Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: W8HREIKNNA0n7RXbFNweAkCp9U/DXkrcElVX/B3lGeQ=
Subject key identifier: AB:5C:D5:34:3D:6A:CC:3D:C0:5E:26:FC:20:6C:6B:8B:E1:D5:1D:F8
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0197C12485C884EDDE697EA82FE72CC92512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 114E
Signing time: Mon 30 Jun 2025 14:01:25 +0000
Manifest this update: Mon 30 Jun 2025 14:01:25 +0000
Manifest next update: Tue 01 Jul 2025 14:01:25 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: ULW/6YmFYz4OXMw3U6gWZm+xEhJ/9y5oyiU84tGDJhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:85:c8:84:ed:de:69:7e:a8:2f:e7:2c:c9:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jun 30 14:01:25 2025 GMT
Not After : Jul 1 14:01:25 2025 GMT
Subject: CN=ab5cd5343d6acc3dc05e26fc206c6b8be1d51df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:07:20:9b:4b:5f:7e:30:b2:a0:81:4d:97:
94:12:ea:b1:ab:b7:ea:68:02:2c:df:2e:41:da:a5:
87:29:0a:ee:79:32:9b:6e:e7:dd:0f:b4:e5:76:03:
a0:52:40:79:98:77:57:28:e6:dd:64:99:44:eb:f9:
11:e4:b3:9f:02:ce:1e:03:15:a3:71:7d:be:56:89:
4e:9b:6b:f0:ec:89:fc:03:c2:e4:58:d6:c7:59:a0:
c8:fb:d2:3d:cd:5d:b8:e3:f6:69:1e:72:7c:0a:4e:
e3:a7:47:32:50:67:78:58:71:8b:d6:a2:66:35:2f:
8e:9b:64:7f:d9:e7:22:3c:bb:2b:92:97:b1:4f:b7:
e1:24:6a:4e:39:e3:ad:7e:76:60:eb:e4:6d:75:27:
b9:29:06:9f:36:df:15:30:2e:aa:0d:7c:9f:fc:e3:
23:7e:3f:01:80:6a:36:40:2d:29:b8:a4:37:c2:22:
dc:db:e7:f9:e0:41:21:f3:5e:74:0d:7f:ec:39:6e:
86:f8:48:3e:af:38:51:c1:12:66:ed:94:ed:2f:e7:
21:97:72:62:ca:e1:49:40:84:73:b2:01:10:28:4a:
d9:c6:f3:a6:51:a1:2c:90:58:6c:0d:31:95:da:1e:
75:cd:31:9f:b8:8c:8c:84:1e:d5:1d:e6:54:a9:90:
b0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5C:D5:34:3D:6A:CC:3D:C0:5E:26:FC:20:6C:6B:8B:E1:D5:1D:F8
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:29:85:66:1e:7e:81:64:73:95:da:7a:d4:ad:69:c3:5f:
1e:62:9d:50:9c:a9:0a:41:af:dc:1f:66:d9:cd:8c:fd:e5:ff:
de:1b:fb:c1:e0:d1:91:87:a6:b2:a0:cf:ad:da:6d:51:2e:6b:
d6:09:c0:e7:5d:55:08:28:16:52:76:4c:f3:a0:f2:19:82:37:
55:b2:57:5e:f9:68:6a:06:ba:f7:4c:3f:9e:3c:4e:f0:d3:59:
c9:e5:e5:53:65:41:a9:a1:e8:30:f6:88:c7:e4:57:44:8a:77:
c9:86:d0:b9:9a:e2:da:5f:68:19:f4:a8:4c:26:62:ec:7f:a4:
88:d2:b9:a1:f3:62:ba:e0:6c:a4:c7:a3:25:89:c3:ea:8f:1f:
75:7a:fb:18:9c:b2:b7:8d:8a:1e:ae:31:02:7e:ad:74:ff:71:
b2:db:8c:0f:91:20:6c:ba:df:31:a7:97:74:66:09:c2:a6:ba:
14:78:49:6e:f7:12:14:87:6d:49:0d:c4:8f:9a:7c:b5:2e:d3:
3e:be:7d:02:3f:bd:0b:15:11:bf:23:94:d1:35:88:9a:68:b2:
cd:8a:9e:cf:3a:ba:6e:dd:e1:b5:1f:4e:eb:c5:44:a4:68:05:
e6:43:17:57:43:58:97:d4:f6:26:5c:5c:71:02:30:4e:a7:4c:
fd:39:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:26:48 2025 by rpki-client