Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: jEnFtX1ULznZ2nBv7KWzFp0x4/10WIAHCIu7tZbagkg=
Subject key identifier: 92:A7:A5:C5:E7:EC:C7:2E:8C:27:B3:15:1D:42:DC:1F:13:BE:F5:52
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019921B0CF4843DA56F413CFACC157F50073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: 59
Signing time: Sun 07 Sep 2025 01:00:59 +0000
Manifest this update: Sun 07 Sep 2025 01:00:59 +0000
Manifest next update: Mon 08 Sep 2025 01:00:59 +0000
Files and hashes: 1: 1-78e97Jrk9Uh_jE37kqFne1h0ac.roa (hash: z20HWJG9MeJX/qHD5qtfUrm0n+lWcEMp1qD7mshzZJo=)
2: 1zKIP7xP-3mviAaLxu-Q9kO8TDw.roa (hash: i+hbxTxfZVrUKiiV4ml6H+EfTXIaAVLa/rzpycnZQE0=)
3: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: zL8/NTBsu+Be/LYW2Tih7lFTp77moxIIc9/XRudr5Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:cf:48:43:da:56:f4:13:cf:ac:c1:57:f5:00:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Sep 7 01:00:59 2025 GMT
Not After : Sep 8 01:00:59 2025 GMT
Subject: CN=92a7a5c5e7ecc72e8c27b3151d42dc1f13bef552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:2a:fe:03:90:29:a4:f5:2f:fc:f8:8d:7a:
7a:5e:72:17:a8:5a:55:6a:1e:35:dc:0d:cd:04:ff:
4d:c2:08:de:63:e9:13:94:9c:2e:86:cb:4a:35:28:
dc:6d:58:ac:0a:d4:d1:83:5b:6a:6b:b3:98:bb:f5:
44:3c:f8:40:1b:30:b7:da:4c:2e:ed:36:ba:38:39:
10:5b:25:95:2c:cf:9b:fc:b8:15:fd:93:6f:25:a7:
6b:04:55:fe:4e:8f:7f:5f:f1:49:bd:41:dd:6b:bc:
ae:95:8f:6c:fb:8e:f1:e4:13:24:78:02:73:16:e6:
d6:03:c5:ba:49:f2:31:70:6d:54:af:8f:6a:07:b7:
8c:e8:e4:06:a8:4f:45:c8:0f:cd:0b:34:2e:6c:52:
2e:7b:a3:c9:3c:cd:cc:9c:88:59:ab:40:64:d6:8f:
26:4c:06:c6:31:d3:69:c7:60:82:90:8d:31:7e:f3:
22:b1:f6:e1:30:d8:f6:38:0b:20:e7:28:54:8a:73:
c7:aa:f9:da:82:94:1b:da:fa:1d:d9:68:59:67:4b:
fc:2e:81:39:54:4d:e8:38:12:e1:4e:20:e3:b4:93:
69:06:c2:6c:49:6c:51:6f:76:f7:1a:36:a9:3f:94:
1a:e5:0d:8b:34:c4:47:db:c2:26:fa:66:17:26:96:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:A5:C5:E7:EC:C7:2E:8C:27:B3:15:1D:42:DC:1F:13:BE:F5:52
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:bc:b6:96:36:a0:c2:1e:30:83:45:40:a8:10:1b:5e:de:
92:0a:d4:9e:e5:2f:03:90:30:8d:ca:69:ff:bc:c9:13:13:0f:
ed:ef:11:51:d3:3d:b7:06:d8:6b:0e:82:01:6b:d4:fe:61:bb:
cc:47:25:57:7d:ab:ff:23:3e:54:e5:b8:d0:43:80:e2:22:c6:
07:3c:46:e3:ec:b7:25:23:bf:5a:b1:b2:06:fe:6e:4c:32:07:
7d:01:a3:d9:c9:4b:20:39:7d:f8:bb:18:9c:17:a2:36:01:94:
db:3e:22:c4:dd:a2:65:af:a2:80:8e:1a:13:77:ae:b8:72:e0:
98:47:7f:cc:c3:74:6e:d3:c6:bc:37:b0:b0:74:fa:82:c8:d6:
51:81:ed:d0:00:1a:77:f9:da:ae:52:60:be:01:28:57:2e:80:
5e:47:4e:d0:6c:08:8f:a5:4e:30:c9:1a:b9:51:11:48:e2:2b:
1a:e4:96:bc:d3:2d:00:60:24:71:e7:5e:37:49:55:40:99:6b:
43:62:fe:15:91:d9:b0:87:3c:f9:e1:b1:b2:27:8b:04:84:da:
09:25:18:c1:01:35:99:af:6e:24:24:29:1d:77:c1:34:88:b7:
8c:17:21:fe:99:24:0f:9f:b6:b3:65:85:1b:df:ce:be:77:25:
4c:8d:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:14 2025 by rpki-client