Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: fPbtdZ48m/ASwluuMEX/PvvdyJ/sDBvHLHVAP4WgY8Q=
Subject key identifier: 4F:58:DF:45:70:AA:DA:6D:5C:90:45:17:B7:16:94:B5:F6:EB:E0:A9
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019872CFBCE5A18D7050795A727444FE17AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:13 +0000
Manifest this update: Mon 04 Aug 2025 02:01:13 +0000
Manifest next update: Tue 05 Aug 2025 02:01:13 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: tCC2vsjNmP09B+oHkru3zQqmKc7A/GcWS36FnfDtRW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:bc:e5:a1:8d:70:50:79:5a:72:74:44:fe:17:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Aug 4 02:01:13 2025 GMT
Not After : Aug 5 02:01:13 2025 GMT
Subject: CN=4f58df4570aada6d5c904517b71694b5f6ebe0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:69:5b:ea:53:60:fd:70:08:d9:3c:3c:89:
85:a9:f2:de:b8:3b:da:fc:b7:5c:8e:14:4c:50:4b:
93:07:b6:a7:13:8c:63:bf:43:d5:15:81:dd:7b:0a:
0a:41:11:9f:1b:09:09:65:bb:66:c8:dc:79:44:71:
3b:88:bc:b9:a3:a1:81:83:46:1a:ea:f7:7e:f2:52:
a1:f2:8c:01:74:2a:67:90:42:0b:38:cf:d3:a7:3e:
6a:52:5c:98:a0:c1:ab:73:d2:ee:39:53:e9:ed:6d:
3f:78:16:2f:95:58:f4:76:be:7a:1e:5e:ef:cc:bd:
b7:74:44:19:cb:00:19:b9:4e:8d:9c:e4:5d:72:45:
86:a9:59:a6:bc:81:74:12:a5:8e:9d:2f:3d:00:b0:
dd:81:aa:f4:22:42:29:93:93:9c:f2:cc:e3:6e:55:
7f:41:06:cc:b0:cf:8e:13:37:39:5b:ad:c4:6f:21:
40:de:ac:e1:0c:10:e6:e3:0c:a1:12:28:40:bb:dc:
c4:db:a3:9c:e6:f6:b6:81:c1:83:e9:66:cb:b8:7f:
01:3a:5e:ce:5e:9a:bc:7b:af:a4:07:a5:0c:a3:d2:
4e:d9:b1:34:cb:4e:7f:9c:dd:a5:b2:a6:54:2b:aa:
cb:10:7e:b9:af:b1:78:97:e3:ab:d4:43:ad:8d:37:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:58:DF:45:70:AA:DA:6D:5C:90:45:17:B7:16:94:B5:F6:EB:E0:A9
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:eb:29:c7:c8:ed:e0:0d:8c:48:78:be:be:65:31:19:55:05:
3f:37:ca:ea:63:88:7b:84:45:16:1a:1a:a9:ca:b1:98:eb:37:
dd:4e:02:00:5d:d1:37:34:f4:d1:2c:f1:1c:23:e0:4b:72:67:
d4:b5:78:5a:4a:ad:cd:45:a9:ae:b7:26:2b:8a:2d:e7:0e:bf:
89:32:02:1e:61:76:67:fc:12:80:97:1f:ff:f5:04:62:5a:30:
1c:ff:64:4a:9c:97:4b:56:a4:ca:1c:f8:61:19:e6:65:d1:fd:
ac:66:2b:fa:ed:73:a2:ec:06:78:9e:52:f9:44:05:d1:90:0f:
33:e9:ab:61:82:e0:7c:df:1c:9e:63:9a:76:1a:c8:8e:2d:2c:
e8:88:d8:ad:4a:d0:0a:74:7c:15:25:66:9d:ce:26:93:81:cf:
00:38:12:80:ee:a0:82:0f:21:7c:42:ba:06:93:f2:dd:37:4b:
c3:4f:01:48:f9:c1:89:c9:45:1b:4d:06:ce:bf:78:92:f4:f1:
e5:52:c7:3d:f3:cf:f8:9a:51:b0:60:c3:d2:40:1c:03:77:77:
82:dc:bd:a1:05:b8:b9:b0:9f:99:cc:5e:bc:2f:03:78:3c:c8:
46:f9:34:80:48:32:fd:4a:25:bf:4c:33:42:17:23:8b:20:ed:
89:68:dd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:03 2025 by rpki-client