Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: iUMSmEtjpcAbN5OrOKATjdwlcbuDlfo10i5cWgX3hWY=
Subject key identifier: 58:6D:7D:7A:D6:7C:54:8A:89:CC:90:5B:6C:36:9B:BC:0A:4D:B3:B2
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0198D54E0C7B79C938220F76ED7BD5EF6DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 11DD
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: p41DZ4ZzMWwHE4AgxVW/6lH36wR5ABcAykSogXxOLEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0c:7b:79:c9:38:22:0f:76:ed:7b:d5:ef:6d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=586d7d7ad67c548a89cc905b6c369bbc0a4db3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:3e:e5:36:0c:6c:f5:3e:34:70:54:01:a7:
2a:0f:a7:42:70:32:d4:48:cc:13:fc:95:1d:5c:7b:
c9:41:96:70:f9:cd:2f:8c:5a:5b:ec:80:0b:66:ad:
30:47:57:ce:94:d2:9e:d1:51:40:eb:40:65:b8:95:
8c:16:e4:d6:13:72:6d:8a:57:09:9c:a3:09:f0:4d:
6a:b5:9a:aa:24:02:c7:fc:f7:8b:14:c4:d2:e6:43:
3e:8f:53:cd:be:52:21:35:2d:fa:9f:c1:01:24:bb:
65:34:06:05:97:34:e1:7b:eb:a3:17:9f:ff:8d:49:
d2:7e:e8:1b:4c:23:54:a7:b7:09:f4:ce:ea:67:36:
7a:fc:f4:96:d0:d7:64:2d:11:ce:2c:06:03:36:ba:
1e:8b:d2:6b:2f:d9:12:7c:a5:fc:06:b7:0a:99:7d:
f7:20:3b:68:45:da:0b:2e:c1:72:36:1e:78:e3:f4:
d0:3b:b1:ea:af:5f:7b:03:50:94:ac:b5:41:5b:e5:
fc:84:25:22:61:b1:67:a9:c0:13:36:46:d1:54:22:
f3:a3:69:e0:75:70:cc:18:27:64:49:a0:44:b0:9e:
11:d2:08:89:0d:b1:6b:a5:d7:c0:a1:de:16:21:ad:
50:c7:af:b4:f2:c0:ad:2a:a8:6e:9a:55:38:be:41:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:7D:7A:D6:7C:54:8A:89:CC:90:5B:6C:36:9B:BC:0A:4D:B3:B2
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:31:60:64:6a:24:b7:ae:e6:82:1b:2f:c5:ed:53:01:c9:
41:a9:75:6c:28:0a:d7:0c:77:97:57:69:32:e3:e2:65:f9:d1:
db:02:bf:f2:36:89:dd:c1:43:a4:74:de:39:56:32:58:eb:c2:
36:ed:fd:0c:94:8f:70:4a:cb:a5:0d:a6:76:40:23:6b:f8:b2:
55:a3:7d:7f:6b:44:f1:81:b0:d2:0a:1d:92:d4:d2:4c:4d:57:
c6:9d:18:11:77:a7:7c:32:4f:da:b2:65:81:32:c0:08:ee:28:
bd:68:87:03:fa:49:78:c3:b0:8b:45:b3:5c:dc:56:a1:df:93:
fb:3c:de:2c:14:4f:8c:89:0e:75:d6:fe:01:3e:4d:8d:aa:9d:
10:d6:5c:32:8c:32:b1:b8:3f:b6:48:34:96:c7:a0:2c:79:de:
36:a0:9c:5f:4f:00:d6:7f:0d:50:54:aa:da:5c:0c:79:32:9a:
3a:a7:0a:ff:cf:34:02:48:44:9f:48:09:ee:f4:6e:12:b7:fa:
7b:66:80:33:ae:fe:54:99:26:c6:4f:5c:8e:fa:dd:d6:ea:18:
ac:e0:f7:54:76:0e:d8:d9:9e:c1:01:fa:1d:4b:ab:25:22:16:
4e:4a:f5:e6:d7:52:11:13:d4:0c:2d:b0:5d:55:19:b1:9b:a9:
b6:46:6d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTgx7eck4Ig927XvV7232MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjUwODIzMDUwMTU4WhcNMjUwODI0MDUwMTU4WjAzMTEwLwYDVQQD
Eyg1ODZkN2Q3YWQ2N2M1NDhhODljYzkwNWI2YzM2OWJiYzBhNGRiM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPY+5TYMbPU+NHBUAacqD6dCcDLU
SMwT/JUdXHvJQZZw+c0vjFpb7IALZq0wR1fOlNKe0VFA60BluJWMFuTWE3JtilcJ
nKMJ8E1qtZqqJALH/PeLFMTS5kM+j1PNvlIhNS36n8EBJLtlNAYFlzThe+ujF5//
jUnSfugbTCNUp7cJ9M7qZzZ6/PSW0NdkLRHOLAYDNroei9JrL9kSfKX8BrcKmX33
IDtoRdoLLsFyNh544/TQO7Hqr197A1CUrLVBW+X8hCUiYbFnqcATNkbRVCLzo2ng
dXDMGCdkSaBEsJ4R0giJDbFrpdfAod4WIa1Qx6+08sCtKqhumlU4vkH4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhtfXrWfFSKicyQW2w2m7wKTbOyMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtQxYGRq
JLeu5oIbL8XtUwHJQal1bCgK1wx3l1dpMuPiZfnR2wK/8jaJ3cFDpHTeOVYyWOvC
Nu39DJSPcErLpQ2mdkAja/iyVaN9f2tE8YGw0godktTSTE1Xxp0YEXenfDJP2rJl
gTLACO4ovWiHA/pJeMOwi0WzXNxWod+T+zzeLBRPjIkOddb+AT5NjaqdENZcMowy
sbg/tkg0lsegLHneNqCcX08A1n8NUFSq2lwMeTKaOqcK/880AkhEn0gJ7vRuErf6
e2aAM67+VJkmxk9cjvrd1uoYrOD3VHYO2NmewQH6HUurJSIWTkr15tdSERPUDC2w
XVUZsZuptkZtbQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:11 2025 by rpki-client