Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: mf6zoYa2rmMq7zC5A0aj1nzv14f4ZE4HR342tdkY5wU=
Subject key identifier: D5:61:43:98:84:1F:B3:BB:28:60:DD:D5:EC:24:0D:23:65:34:F5:E0
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 01967AC4D82617EBAF0FDE9C56C328D41FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 05:00:42 +0000
Manifest this update: Mon 28 Apr 2025 05:00:42 +0000
Manifest next update: Tue 29 Apr 2025 05:00:42 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: YKyUDBjaI8eHOInEiPtfWndAgeSPmUXkrbbi9cfEdVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:d8:26:17:eb:af:0f:de:9c:56:c3:28:d4:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Apr 28 05:00:42 2025 GMT
Not After : Apr 29 05:00:42 2025 GMT
Subject: CN=d5614398841fb3bb2860ddd5ec240d236534f5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:d2:6a:40:45:84:42:01:9d:45:80:09:68:
2a:fc:ae:ba:52:1d:fe:4e:66:e8:45:6e:54:46:fb:
4c:60:10:e1:a6:9f:8a:c8:3a:17:7d:5b:2b:95:36:
e0:f7:f0:15:07:3e:cf:0e:0a:5c:f6:8e:f9:de:21:
ad:ec:e3:92:db:db:4d:e0:59:6a:f7:5a:c0:41:3b:
45:58:9e:d2:6c:ad:69:fd:fb:a0:d8:4e:32:aa:e7:
e7:5a:46:d5:fa:a5:ff:e9:0f:0b:40:a1:8f:11:19:
51:f4:e1:f8:99:50:91:64:93:d3:cf:46:50:27:4a:
a7:4c:df:7b:8b:d7:63:d6:f1:23:71:ff:4e:6d:de:
22:23:91:69:a2:57:6f:96:a9:72:fc:14:f2:f6:d0:
23:8d:a7:eb:d0:25:b6:f2:55:ec:2d:bb:8f:25:3b:
24:d6:26:3d:0c:f2:19:bd:7d:81:e5:17:c0:a8:dc:
aa:0c:7e:a8:6a:5c:14:22:7b:4f:fb:57:7d:ab:a3:
36:0e:c1:ae:32:2c:cc:02:81:af:1a:bf:11:d4:d2:
7a:20:0d:1a:dc:cc:1b:98:29:14:12:a9:92:c6:86:
78:a8:8c:de:09:2f:f0:a3:e6:b5:c1:a5:a3:39:e0:
bc:90:3d:48:ac:07:96:85:63:59:63:9e:60:30:a9:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:43:98:84:1F:B3:BB:28:60:DD:D5:EC:24:0D:23:65:34:F5:E0
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:08:84:1b:f7:ae:37:ff:23:25:16:3a:63:0f:06:2d:04:
64:8f:57:cc:44:17:58:95:77:71:37:31:9e:03:8b:c7:a7:ad:
94:ba:42:eb:28:8d:fd:0a:9b:b3:35:55:08:ab:4e:c1:5b:87:
f9:ed:7e:3f:fb:d8:06:18:8f:18:8f:65:c9:d4:60:1a:b5:e1:
ba:89:de:8b:5e:9f:81:18:54:3d:12:ac:38:f1:32:a6:ab:30:
13:35:f0:a1:f0:06:5a:57:ab:b7:a4:b1:00:48:21:57:83:6e:
07:b7:85:e6:ae:e5:89:45:61:de:f0:ef:34:6e:26:49:0f:08:
07:d7:8f:a1:8f:76:8f:e1:03:8f:a5:f1:3d:53:70:f2:e1:67:
c6:12:8a:30:7c:25:ea:e8:c4:66:35:6b:6b:84:e7:83:62:5b:
95:f0:6a:57:fc:6b:98:de:51:94:aa:3e:db:66:61:94:02:14:
52:04:a1:ea:00:14:b5:e0:f1:5a:4e:8c:5a:6d:11:06:c0:56:
b4:3a:f7:e2:74:98:84:1f:b4:1e:f9:e5:2f:7c:77:f9:43:94:
17:74:fa:4c:62:eb:65:c1:5e:89:88:d0:b9:26:4a:db:9c:5d:
34:3c:15:3a:a5:40:5d:95:d3:cb:29:df:fc:c8:88:56:d7:28:
f3:6a:b9:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xNgmF+uvD96cVsMo1B+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4
NTg5YmEwHhcNMjUwNDI4MDUwMDQyWhcNMjUwNDI5MDUwMDQyWjAzMTEwLwYDVQQD
EyhkNTYxNDM5ODg0MWZiM2JiMjg2MGRkZDVlYzI0MGQyMzY1MzRmNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllbSakBFhEIBnUWACWgq/K66Uh3+
TmboRW5URvtMYBDhpp+KyDoXfVsrlTbg9/AVBz7PDgpc9o753iGt7OOS29tN4Flq
91rAQTtFWJ7SbK1p/fug2E4yqufnWkbV+qX/6Q8LQKGPERlR9OH4mVCRZJPTz0ZQ
J0qnTN97i9dj1vEjcf9Obd4iI5Fpoldvlqly/BTy9tAjjafr0CW28lXsLbuPJTsk
1iY9DPIZvX2B5RfAqNyqDH6oalwUIntP+1d9q6M2DsGuMizMAoGvGr8R1NJ6IA0a
3MwbmCkUEqmSxoZ4qIzeCS/wo+a1waWjOeC8kD1IrAeWhWNZY55gMKnhIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVhQ5iEH7O7KGDd1ewkDSNlNPXgMB8GA1UdIwQY
MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt
NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw
LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNQIhBv3
rjf/IyUWOmMPBi0EZI9XzEQXWJV3cTcxngOLx6etlLpC6yiN/QqbszVVCKtOwVuH
+e1+P/vYBhiPGI9lydRgGrXhuonei16fgRhUPRKsOPEypqswEzXwofAGWlert6Sx
AEghV4NuB7eF5q7liUVh3vDvNG4mSQ8IB9ePoY92j+EDj6XxPVNw8uFnxhKKMHwl
6ujEZjVra4Tng2JblfBqV/xrmN5RlKo+22ZhlAIUUgSh6gAUteDxWk6MWm0RBsBW
tDr34nSYhB+0HvnlL3x3+UOUF3T6TGLrZcFeiYjQuSZK25xdNDwVOqVAXZXTyynf
/MiIVtco82q5FQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:18 2025 by rpki-client