Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: fIwRvCAiDmkcxN2Pd5Y3hHW4XsH49tbJhq0LMrHEHuM=
Subject key identifier: 8F:F5:82:33:6C:F2:5C:EF:9C:BF:BE:60:0B:37:4B:97:CA:9D:7C:F5
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019848533ECB801D83B2BE38CA117C4C0BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1194
Signing time: Sat 26 Jul 2025 20:01:11 +0000
Manifest this update: Sat 26 Jul 2025 20:01:11 +0000
Manifest next update: Sun 27 Jul 2025 20:01:11 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: tuKIpv5BOfKLM8bKMTmEnxhkrNbKgNLAjRz0bcGHfMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:3e:cb:80:1d:83:b2:be:38:ca:11:7c:4c:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jul 26 20:01:11 2025 GMT
Not After : Jul 27 20:01:11 2025 GMT
Subject: CN=8ff582336cf25cef9cbfbe600b374b97ca9d7cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:1e:4e:3c:e3:cd:e1:ac:9b:4c:4f:4a:3c:
f0:b0:86:c5:82:84:7b:b7:e4:70:59:1d:5c:da:db:
35:71:2c:53:c5:36:f9:c8:c6:41:3d:2c:31:a2:3a:
7d:21:23:23:2a:bb:8b:92:0c:af:98:97:04:35:c1:
96:26:86:ba:df:1b:3b:00:e0:95:88:65:62:4d:89:
a8:41:cc:97:4b:1d:8c:6a:cf:85:4c:f4:08:68:6f:
12:08:59:db:eb:db:fe:43:be:8a:e5:eb:8e:fd:ad:
66:a1:92:2b:c8:21:88:1d:25:de:f5:df:f7:17:35:
70:4c:58:1f:b0:1d:dc:cd:35:19:b9:40:19:fd:45:
c7:0d:22:90:dd:a1:cf:53:42:13:13:8e:42:24:54:
6c:1e:aa:c5:ba:28:d0:27:2f:cb:6a:48:9d:18:e2:
48:f9:13:d3:81:54:0f:87:db:d3:90:0b:90:ef:fd:
ca:26:c1:d8:8a:52:4f:9f:16:fd:10:a2:98:83:7b:
ad:12:32:d5:18:3b:57:a1:b2:ce:69:67:f1:4b:3d:
f8:4b:12:50:57:ef:7f:64:47:43:20:e9:4d:03:81:
9d:a7:03:90:c1:65:4c:a5:ef:58:98:08:42:40:19:
b7:2e:4c:bf:41:38:b2:59:37:d4:cf:08:d1:b5:35:
a0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:82:33:6C:F2:5C:EF:9C:BF:BE:60:0B:37:4B:97:CA:9D:7C:F5
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3a:d3:e5:7f:c6:4b:58:71:5f:85:d9:0d:a9:11:f2:70:6f:
af:2d:ef:a4:e4:c9:a9:c1:1b:7f:f5:d3:ae:fd:ec:f4:fe:cf:
97:d9:1c:79:b2:de:8e:d0:7a:74:a1:21:10:f9:4b:61:6f:ba:
2f:30:64:6d:5c:64:ae:03:7f:db:72:ad:ec:e6:4b:e8:b1:50:
da:a4:d1:ea:a5:3c:22:47:16:de:fc:23:68:77:f8:35:22:aa:
81:39:67:0f:b2:66:e5:10:95:e7:34:89:81:d2:a1:9d:e9:99:
7c:92:b3:f4:6a:7e:12:b4:1a:e2:7d:f5:b3:09:91:35:1c:7c:
1b:67:67:a2:48:6e:f0:32:17:f5:2c:57:cd:4d:15:98:7d:2e:
af:f1:62:d6:99:87:c1:6e:a9:40:36:d1:1b:e6:b8:95:74:0c:
09:63:26:17:3b:ed:75:ee:06:c7:b1:3f:d1:99:13:3d:e9:f1:
ee:23:be:e5:49:76:26:c8:c2:6d:8a:da:73:ea:a3:66:86:09:
30:ae:c8:b5:18:88:22:2f:0b:30:89:07:99:2a:50:d4:c8:11:
08:32:a5:33:9e:63:d3:61:63:84:c9:d6:1c:77:0a:71:c1:c1:
be:49:a6:e7:7f:cd:65:6c:08:c9:cc:06:aa:c5:2b:76:d5:12:
89:dc:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:23 2025 by rpki-client