Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: aiIZ5tacwgEEldKJnrBxAN9xCnaxHF2/bBmJTagQh0c=
Subject key identifier: B5:5E:0E:3E:47:B5:4D:02:51:D4:E7:D5:23:FB:E6:41:C4:73:7A:C3
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 019857FD06D2DBA41E48BB64922E00AD38CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 21:00:56 +0000
Manifest this update: Tue 29 Jul 2025 21:00:56 +0000
Manifest next update: Wed 30 Jul 2025 21:00:56 +0000
Files and hashes: 1: qKf3kSwed1sQ8jIUt0CVeHwDYyo.roa (hash: JvCwYzHwZc3gc1jfWnqqm/e28zS68AlD89E8H1B2hTo=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: hhMiAWP5MbGovNguH227v5zpk+I6MGpI81PeAyNBuIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:fd:06:d2:db:a4:1e:48:bb:64:92:2e:00:ad:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Jul 29 21:00:56 2025 GMT
Not After : Jul 30 21:00:56 2025 GMT
Subject: CN=b55e0e3e47b54d0251d4e7d523fbe641c4737ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:b0:72:fb:6e:df:55:de:ae:9a:98:2b:41:
4a:0f:38:16:77:e2:94:19:a1:54:a2:e1:eb:73:fc:
8e:eb:e6:88:03:4b:ad:89:c3:8a:51:83:02:15:02:
dd:31:7c:eb:5c:74:9c:6c:4e:db:c9:07:e0:de:91:
a5:92:38:ab:d4:24:26:68:85:b0:87:88:80:28:45:
b5:99:a6:69:ce:02:9e:8d:d2:14:bd:3b:55:24:1e:
56:9f:ad:b7:a1:35:6e:65:94:16:87:f9:b1:1a:5d:
3f:bb:35:57:44:61:99:8b:ab:45:48:59:30:d7:36:
bd:ea:77:ed:21:28:a7:74:c6:fe:68:71:16:ae:e9:
85:48:75:84:c4:ae:f0:47:0f:e1:9e:81:c0:21:0e:
26:c4:82:0e:54:a4:40:42:74:99:1a:1a:42:b8:ec:
0e:53:d3:c1:ec:dc:52:78:48:33:be:56:c4:93:e7:
49:e2:be:61:98:21:4b:34:ff:71:d2:70:92:0d:2b:
d5:6f:10:69:ee:01:1e:3f:c6:e2:44:d8:98:61:b5:
a5:9a:20:94:98:8c:bc:32:45:e8:2e:74:3f:47:75:
75:30:bd:93:58:9d:7b:a4:e2:0a:12:8d:a3:66:8a:
89:f4:66:0d:1b:5b:8b:2e:b2:c8:71:64:9e:fa:71:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5E:0E:3E:47:B5:4D:02:51:D4:E7:D5:23:FB:E6:41:C4:73:7A:C3
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e3:c5:85:8d:dc:77:37:ff:87:e4:61:20:9d:d6:4d:b8:f7:
b7:07:26:92:0c:ab:56:97:8a:38:45:49:a0:11:96:1b:c9:c5:
de:07:13:55:05:1f:30:13:d2:38:c6:fd:ba:dd:66:6f:bd:84:
ec:4d:47:3f:f9:2d:a3:12:1b:de:34:21:93:8e:fc:ab:f1:fa:
ac:f7:ac:6d:33:fb:27:18:66:c4:92:d7:35:b4:06:72:6f:d1:
86:fd:d7:df:8b:bf:4a:f6:ca:68:cd:18:aa:0c:a4:45:e8:ea:
c8:59:bf:73:3b:1e:a4:97:e8:0a:41:3d:30:c5:2d:5f:ce:3a:
8d:3d:a7:ec:98:f0:b0:32:fa:13:58:6c:3b:b6:5d:c8:b0:1b:
59:0d:1a:59:ca:48:6c:fe:ad:3e:bf:93:e5:24:c1:d8:f7:29:
c8:29:13:29:bb:64:ea:4b:e4:6e:5d:3e:06:0a:24:03:00:ac:
49:6c:69:bd:b9:8f:9d:16:39:bd:ea:68:d3:be:38:60:9a:99:
0f:72:aa:72:85:a8:24:7a:2e:0e:06:c7:24:91:ec:a9:6d:ea:
5e:14:86:87:85:8f:65:ce:7b:25:4a:05:0c:0c:90:e8:b2:a8:
d3:7b:aa:62:37:31:73:79:e8:6e:a1:b2:9d:63:d4:ab:6d:16:
58:4b:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:47:01 2025 by rpki-client