:83:27:91:65:d6:c2:6c:dc:
1e:b2:7f:b6:ff:a3:7d:94:01:3e:96:49:4c:2a:46:
5e:21:e4:b3:9b:c5:4a:17:32:da:65:97:83:32:6b:
e9:d2:37:b2:a9:e4:2d:12:d2:dd:46:26:f0:2b:54:
ed:4c:b2:f9:67:f4:52:88:15:0f:6a:28:17:ee:29:
35:bb:84:7e:80:7a:fe:c8:a8:0f:11:23:ff:8a:a2:
c0:59:66:87:0f:c8:a9:1b:3a:5f:07:14:3c:e8:02:
38:f7:28:20:da:d7:6b:1e:51:26:2d:a0:f6:c0:01:
fc:11:34:ad:21:55:d6:15:12:48:5e:4d:a6:81:40:
7e:d8:f8:5b:e8:13:4b:19:eb:8a:8a:fd:c0:f5:5a:
8d:dc:18:0d:fa:11:3b:a3:8f:f4:4f:64:9e:35:c3:
c7:44:26:3d:77:62:ec:6e:74:29:c3:bd:f2:93:7e:
ca:a3:a2:69:52:a2:b9:96:4a:8d:8e:0c:77:57:ef:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:6F:C7:38:52:92:82:E5:4C:CD:AF:5F:3F:32:36:8E:48:7E:93
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9c:91:97:00:38:4a:3a:71:f3:6a:43:36:40:df:1a:e9:ed:
36:af:43:ae:d1:7c:14:db:c6:39:91:7c:09:03:e1:38:28:72:
07:a2:fe:e3:75:58:3e:18:18:1e:1d:76:8c:03:d2:cc:fb:6f:
ae:28:99:58:8f:91:38:23:51:80:7c:a2:78:ac:8c:4c:ae:11:
cf:3b:db:02:5a:e3:15:74:28:cf:d5:6d:dd:16:db:5e:07:72:
76:0a:aa:76:2d:59:45:9d:3b:78:7d:b8:1a:86:10:1c:b3:5b:
dd:72:9b:bb:b4:d6:6a:0a:28:30:b6:66:a0:f7:ec:5e:ad:8b:
5e:09:f9:ce:a5:26:77:86:c4:f8:04:1b:1b:90:65:f0:82:a2:
89:ad:8e:19:34:de:ca:4b:a2:78:23:8e:7e:5a:8b:bf:78:1b:
e1:f1:7d:37:f0:aa:f4:b8:93:a2:bf:47:2f:6b:d8:63:67:1c:
71:10:5e:a4:52:c7:44:80:a1:56:77:d7:02:0a:49:22:4f:52:
8a:53:13:6b:17:00:d7:70:7c:e0:43:75:1c:67:ab:0d:28:d1:
e6:e3:5f:62:54:e2:39:12:e9:f8:6f:65:07:97:f5:d8:e3:7e:
85:48:46:13:f5:bf:7b:56:32:df:8a:44:ae:6f:72:b4:e8:83:
e4:b4:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:58 2025 by rpki-client