Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: y67uA3BL6lqg4+XxsqLZGErKRn5Um4IbB0ymiNos+Kk=
Subject key identifier: 15:6A:F4:28:09:5C:23:06:2E:79:31:31:47:61:25:5D:E0:34:33:B7
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01987E65CBD38A44FAE3B9A6F9E61D1C2569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 11B0
Signing time: Wed 06 Aug 2025 08:00:57 +0000
Manifest this update: Wed 06 Aug 2025 08:00:57 +0000
Manifest next update: Thu 07 Aug 2025 08:00:57 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: YPa63xWArKPAJ263xv7UZtYol7WGub/JkT2hPEEfJE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:cb:d3:8a:44:fa:e3:b9:a6:f9:e6:1d:1c:25:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Aug 6 08:00:57 2025 GMT
Not After : Aug 7 08:00:57 2025 GMT
Subject: CN=156af428095c23062e7931314761255de03433b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:4a:ee:a6:ac:d8:91:61:04:0f:c6:e3:c5:
23:02:8d:0d:12:74:e2:47:dc:20:96:f5:50:9d:f7:
25:79:57:e6:13:17:9c:f9:b4:ad:3c:25:08:8c:f3:
8e:d5:67:00:f8:30:8b:19:4b:f4:9e:4e:c2:09:ed:
a2:d0:9c:a1:85:9f:b9:ab:b5:b8:13:08:fb:c6:59:
b9:57:c5:bf:c5:6b:8e:ea:64:ae:4a:83:c6:72:28:
95:52:1d:73:28:53:d1:22:7c:e9:cf:43:16:12:6b:
98:09:91:f1:ce:43:03:d5:19:41:82:de:9a:4d:08:
b5:57:2a:89:2e:af:e0:42:65:32:ee:60:6d:37:30:
35:21:b2:20:59:3c:15:77:7f:8d:98:4e:3e:69:ac:
40:c2:66:74:8f:f4:ed:1d:3f:c0:b1:ed:fc:b5:fa:
b9:79:ba:85:2c:4b:bd:01:81:73:b2:7c:76:10:94:
28:d5:0a:d7:60:ef:b2:8d:2d:5f:dd:3a:46:4d:24:
8e:56:31:64:98:27:e7:f6:15:e7:09:f4:f1:76:02:
54:92:65:a5:e7:23:ae:f1:bc:b2:3e:e8:63:22:3d:
b8:8f:3d:ef:81:34:f4:b6:16:89:96:d0:3c:9f:2d:
3c:28:d9:70:f5:fc:ed:db:ff:3d:e8:5f:51:a7:35:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:F4:28:09:5C:23:06:2E:79:31:31:47:61:25:5D:E0:34:33:B7
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:48:4f:37:ff:bb:c2:e1:d0:55:35:4d:4d:fe:35:26:dc:
b3:a3:94:ce:d3:be:db:a9:87:a2:49:d2:1f:78:da:de:7a:b1:
3a:9a:c7:4b:32:fe:f4:dc:ab:47:86:70:fc:f8:b7:fd:cd:f3:
98:9e:ba:5a:33:13:6c:52:7d:8b:aa:65:89:e4:50:f1:0d:03:
09:7f:ae:c8:78:16:27:29:4d:40:c8:5b:fb:14:9a:9a:e9:b8:
1c:b2:c5:3d:b3:ad:f8:23:71:2f:96:89:e0:02:b8:02:e7:26:
ad:e3:4b:9d:95:ba:d5:2f:dd:f8:d4:41:b7:6c:22:44:e9:39:
8d:d5:81:74:0b:8a:17:3a:b8:78:c7:cf:ec:1a:9a:35:cf:6c:
fd:01:ca:9c:26:94:c4:2c:0b:1e:a8:01:d7:a8:68:0a:95:69:
b0:38:7e:f6:38:c7:2e:7b:92:88:62:e1:e0:b1:97:7d:9d:fb:
72:2c:fe:2e:23:1b:52:3d:7f:dd:1e:6f:3f:22:47:6a:e4:90:
e4:80:87:18:89:ec:15:95:d8:5b:d7:66:3c:43:6d:a6:ce:6e:
7d:20:33:97:53:0d:48:30:45:4e:82:f4:c8:3e:14:eb:60:ae:
f4:22:15:ce:70:28:21:0c:98:7f:f2:f3:ae:15:8d:4f:1d:6c:
6c:d1:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:37 2025 by rpki-client