Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: hNAdzd9FPLQUyh1/c1aLSgT4+2gVWq78rNrDnwnDeb0=
Subject key identifier: 3A:27:06:CB:67:F1:77:54:B2:2B:85:29:37:F9:E9:C2:00:D9:B1:65
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019A4DE1F1C4ACC101BE0CAA2A3258F255AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 4CHC44Dwd0o0DxTq1Z24iQ1+HOSOZW2pacnvhfI1ISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f1:c4:ac:c1:01:be:0c:aa:2a:32:58:f2:55:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=3a2706cb67f17754b22b852937f9e9c200d9b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:dc:9b:80:eb:4d:34:54:11:17:65:d5:9f:
01:af:84:f9:c5:fc:45:6d:e3:d6:9a:b7:a3:96:3e:
08:a6:53:eb:68:9f:44:b9:65:18:3f:b5:77:c6:5c:
21:bd:ce:89:f0:7a:de:99:d1:d1:f5:a9:53:15:a4:
f7:53:96:68:33:60:6a:c0:c7:0d:df:7d:d1:12:d4:
65:22:7b:a7:8b:43:62:71:ec:90:0a:0d:bc:12:d4:
da:76:49:52:da:08:c3:f2:74:fc:3e:fe:78:77:26:
9d:49:fd:74:ef:69:b4:1b:b4:2c:96:a1:f9:88:4d:
42:91:2e:56:22:87:07:fc:d2:61:4e:35:72:0a:67:
32:7b:48:8c:6c:63:00:27:63:2c:60:bc:84:97:92:
2b:a2:96:12:c5:c7:06:d9:d5:09:05:71:04:9c:16:
5c:12:ec:9f:7a:11:58:f3:ec:df:6c:82:b7:3c:5f:
0e:06:5b:59:40:fb:b2:72:44:e2:be:e2:8e:4f:63:
c1:d9:b7:a9:2a:30:c4:01:39:df:e8:b0:de:b3:84:
43:ee:b3:0a:34:41:1e:3f:98:6a:a5:9f:8d:2c:e9:
b9:cc:25:78:38:38:da:5f:09:c0:d5:66:f6:a8:57:
d6:82:26:b3:a3:c7:fa:ce:c4:63:ef:1b:32:3e:66:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:06:CB:67:F1:77:54:B2:2B:85:29:37:F9:E9:C2:00:D9:B1:65
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e2:0b:2d:4f:f6:e8:f4:e2:cf:a6:89:4d:62:ce:b9:84:68:
2a:86:d9:fe:8f:af:ed:e2:16:d0:e7:03:f7:9b:0d:27:4f:6d:
0b:ce:a4:3b:9b:53:e2:d1:dc:4c:56:61:c1:44:82:8f:06:1d:
1b:30:fa:85:01:36:54:87:07:e6:0c:4b:c7:cf:a9:96:e9:db:
2a:41:ee:6b:9e:8c:2b:2e:dc:fa:f9:d2:e3:28:a9:c6:d0:e5:
c6:dc:fe:d8:11:c9:91:02:e0:92:cd:09:fa:a5:91:32:cc:84:
34:4f:05:af:6e:df:44:a0:5f:91:6e:46:09:9c:bf:71:e5:45:
ce:6b:f9:07:8b:5f:0a:d4:4e:10:76:07:76:b3:fb:8e:03:1e:
84:ca:40:75:cc:d1:74:d6:e5:a4:70:71:80:76:33:16:f9:9d:
20:07:7f:5e:eb:98:29:5e:de:06:da:19:18:85:3b:af:c9:e7:
2d:c8:14:7a:30:3a:b8:2a:89:f4:da:c0:47:87:53:c8:63:ca:
09:2f:71:35:7b:63:7f:2c:de:b7:a8:57:ec:85:c6:48:a7:bb:
8a:bc:30:23:05:cf:53:a1:35:16:9f:f2:73:cf:3f:a8:55:33:
cb:2a:26:66:24:d2:48:d3:27:2c:3e:2c:f2:78:c3:68:1c:c8:
f1:9f:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:59 2025 by rpki-client