Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: 8ne0mxypq0UprIdiskOIiuit2M1CmoFomSpqY3UIBaw=
Subject key identifier: 8D:21:F0:19:5D:5A:E5:F1:E5:D2:E4:F8:9D:2C:CF:01:3E:91:12:04
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019A4DE1D3D4E2A155FD86A34A5D52F8DD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 12A0
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: N4MtgnsehyOdvs8C/SrqlT0/jEypYMhuOv1zJQmH8Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:d4:e2:a1:55:fd:86:a3:4a:5d:52:f8:dd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=8d21f0195d5ae5f1e5d2e4f89d2ccf013e911204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:53:69:03:2b:b1:c5:9d:2b:59:03:4f:0f:
73:a9:e6:91:dc:5f:f4:ca:1a:eb:a5:9b:65:5e:ca:
9c:db:d4:81:8e:9e:54:77:dc:78:aa:58:a2:70:d4:
db:dd:4d:0f:c8:b6:e6:ec:a5:57:b2:a9:c5:41:c0:
2f:94:38:8b:ad:21:1c:ea:29:9a:53:31:2b:8f:79:
fd:5c:8c:b7:9a:cc:7b:17:eb:a5:89:a1:58:1d:84:
82:2c:33:0c:22:2e:fe:d0:97:66:e7:a9:a5:5a:f8:
c7:07:85:6d:f3:34:c7:53:a6:69:df:80:3e:83:57:
68:0f:46:81:af:41:00:81:03:62:0e:78:20:b5:5f:
c1:7c:46:fb:41:51:d6:ce:19:af:36:e2:2d:09:21:
20:21:42:ed:2d:6d:52:d5:0f:e9:66:0e:16:1c:ba:
54:2b:69:98:43:21:81:81:8d:2f:f4:90:fa:9c:61:
b2:da:a2:8a:5a:e3:ce:fd:88:42:49:49:11:51:48:
bb:88:4d:44:14:1b:b8:06:fb:ab:01:50:a5:97:d2:
08:bf:3a:97:63:cd:35:3e:b3:3a:6c:40:e6:48:28:
d3:29:2d:11:0f:98:08:c7:f6:8d:e3:f4:20:f6:30:
de:4f:39:e2:b2:f0:06:c8:4f:10:49:5e:1a:6a:a7:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:F0:19:5D:5A:E5:F1:E5:D2:E4:F8:9D:2C:CF:01:3E:91:12:04
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ee:99:37:0b:ee:7c:ea:de:7e:d2:52:d2:83:1a:73:a4:50:
97:ca:f2:8f:ed:4d:3e:9d:ff:46:7e:31:a6:c9:ed:d8:8c:19:
6c:80:17:f0:f2:91:0e:e9:d8:69:65:95:f9:a8:83:96:2b:8d:
db:5d:7a:64:ac:55:36:7e:18:89:2b:a6:95:73:38:bb:47:03:
96:9a:4e:ec:67:95:08:2f:24:17:98:ee:f9:55:b0:d7:51:10:
b4:21:70:28:14:ee:54:7e:7d:22:c4:b2:50:cd:e6:4b:e6:33:
ba:c7:1b:e5:9a:30:5c:a7:9b:75:c3:a1:03:3f:db:aa:bf:ba:
55:61:f1:03:47:6f:e8:f4:7b:30:08:c2:49:57:80:82:52:58:
e8:6d:cb:6c:50:2a:c0:24:4d:17:e5:88:5e:3d:c1:1e:5e:31:
35:d9:58:7b:fc:13:99:ef:5c:00:12:87:dd:fa:b8:be:8f:5b:
99:5e:45:4f:b8:13:52:4c:1a:d5:fa:f0:b4:f6:d2:78:90:fd:
08:14:d3:ee:b4:ba:e6:7b:82:30:dd:19:b3:a4:c7:88:8b:f8:
d8:30:68:c9:ec:dc:9f:b3:24:6d:4b:f2:b3:d8:a6:03:9d:44:
7d:71:69:4b:4e:b7:52:c6:36:9e:74:8d:12:09:24:10:ff:cc:
f5:18:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client