Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: SrXKDjPaaBg8DMZ9pVBPnRij6uDO2xztyUwGoRRXBAk=
Subject key identifier: 76:D7:C4:D6:26:87:0C:5C:18:16:24:CA:43:ED:3B:45:25:78:3E:5A
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 019652366B5032B8BDBCFF44DB7EB833816F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 1090
Signing time: Sun 20 Apr 2025 08:00:20 +0000
Manifest this update: Sun 20 Apr 2025 08:00:20 +0000
Manifest next update: Mon 21 Apr 2025 08:00:20 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: 26HydlBtANXFA2jEUHP4oDD/gyXn1s3c0HTZvKBFkm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:6b:50:32:b8:bd:bc:ff:44:db:7e:b8:33:81:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Apr 20 08:00:20 2025 GMT
Not After : Apr 21 08:00:20 2025 GMT
Subject: CN=76d7c4d626870c5c181624ca43ed3b4525783e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:56:69:c7:56:ba:cc:24:a3:49:df:68:26:
e2:17:14:53:1c:90:3e:f4:a7:32:f1:17:fa:3e:72:
a4:c6:ac:a1:5e:e4:4d:d8:68:65:36:0c:de:1e:6e:
08:66:72:33:42:47:dc:fa:b3:67:b5:67:17:ed:1d:
9b:95:13:0a:e5:03:87:42:e5:82:38:82:3d:6b:bd:
01:d9:01:60:b0:f0:c5:f8:24:ad:d7:97:e8:c6:a5:
23:92:f9:1c:f1:f0:c9:f8:27:97:57:f0:df:fd:2b:
84:dc:bd:c3:bc:f0:21:08:99:8f:28:df:ab:a4:6b:
f5:01:fb:3e:48:c1:2c:84:c1:75:bb:6b:97:6d:43:
c8:78:9d:42:54:19:a0:e2:d1:43:89:53:6a:0a:90:
50:aa:21:74:0f:e4:24:71:9e:b2:22:aa:95:03:c8:
98:3b:98:98:21:d5:10:26:1b:d4:0c:66:92:46:08:
36:d0:4f:55:2b:62:7e:7e:39:2e:8c:65:91:6d:68:
fb:ea:93:98:8f:42:f2:d7:a1:53:f5:a6:81:ab:32:
5e:96:e9:bd:ad:67:02:08:c6:ad:ca:4b:3e:4e:6f:
5e:30:2e:85:32:87:c8:c1:d4:08:68:c4:4c:be:58:
07:d6:f4:8b:31:b6:59:bc:d4:05:b1:86:13:47:eb:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:C4:D6:26:87:0C:5C:18:16:24:CA:43:ED:3B:45:25:78:3E:5A
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b6:52:27:08:92:bc:90:8e:96:fb:45:16:ec:6d:45:f2:1a:
49:8c:38:5e:ea:16:b9:05:b9:36:85:14:0a:9c:78:6a:89:70:
7c:7f:6e:c0:ad:b8:a3:7b:0f:14:47:77:ad:8f:b2:05:f2:cd:
0c:9c:44:7f:79:2d:8d:2c:46:2a:d9:2d:6e:25:e6:09:06:42:
40:9b:64:a7:10:6b:f8:ef:9c:60:18:63:df:da:a6:b4:c9:5b:
f5:b7:18:48:e4:c0:74:b1:6b:89:08:b0:fa:c5:21:32:a5:47:
08:7a:a6:8a:a6:c1:57:73:a2:8f:98:8c:f0:9f:3d:7c:2b:c2:
30:1f:80:f7:d9:fc:64:79:67:b5:1f:1c:5c:43:46:b7:93:e7:
6d:fb:3c:cd:69:94:c4:f6:e5:1e:8c:ef:49:d0:5b:d7:c5:e2:
f7:3f:de:7c:8f:b4:f4:3e:bd:d6:db:18:e6:bf:7d:33:00:86:
aa:f8:07:62:0a:3c:84:b6:ca:f6:88:26:68:6d:da:4c:d2:4c:
de:5b:20:e0:e8:7c:3f:98:50:ea:24:6d:a9:75:1b:d5:71:6c:
30:ad:8c:5d:4e:d3:91:0f:07:8f:d5:47:6f:50:96:da:40:73:
0b:b9:e2:e7:96:8e:b2:31:6a:ed:2f:06:22:d6:56:06:64:19:
9e:4f:dc:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNmtQMri9vP9E2364M4FvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2ODkyOTliYzQ5NTg0YTY0NTk0MGMxZGQ4N2RmMGFmYzhh
YWEwZmQwHhcNMjUwNDIwMDgwMDIwWhcNMjUwNDIxMDgwMDIwWjAzMTEwLwYDVQQD
Eyg3NmQ3YzRkNjI2ODcwYzVjMTgxNjI0Y2E0M2VkM2I0NTI1NzgzZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1hWacdWuswko0nfaCbiFxRTHJA+
9Kcy8Rf6PnKkxqyhXuRN2GhlNgzeHm4IZnIzQkfc+rNntWcX7R2blRMK5QOHQuWC
OII9a70B2QFgsPDF+CSt15foxqUjkvkc8fDJ+CeXV/Df/SuE3L3DvPAhCJmPKN+r
pGv1Afs+SMEshMF1u2uXbUPIeJ1CVBmg4tFDiVNqCpBQqiF0D+QkcZ6yIqqVA8iY
O5iYIdUQJhvUDGaSRgg20E9VK2J+fjkujGWRbWj76pOYj0Ly16FT9aaBqzJelum9
rWcCCMatyks+Tm9eMC6FMofIwdQIaMRMvlgH1vSLMbZZvNQFsYYTR+s1dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbXxNYmhwxcGBYkykPtO0UleD5aMB8GA1UdIwQY
MBaAFLaJKZvElYSmRZQMHdh98K/IqqD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAt
YzBmM2JhZDk5YTQwLzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy83Y2E2MWEtY2UzZC00YmFjLTkxMTAtYzBmM2JhZDk5YTQw
LzEvdG9rcG04U1ZoS1pGbEF3ZDJIM3dyOGlxb1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbZSJwiS
vJCOlvtFFuxtRfIaSYw4XuoWuQW5NoUUCpx4aolwfH9uwK24o3sPFEd3rY+yBfLN
DJxEf3ktjSxGKtktbiXmCQZCQJtkpxBr+O+cYBhj39qmtMlb9bcYSOTAdLFriQiw
+sUhMqVHCHqmiqbBV3Oij5iM8J89fCvCMB+A99n8ZHlntR8cXENGt5Pnbfs8zWmU
xPblHozvSdBb18Xi9z/efI+09D691tsY5r99MwCGqvgHYgo8hLbK9ogmaG3aTNJM
3lsg4Oh8P5hQ6iRtqXUb1XFsMK2MXU7TkQ8Hj9VHb1CW2kBzC7ni55aOsjFq7S8G
ItZWBmQZnk/cbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:22:35 2025 by rpki-client