Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: yLL/yRhcFtXU2wk2oAXfkTmnjOSzY4MdUClw27gFK+s=
Subject key identifier: 03:CD:20:59:B0:E6:29:E4:9B:E6:3C:0D:90:C2:5B:10:74:8E:75:50
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0197477944FA7A6C16DABFDB89A723A68F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 110F
Signing time: Fri 06 Jun 2025 23:00:19 +0000
Manifest this update: Fri 06 Jun 2025 23:00:19 +0000
Manifest next update: Sat 07 Jun 2025 23:00:19 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: ky4tzI59/K+QUfnxsj7gvPpS4Euh8Rpe41ATVuwRBbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:44:fa:7a:6c:16:da:bf:db:89:a7:23:a6:8f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jun 6 23:00:19 2025 GMT
Not After : Jun 7 23:00:19 2025 GMT
Subject: CN=03cd2059b0e629e49be63c0d90c25b10748e7550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:2b:3e:93:32:fd:c1:43:b7:94:46:1e:e8:
d0:3f:fe:e4:46:60:1b:5d:91:5b:80:0c:8e:a2:fc:
b0:9b:84:69:15:44:98:c8:16:54:6b:2a:9c:40:03:
07:3a:6f:93:d7:75:93:89:bc:70:6e:4a:c0:bd:db:
5e:93:83:8f:cb:2a:f0:56:42:60:d0:77:0b:b7:da:
a8:7e:af:db:fc:ac:78:9b:3c:de:dd:c0:a9:7e:7b:
1d:d0:e3:7a:ab:d7:c4:8b:c5:39:6c:e5:d8:50:72:
4d:17:f6:b0:c9:d9:9a:43:a0:31:d2:a3:76:55:68:
c3:7e:0f:5c:b8:f5:d8:98:f0:7f:3a:10:74:b8:92:
f7:24:16:f4:60:e1:b2:5d:19:38:dc:6b:9f:c8:f9:
0e:3a:09:8c:d9:11:49:79:4b:93:ca:6a:5e:58:34:
43:d2:96:6b:bf:e9:ee:31:d7:f3:01:dc:dd:e6:1d:
e7:8d:a4:83:73:d9:15:45:07:78:3a:96:b0:51:a3:
95:f6:b5:2e:63:41:87:ce:e7:da:5a:38:4a:2d:4b:
0e:2e:2d:fd:fe:bc:be:e7:77:f0:87:c2:81:42:4d:
54:50:77:ca:af:cd:ed:d2:57:26:18:25:24:cf:df:
6c:aa:aa:b9:fe:75:94:7c:42:02:ed:df:1c:a9:73:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:20:59:B0:E6:29:E4:9B:E6:3C:0D:90:C2:5B:10:74:8E:75:50
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:ad:ba:dd:49:9e:8c:82:de:38:76:c3:9a:b7:df:62:c0:
11:cc:e0:e9:49:cf:41:2a:cd:9e:f7:8e:2e:e7:ec:59:33:0b:
55:65:63:83:9e:5e:4b:e6:32:c5:56:10:a4:27:85:a4:ab:61:
af:a8:f5:39:49:fd:77:e2:96:51:6b:3e:9e:a1:6d:30:d1:f9:
cc:3f:08:06:01:3d:4c:93:12:6e:d9:0b:84:3d:f3:63:82:e6:
50:8e:00:29:10:76:d3:d5:72:26:18:5a:57:5e:85:c5:fe:bd:
ae:12:1e:bc:bc:7e:95:61:0e:91:e0:ae:3d:13:10:99:05:a0:
14:b0:72:c9:6b:bf:3b:2a:eb:9c:83:c7:c0:1f:41:04:07:dd:
35:66:ab:1a:50:0b:cb:2d:0f:53:ce:47:d5:85:e8:f1:07:10:
cb:23:9d:b0:12:2d:58:40:69:70:04:23:ab:51:0e:7a:ce:ec:
37:7a:d7:42:4e:58:92:b8:ab:b8:af:4d:89:58:98:bd:51:30:
3e:a0:dd:61:c4:35:0a:94:ef:18:28:37:e3:fb:4c:aa:f4:b4:
a7:46:44:96:49:58:3c:60:97:24:b5:18:1a:de:2c:4a:e5:8c:
6b:84:28:6b:65:0e:44:e0:51:65:f8:bd:b7:d1:a5:23:bf:69:
5e:9d:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:19 2025 by rpki-client