Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
File: TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft (raw, json)
Hash identifier: qAwpjHLBIGweaSE029lC4fPHHYA/eviTSpNA+aR7nJA=
Subject key identifier: F0:04:B6:6A:63:1E:6A:39:39:B4:7D:93:1F:AD:66:A6:BC:FA:FE:A2
Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935
Certificate serial: 019A26666DED4A44956C740FD93B49EC53AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
Manifest number: E0
Signing time: Mon 27 Oct 2025 16:00:38 +0000
Manifest this update: Mon 27 Oct 2025 16:00:38 +0000
Manifest next update: Tue 28 Oct 2025 16:00:38 +0000
Files and hashes: 1: 1-78e97Jrk9Uh_jE37kqFne1h0ac.roa (hash: z20HWJG9MeJX/qHD5qtfUrm0n+lWcEMp1qD7mshzZJo=)
2: 1zKIP7xP-3mviAaLxu-Q9kO8TDw.roa (hash: i+hbxTxfZVrUKiiV4ml6H+EfTXIaAVLa/rzpycnZQE0=)
3: TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl (hash: sB5Hl7bhIOrwTzrSzwIPTuWfrR7mUnjGIY1+WgKutAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:6d:ed:4a:44:95:6c:74:0f:d9:3b:49:ec:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935
Validity
Not Before: Oct 27 16:00:38 2025 GMT
Not After : Oct 28 16:00:38 2025 GMT
Subject: CN=f004b66a631e6a3939b47d931fad66a6bcfafea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:0b:79:76:7c:cb:0f:38:70:c5:31:20:13:
11:09:42:bd:1c:87:de:ff:b2:24:6d:41:26:1a:1a:
d3:3e:6a:7b:c3:89:0d:43:f6:c7:98:c9:52:db:54:
ee:97:89:d3:03:0e:9b:7e:e6:4d:79:5a:55:a3:2d:
c8:49:ca:56:da:a7:02:7c:a6:eb:88:f5:c3:4f:16:
db:d2:7d:ef:66:d8:b1:76:69:51:45:69:43:7d:b9:
9c:50:dd:b3:2c:3d:ec:ae:a4:6d:05:2b:14:e1:d6:
a9:57:a3:82:42:dc:1f:69:28:ae:2d:eb:57:09:9d:
fc:d5:67:19:d2:27:85:cc:05:1e:32:b1:f8:d5:bf:
96:42:79:ef:7f:b7:c8:41:1a:1f:3a:ce:8b:3e:ad:
f0:22:b8:1d:7d:44:af:cd:3e:d5:07:50:e0:10:49:
6b:57:1a:04:96:4a:51:f4:90:8f:e7:8c:28:0d:38:
66:c4:ce:16:bd:59:1e:99:27:36:fe:77:8c:c9:82:
90:0f:95:43:66:2c:b7:4e:5c:ce:47:03:f3:d2:65:
28:64:52:80:53:dd:9e:e1:ce:5b:9b:ba:39:66:e7:
4d:f7:b0:98:86:c1:b4:69:d0:56:09:92:0d:84:51:
b7:32:ad:63:f2:a0:18:0b:8d:6a:e9:49:d5:ec:ec:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:B6:6A:63:1E:6A:39:39:B4:7D:93:1F:AD:66:A6:BC:FA:FE:A2
X509v3 Authority Key Identifier:
keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f5:47:7e:bd:8d:42:54:73:5b:8f:d6:7e:b0:e5:86:11:01:
1b:a9:2d:38:2d:97:b7:db:1d:22:e9:b9:c9:9c:be:a8:4c:12:
11:9e:53:bf:01:47:b3:e2:f0:a5:91:33:e4:cb:bb:8c:a5:cc:
d4:9c:76:0c:3a:34:ac:10:fd:71:b5:af:9d:f1:1e:11:88:b3:
ae:39:db:c4:c3:7c:57:5d:08:da:af:2c:85:9d:9e:0c:fd:7f:
ee:9b:2e:5a:1f:12:e1:e2:37:14:c6:fd:5c:43:5d:30:5e:b6:
98:ed:fc:ae:6b:32:c0:89:a0:0d:54:2f:94:f5:7a:55:29:ca:
fd:d1:8b:bb:bb:d5:d8:79:3e:d6:f3:1c:61:3a:34:0c:43:b9:
b2:e8:35:0e:7f:9d:8f:b1:e8:f8:4b:92:79:8d:4a:7d:84:42:
76:9c:cc:c6:15:9a:d7:5e:6a:7c:41:df:f0:54:3b:55:f9:9a:
68:98:03:c4:80:b1:ae:55:72:fa:9f:a9:11:dd:77:19:09:d9:
3e:d6:bd:96:6c:a9:a8:10:b3:5d:d1:54:08:c3:0b:ae:4f:29:
a7:be:dc:da:9d:e2:1d:79:49:7e:8f:27:cf:52:17:e3:37:61:
e9:64:27:b2:43:f0:7f:2e:ea:4b:bf:aa:54:86:ec:42:75:92:
7e:02:09:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZm3tSkSVbHQP2TtJ7FOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTkwMzc5YmQ4ZDA0Mzc0YjNhZGVmMDYwZDUxYWUyMTU3
MTA5MzUwHhcNMjUxMDI3MTYwMDM4WhcNMjUxMDI4MTYwMDM4WjAzMTEwLwYDVQQD
EyhmMDA0YjY2YTYzMWU2YTM5MzliNDdkOTMxZmFkNjZhNmJjZmFmZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3MLeXZ8yw84cMUxIBMRCUK9HIfe
/7IkbUEmGhrTPmp7w4kNQ/bHmMlS21Tul4nTAw6bfuZNeVpVoy3IScpW2qcCfKbr
iPXDTxbb0n3vZtixdmlRRWlDfbmcUN2zLD3srqRtBSsU4dapV6OCQtwfaSiuLetX
CZ381WcZ0ieFzAUeMrH41b+WQnnvf7fIQRofOs6LPq3wIrgdfUSvzT7VB1DgEElr
VxoElkpR9JCP54woDThmxM4WvVkemSc2/neMyYKQD5VDZiy3TlzORwPz0mUoZFKA
U92e4c5bm7o5ZudN97CYhsG0adBWCZINhFG3Mq1j8qAYC41q6UnV7OzEVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAEtmpjHmo5ObR9kx+tZqa8+v6iMB8GA1UdIwQY
MBaAFEzpA3m9jQQ3Szre8GDVGuIVcQk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYt
ODIwMGI4NjYwM2IxLzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYtODIwMGI4NjYwM2Ix
LzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvVHfr2N
QlRzW4/WfrDlhhEBG6ktOC2Xt9sdIum5yZy+qEwSEZ5TvwFHs+LwpZEz5Mu7jKXM
1Jx2DDo0rBD9cbWvnfEeEYizrjnbxMN8V10I2q8shZ2eDP1/7psuWh8S4eI3FMb9
XENdMF62mO38rmsywImgDVQvlPV6VSnK/dGLu7vV2Hk+1vMcYTo0DEO5sug1Dn+d
j7Ho+EuSeY1KfYRCdpzMxhWa115qfEHf8FQ7VfmaaJgDxICxrlVy+p+pEd13GQnZ
Pta9lmypqBCzXdFUCMMLrk8pp77c2p3iHXlJfo8nz1IX4zdh6WQnskPwfy7qS7+q
VIbsQnWSfgIJYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 20:41:48 2025 by rpki-client