Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: 1xhNJy0IbyFWim5qDnbjTfs1SM2CqRzhuIqS5sbbZSo=
Subject key identifier: E4:49:54:BE:15:34:DD:15:4C:2C:1B:83:83:4E:15:C4:F7:62:A2:DF
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0196BA7FAA7B3CF9A320EACA8110CB304D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 10C6
Signing time: Sat 10 May 2025 14:00:50 +0000
Manifest this update: Sat 10 May 2025 14:00:50 +0000
Manifest next update: Sun 11 May 2025 14:00:50 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: bniSLGNG9qgr6CCI4iBpR66Ju3v7EmvwpBjLPJ6rObM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:aa:7b:3c:f9:a3:20:ea:ca:81:10:cb:30:4d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: May 10 14:00:50 2025 GMT
Not After : May 11 14:00:50 2025 GMT
Subject: CN=e44954be1534dd154c2c1b83834e15c4f762a2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:1a:3f:2f:b5:f7:d6:2f:ee:03:f1:07:37:
02:7f:e8:c3:33:e8:f0:be:dc:1f:32:40:80:9c:e2:
89:d9:a7:bb:ea:8e:93:82:7c:6d:12:57:c5:5d:b9:
17:f4:b6:c9:89:08:d5:02:10:f8:b1:93:17:4e:39:
ed:a5:7b:56:98:b7:a5:f9:b5:7c:b5:af:a7:bd:9e:
9d:2f:38:c2:a4:cf:5f:dc:57:17:ea:de:62:e1:05:
f0:03:ab:ce:7c:0d:1c:c8:9a:ce:6d:9a:a2:6e:6b:
71:80:c7:eb:c9:47:1a:62:87:d2:6a:72:ff:03:ee:
fc:6e:90:1f:43:de:03:9f:6c:72:c6:14:2a:f4:3d:
48:15:df:bf:99:06:c4:4c:28:b9:19:b9:df:60:bc:
7a:04:6a:20:ee:81:7d:fe:86:d1:a7:a0:12:e0:dd:
15:b4:32:bf:6f:e8:69:b0:f0:56:c7:52:c3:cc:df:
5e:95:a2:20:7f:f3:3f:ab:6b:9f:3a:48:dd:36:3c:
95:10:ca:04:bf:df:75:97:ed:3d:68:79:d3:41:f9:
29:68:d9:7f:6e:67:39:70:77:7a:6e:ca:bc:3f:eb:
f6:9a:01:be:56:0d:4a:f0:51:d4:3a:80:1c:31:e2:
6b:20:4a:ef:4f:d2:cb:48:ca:e9:06:57:4e:91:76:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:49:54:BE:15:34:DD:15:4C:2C:1B:83:83:4E:15:C4:F7:62:A2:DF
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:82:0d:6e:de:25:cd:41:5e:35:93:e3:c5:c8:70:2e:04:75:
29:7a:49:7e:0d:11:50:d6:ed:24:b6:bf:84:b4:35:22:e6:e7:
10:08:7e:e0:4c:06:bd:2c:57:6f:54:95:df:0d:1f:2e:d2:36:
de:24:e6:5d:16:76:dc:60:99:fa:66:a2:88:9b:a5:a0:95:06:
ad:ba:82:d1:f8:a2:15:69:e7:fd:2c:db:4c:8d:15:dc:82:eb:
09:c1:1f:34:91:c2:af:82:1a:17:96:79:71:11:87:f5:95:e7:
ad:48:f6:67:b6:d5:c0:11:ed:80:6c:b4:af:d9:62:20:8b:7b:
0c:ab:cc:d2:26:b0:a7:9b:fb:c6:77:db:a0:bf:4e:78:8a:f4:
b2:50:56:59:d8:bb:ab:3e:56:32:cb:b0:82:10:64:8e:13:98:
c5:2c:7c:09:5a:d1:0d:5c:91:ee:ec:e0:04:58:b7:fd:50:10:
01:1a:65:64:19:09:38:9e:05:e2:a6:d1:0f:03:35:e2:d2:c3:
8a:9d:e7:22:ac:7f:40:26:e5:4a:c5:1a:fa:f7:fe:ef:c5:66:
05:d2:fe:2f:43:b3:c4:e3:72:3b:a6:18:41:62:74:62:76:ee:
f4:47:a2:48:e8:02:7c:fe:e9:e5:d5:c9:4c:58:87:42:95:7a:
6b:cd:40:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f6p7PPmjIOrKgRDLME0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjUwNTEwMTQwMDUwWhcNMjUwNTExMTQwMDUwWjAzMTEwLwYDVQQD
EyhlNDQ5NTRiZTE1MzRkZDE1NGMyYzFiODM4MzRlMTVjNGY3NjJhMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDwaPy+199Yv7gPxBzcCf+jDM+jw
vtwfMkCAnOKJ2ae76o6TgnxtElfFXbkX9LbJiQjVAhD4sZMXTjntpXtWmLel+bV8
ta+nvZ6dLzjCpM9f3FcX6t5i4QXwA6vOfA0cyJrObZqibmtxgMfryUcaYofSanL/
A+78bpAfQ94Dn2xyxhQq9D1IFd+/mQbETCi5GbnfYLx6BGog7oF9/obRp6AS4N0V
tDK/b+hpsPBWx1LDzN9elaIgf/M/q2ufOkjdNjyVEMoEv991l+09aHnTQfkpaNl/
bmc5cHd6bsq8P+v2mgG+Vg1K8FHUOoAcMeJrIErvT9LLSMrpBldOkXbZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORJVL4VNN0VTCwbg4NOFcT3YqLfMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIINbt4l
zUFeNZPjxchwLgR1KXpJfg0RUNbtJLa/hLQ1IubnEAh+4EwGvSxXb1SV3w0fLtI2
3iTmXRZ23GCZ+maiiJuloJUGrbqC0fiiFWnn/SzbTI0V3ILrCcEfNJHCr4IaF5Z5
cRGH9ZXnrUj2Z7bVwBHtgGy0r9liIIt7DKvM0iawp5v7xnfboL9OeIr0slBWWdi7
qz5WMsuwghBkjhOYxSx8CVrRDVyR7uzgBFi3/VAQARplZBkJOJ4F4qbRDwM14tLD
ip3nIqx/QCblSsUa+vf+78VmBdL+L0OzxONyO6YYQWJ0Ynbu9EeiSOgCfP7p5dXJ
TFiHQpV6a81ApQ==
-----END CERTIFICATE-----
Generated at Sat May 10 16:40:20 2025 by rpki-client