Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: 47q8Df13traZBz30vR2qrEEOibmvxI6R81OdO+bjkjk=
Subject key identifier: 4E:D8:9E:83:D2:08:44:F5:E4:FC:18:65:7F:E6:31:EB:FE:7B:00:CE
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 01967AC4CF3909827EE7461C05E04F6C22F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 10A5
Signing time: Mon 28 Apr 2025 05:00:40 +0000
Manifest this update: Mon 28 Apr 2025 05:00:40 +0000
Manifest next update: Tue 29 Apr 2025 05:00:40 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: VmYk3z568E+5DJgPg71bwfeNsL0CWRhZk9hQXvEb9QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:cf:39:09:82:7e:e7:46:1c:05:e0:4f:6c:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Apr 28 05:00:40 2025 GMT
Not After : Apr 29 05:00:40 2025 GMT
Subject: CN=4ed89e83d20844f5e4fc18657fe631ebfe7b00ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:8b:6f:9b:63:02:f9:a7:6d:1c:15:3d:1f:
51:30:cd:15:45:8a:31:be:db:15:69:64:78:1a:a6:
35:f5:c9:c3:a7:5c:1f:be:4f:53:f0:1d:46:ac:fa:
0d:8a:3b:6a:9a:19:16:35:a8:ee:8d:8a:cb:80:fe:
c1:72:76:ed:a7:18:97:c8:3b:1d:8d:08:28:dd:e4:
3b:ca:3e:22:3b:82:8b:3d:03:e4:79:31:01:67:9b:
59:e2:1f:97:e1:06:57:d3:61:97:dc:b8:72:68:c2:
2d:1b:03:0d:dc:e2:f1:f2:40:6a:d3:6b:1c:e9:e3:
8a:df:8f:58:54:d3:5d:bc:ad:f5:27:b1:ed:b5:9a:
c1:5f:04:5a:28:bb:0b:7e:c9:15:95:75:3d:e1:72:
de:cb:21:16:d4:54:82:e5:38:ce:fe:a6:4e:41:56:
6d:9b:a8:2c:e8:26:e4:5a:15:cc:d6:58:39:61:aa:
e3:01:48:b8:78:e8:14:27:1b:df:9d:15:68:3f:65:
ca:6f:07:ab:72:79:bc:8b:64:30:71:ea:b0:f3:07:
42:68:ce:a6:77:ac:d0:63:8b:3e:9e:ac:5a:0b:ea:
f4:97:af:d1:e5:88:00:68:fa:28:9a:b2:6b:cb:a2:
db:d6:52:67:80:26:4b:dd:47:68:9d:b9:3a:10:70:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:9E:83:D2:08:44:F5:E4:FC:18:65:7F:E6:31:EB:FE:7B:00:CE
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0c:95:d0:6c:35:ec:68:c2:42:7f:27:18:44:cb:0c:e5:f3:
98:19:cf:05:d6:69:0b:b7:3d:58:94:cf:ad:d5:53:a9:97:8d:
31:5a:42:d9:f5:ac:b3:93:e9:05:45:55:0b:43:c2:fe:42:67:
86:5d:fc:37:d7:68:05:32:37:3e:ae:55:2d:37:08:62:b1:5d:
5a:fd:8c:e7:30:6f:f6:40:46:cb:86:fb:1c:7b:26:a0:48:87:
b5:2e:89:f0:78:08:65:3a:e2:5b:6d:31:f4:af:50:da:be:95:
d6:62:fd:b8:69:7b:6f:75:17:4b:27:5d:8f:d7:3d:d4:96:e3:
45:a2:c3:a1:eb:94:e1:e2:cb:6c:e8:b4:2f:a5:07:3e:fe:c2:
0e:30:4b:22:d2:fe:f4:39:46:3c:2f:92:b1:42:60:b5:b8:88:
e9:ce:f4:c0:3c:d7:be:0b:b6:14:e4:ec:23:72:c1:8a:ec:6b:
52:2e:b1:95:21:dc:58:7b:af:fd:06:e0:33:e8:52:95:8e:cc:
f3:ad:ec:1c:d5:30:c3:60:92:f7:94:17:3a:ca:39:45:3f:00:
09:f9:8a:cc:53:30:6b:cf:21:3b:5d:d4:08:9b:34:29:06:1d:
5a:86:d6:c4:6c:59:cc:e6:3f:fb:d6:f8:2a:d9:3d:ef:6d:6f:
fa:29:bc:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xM85CYJ+50YcBeBPbCLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjUwNDI4MDUwMDQwWhcNMjUwNDI5MDUwMDQwWjAzMTEwLwYDVQQD
Eyg0ZWQ4OWU4M2QyMDg0NGY1ZTRmYzE4NjU3ZmU2MzFlYmZlN2IwMGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowiLb5tjAvmnbRwVPR9RMM0VRYox
vtsVaWR4GqY19cnDp1wfvk9T8B1GrPoNijtqmhkWNajujYrLgP7BcnbtpxiXyDsd
jQgo3eQ7yj4iO4KLPQPkeTEBZ5tZ4h+X4QZX02GX3LhyaMItGwMN3OLx8kBq02sc
6eOK349YVNNdvK31J7HttZrBXwRaKLsLfskVlXU94XLeyyEW1FSC5TjO/qZOQVZt
m6gs6CbkWhXM1lg5YarjAUi4eOgUJxvfnRVoP2XKbwercnm8i2Qwceqw8wdCaM6m
d6zQY4s+nqxaC+r0l6/R5YgAaPoomrJry6Lb1lJngCZL3Udonbk6EHCzwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7YnoPSCET15PwYZX/mMev+ewDOMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1wyV0Gw1
7GjCQn8nGETLDOXzmBnPBdZpC7c9WJTPrdVTqZeNMVpC2fWss5PpBUVVC0PC/kJn
hl38N9doBTI3Pq5VLTcIYrFdWv2M5zBv9kBGy4b7HHsmoEiHtS6J8HgIZTriW20x
9K9Q2r6V1mL9uGl7b3UXSyddj9c91JbjRaLDoeuU4eLLbOi0L6UHPv7CDjBLItL+
9DlGPC+SsUJgtbiI6c70wDzXvgu2FOTsI3LBiuxrUi6xlSHcWHuv/QbgM+hSlY7M
863sHNUww2CS95QXOso5RT8ACfmKzFMwa88hO13UCJs0KQYdWobWxGxZzOY/+9b4
Ktk9721v+im82A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:19:39 2025 by rpki-client