Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: VS96kRsPJqCIsLpO5lnNH4iBEmX0+YdATcJyoqnM8ls=
Subject key identifier: D9:C7:E0:7B:57:F6:52:94:5F:EB:60:44:39:5A:71:90:D9:4B:E0:A7
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0199C6B3057723123CB4A5B166AE39EFAAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 125A
Signing time: Thu 09 Oct 2025 02:00:45 +0000
Manifest this update: Thu 09 Oct 2025 02:00:45 +0000
Manifest next update: Fri 10 Oct 2025 02:00:45 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: vKvHm3klinaCBItOPpLzgGAlleiYF0ZU6doHTGl7r/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:05:77:23:12:3c:b4:a5:b1:66:ae:39:ef:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Oct 9 02:00:45 2025 GMT
Not After : Oct 10 02:00:45 2025 GMT
Subject: CN=d9c7e07b57f652945feb6044395a7190d94be0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:ca:a6:1e:f3:5c:ac:e8:9a:79:42:e8:30:
bf:2f:50:ba:25:bd:85:59:9d:6c:9f:40:9a:2c:56:
78:ec:61:5d:06:db:09:ca:90:4e:76:aa:31:d3:37:
51:c7:74:6b:04:02:18:13:3d:01:78:62:8b:7a:99:
93:5d:73:54:32:2a:5c:1d:00:5e:ae:c3:97:9c:c4:
9e:cf:97:dc:b2:68:9e:26:6d:b8:10:6c:aa:24:6e:
06:b0:0f:61:bb:5e:2a:77:70:d6:89:36:f2:f0:32:
1d:96:4f:e2:99:0b:92:42:6d:69:59:c2:04:b6:02:
08:07:44:41:46:a7:cf:36:33:1d:d7:09:2f:26:5b:
2e:27:3d:77:3d:ff:9d:78:f7:7f:6e:97:e3:6b:20:
a3:c2:ae:31:48:f7:bd:3f:90:45:da:d8:33:d1:44:
49:fa:1f:47:36:33:00:4c:1f:b4:54:f2:32:3d:24:
2d:72:7c:51:8c:41:1d:f1:cd:d2:1a:cb:d9:66:d0:
da:f0:63:d8:af:0b:d5:78:af:de:87:19:05:45:98:
d2:3b:77:05:b4:1d:e6:94:42:a1:77:be:4f:fa:36:
5a:99:9f:87:8a:a3:32:4e:3c:74:41:c2:78:88:15:
fa:6d:3b:a2:38:4d:3b:3f:e0:1b:89:c2:fc:2f:ad:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:E0:7B:57:F6:52:94:5F:EB:60:44:39:5A:71:90:D9:4B:E0:A7
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e5:1a:0f:5b:f4:6c:a3:cc:6e:d2:1e:52:e0:bb:a3:13:f8:
1a:1e:cf:bc:82:7d:b1:44:b1:79:ee:90:e0:4a:8d:5f:23:cd:
bd:03:ad:26:e8:9d:8e:59:70:ad:18:08:6f:3d:80:0e:e6:c7:
25:4a:59:5c:c4:2b:4c:a1:52:f8:3b:6d:9b:04:a2:49:93:1e:
47:1e:fd:41:ad:27:23:a4:82:1c:8b:1c:70:37:bc:53:47:c4:
5f:90:53:5e:ec:56:56:0c:63:ec:58:8e:15:d3:47:65:a4:d8:
21:26:5e:6a:af:fa:1f:5c:0f:20:26:04:17:68:02:6d:6a:e5:
a8:5d:96:c5:89:4b:32:86:fe:af:eb:7a:0d:c2:a9:08:c8:d2:
f9:67:de:4d:02:4d:4a:5a:ec:c3:f8:de:79:5d:95:1c:60:2d:
e0:44:ca:09:8b:58:a0:fa:3f:8a:75:8a:ec:fd:07:f0:1d:a6:
c4:ff:38:bc:6b:f5:ef:55:19:c9:b7:68:fc:d9:19:3f:64:b3:
27:2c:b9:07:8c:57:3b:cb:6e:10:b9:38:27:b0:72:9d:69:26:
c9:8a:a8:63:cb:2f:4d:32:bb:31:f7:a1:e5:c5:0e:ee:e5:01:
20:8e:33:3e:25:9f:64:60:b9:44:1f:e7:f0:50:df:5d:5f:1a:
22:9a:f5:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnGswV3IxI8tKWxZq4576r0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjUxMDA5MDIwMDQ1WhcNMjUxMDEwMDIwMDQ1WjAzMTEwLwYDVQQD
EyhkOWM3ZTA3YjU3ZjY1Mjk0NWZlYjYwNDQzOTVhNzE5MGQ5NGJlMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcfKph7zXKzomnlC6DC/L1C6Jb2F
WZ1sn0CaLFZ47GFdBtsJypBOdqox0zdRx3RrBAIYEz0BeGKLepmTXXNUMipcHQBe
rsOXnMSez5fcsmieJm24EGyqJG4GsA9hu14qd3DWiTby8DIdlk/imQuSQm1pWcIE
tgIIB0RBRqfPNjMd1wkvJlsuJz13Pf+dePd/bpfjayCjwq4xSPe9P5BF2tgz0URJ
+h9HNjMATB+0VPIyPSQtcnxRjEEd8c3SGsvZZtDa8GPYrwvVeK/ehxkFRZjSO3cF
tB3mlEKhd75P+jZamZ+HiqMyTjx0QcJ4iBX6bTuiOE07P+AbicL8L61QrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnH4HtX9lKUX+tgRDlacZDZS+CnMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuUaD1v0
bKPMbtIeUuC7oxP4Gh7PvIJ9sUSxee6Q4EqNXyPNvQOtJuidjllwrRgIbz2ADubH
JUpZXMQrTKFS+DttmwSiSZMeRx79Qa0nI6SCHIsccDe8U0fEX5BTXuxWVgxj7FiO
FdNHZaTYISZeaq/6H1wPICYEF2gCbWrlqF2WxYlLMob+r+t6DcKpCMjS+WfeTQJN
Slrsw/jeeV2VHGAt4ETKCYtYoPo/inWK7P0H8B2mxP84vGv171UZybdo/NkZP2Sz
Jyy5B4xXO8tuELk4J7BynWkmyYqoY8svTTK7Mfeh5cUO7uUBII4zPiWfZGC5RB/n
8FDfXV8aIpr1Hg==
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:05:22 2025 by rpki-client