Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: 2liCMaHjThJthSGE17s5YEeWpMVV8WOtE3/1vaP1PbY=
Subject key identifier: 11:6B:3F:AF:00:8C:B3:79:A1:36:C2:31:5D:7E:00:95:20:37:04:37
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019770077C733D1C2C01D34A3D33D42CBD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 20:00:28 +0000
Manifest this update: Sat 14 Jun 2025 20:00:28 +0000
Manifest next update: Sun 15 Jun 2025 20:00:28 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: t7LYP3239vCcfDMvxnOyHgv4GzDEA2frlvpMVb9fWrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:7c:73:3d:1c:2c:01:d3:4a:3d:33:d4:2c:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Jun 14 20:00:28 2025 GMT
Not After : Jun 15 20:00:28 2025 GMT
Subject: CN=116b3faf008cb379a136c2315d7e009520370437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:a4:de:42:2d:3a:f9:fb:b0:4f:a6:27:02:
88:ca:9c:d9:63:80:cf:bc:7f:02:3f:13:44:35:d6:
21:6d:37:c8:dc:c3:9f:c8:6f:5a:92:45:9e:30:f2:
b7:42:66:fa:da:89:ed:51:7b:24:32:21:56:4e:cf:
8c:53:30:fb:a3:d2:0f:a7:21:20:c5:56:77:42:c9:
11:a4:fa:b5:14:04:67:98:c5:d5:09:c7:be:9b:d9:
e4:40:68:d9:13:b7:d3:b7:57:76:89:62:fa:87:f4:
a2:76:cb:1c:69:88:81:64:88:30:dd:dd:a4:a8:b1:
f2:09:45:22:63:8a:52:38:e5:f6:87:5d:44:d3:a5:
ef:2d:b4:16:0b:7e:1e:97:5a:22:c5:b4:72:9d:3d:
b0:f0:21:af:a1:5a:6a:ef:1e:01:2c:cd:32:8f:44:
b2:ad:66:be:88:7e:7b:90:e9:a8:10:6d:3a:a1:89:
76:c5:39:bb:cc:13:ce:36:53:6b:ea:fd:5b:1a:da:
39:46:ec:da:3a:d5:76:92:a9:9d:e0:e8:0f:94:71:
9c:0d:7f:e3:f9:52:0a:f9:07:03:91:a2:ff:f1:a2:
a5:e9:e8:00:c2:c6:bc:a6:1d:a9:51:fe:49:79:a0:
bc:82:60:c9:40:68:fc:ad:57:56:9b:be:e9:43:41:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6B:3F:AF:00:8C:B3:79:A1:36:C2:31:5D:7E:00:95:20:37:04:37
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:6a:5f:cc:4b:19:1e:f3:d4:06:95:71:e5:37:5a:e6:ef:
df:6a:a9:80:1b:b1:2a:40:b4:ff:bb:7b:bc:34:67:5e:f4:c6:
06:81:8f:12:83:35:14:eb:e1:e8:20:ec:dd:dd:93:88:ff:d5:
b0:b1:54:01:b7:da:31:b8:d7:66:d7:3e:6e:fb:91:3b:a1:dd:
62:6f:56:8c:58:9e:82:b9:a7:96:09:25:cb:3b:19:bc:4d:0f:
01:5d:be:72:d1:a9:1b:1a:07:32:e6:55:ba:49:13:44:be:9a:
d9:99:af:3f:53:0b:d6:f3:ec:6d:17:9f:68:0e:ef:67:92:6a:
b3:65:9e:8e:dd:9f:be:47:60:e0:ce:68:bb:c5:1c:7d:8f:12:
cb:48:db:2a:ce:10:f9:3f:04:67:c1:57:f1:05:af:a1:06:f2:
5a:46:65:ef:e6:44:45:f5:8b:b5:b4:83:6c:6a:c6:c0:06:75:
bd:c7:eb:eb:f5:32:b9:62:02:6f:56:c9:5e:7e:e8:b2:9f:64:
21:17:6e:34:23:2e:5b:f3:bb:b1:0b:4a:78:59:d5:e9:2d:86:
68:7f:6b:ca:1b:e1:10:a2:97:6b:d5:58:cb:69:fb:f9:41:f7:
e3:bb:11:1c:3c:7b:8e:61:f1:c8:03:b5:77:e8:b7:66:84:ea:
68:94:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:34:03 2025 by rpki-client