Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: i+xpptNo4UD1svt6Y+NML5rzc43hsPgycieGz7awhtA=
Subject key identifier: 85:94:29:25:39:52:84:F4:B8:7A:F4:23:86:C0:06:4B:06:87:FC:0F
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 01964E5A3C236C9AA16374A2B75857825F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 14:00:58 +0000
Manifest this update: Sat 19 Apr 2025 14:00:58 +0000
Manifest next update: Sun 20 Apr 2025 14:00:58 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 5dO1KDWJyrwlMDuBboiVl4tboYicl/U5xZpGICXuFFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:3c:23:6c:9a:a1:63:74:a2:b7:58:57:82:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Apr 19 14:00:58 2025 GMT
Not After : Apr 20 14:00:58 2025 GMT
Subject: CN=85942925395284f4b87af42386c0064b0687fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:80:70:22:28:89:13:ce:46:29:aa:79:10:
2b:44:7b:c0:76:e5:e1:1e:91:5d:87:9a:92:4d:7d:
fd:32:1b:de:59:04:ab:53:3b:22:8c:7f:56:ac:5c:
f5:c6:63:ec:46:08:33:76:fb:92:62:f0:a8:f3:41:
52:08:44:2a:70:12:92:b8:82:2a:66:d0:14:85:aa:
ab:85:db:44:9a:73:72:df:3a:02:4d:06:12:b3:6d:
95:86:f5:9f:09:b4:3b:2e:67:5f:8d:d2:33:9b:4a:
8a:8d:cf:d2:54:4f:5c:1a:70:2a:7a:88:bf:73:21:
32:d5:5b:58:0e:1e:1c:71:87:f7:68:d3:98:ed:70:
23:76:03:b4:5e:40:21:ff:79:c3:f2:57:12:88:01:
8c:4a:09:76:ef:21:a6:c6:8c:84:8c:1d:23:44:f9:
cd:48:4c:93:26:28:68:df:40:5a:62:b5:43:f4:f3:
39:92:03:06:e6:19:f5:58:16:b0:8f:b0:da:95:8a:
9d:86:97:fb:72:8e:d1:cd:90:29:8f:8f:91:8e:ef:
8a:bf:3e:ab:7a:e6:6e:d0:ec:df:28:dd:8c:31:e5:
db:c3:26:f0:23:20:e8:c9:c2:2a:71:b9:6f:46:e5:
7a:36:ab:8e:88:5f:87:a3:2e:26:52:5f:76:b5:94:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:29:25:39:52:84:F4:B8:7A:F4:23:86:C0:06:4B:06:87:FC:0F
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:6a:ab:16:bc:75:b1:99:9c:18:76:20:83:65:2d:0e:c7:87:
13:92:49:4a:36:fa:d7:50:a2:48:85:4a:a0:a1:2d:38:64:04:
8d:4b:9a:5f:d6:fa:7e:5e:2f:53:f0:3e:ba:61:1c:d8:a2:c5:
d3:34:bf:2d:43:00:88:ac:d7:35:a7:e9:46:5b:eb:2f:0b:0d:
4a:dc:90:b0:b9:01:22:39:7c:1d:e2:94:2d:f2:67:77:7a:b8:
f3:69:24:29:ae:b5:4a:1a:d8:8a:5b:2a:ef:81:25:74:f5:fe:
75:6e:c5:74:b1:a8:ee:18:08:93:60:7f:1d:61:74:38:85:28:
14:3f:ba:07:c1:48:8e:9f:d1:45:14:b6:81:84:24:f7:59:a7:
30:d7:61:97:43:cd:5e:2c:d0:8f:c8:87:d2:8e:26:34:ac:1c:
8b:dd:60:e4:52:07:bd:4b:ad:7a:55:32:f7:4c:75:69:16:eb:
f0:db:3d:82:eb:16:8d:fa:b5:c2:ee:08:15:94:30:15:0b:bf:
3a:73:59:3c:6f:c0:c8:16:dd:ce:ec:ea:f0:7d:0b:7c:e9:8d:
d7:e3:04:48:88:4c:9c:66:7d:04:08:0a:86:77:e3:b6:d7:4c:
4a:48:47:12:92:cf:06:79:0c:65:7c:49:90:4c:c7:41:74:c6:
43:f8:41:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWjwjbJqhY3Sit1hXgl9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4
NTg5YmEwHhcNMjUwNDE5MTQwMDU4WhcNMjUwNDIwMTQwMDU4WjAzMTEwLwYDVQQD
Eyg4NTk0MjkyNTM5NTI4NGY0Yjg3YWY0MjM4NmMwMDY0YjA2ODdmYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZiAcCIoiRPORimqeRArRHvAduXh
HpFdh5qSTX39MhveWQSrUzsijH9WrFz1xmPsRggzdvuSYvCo80FSCEQqcBKSuIIq
ZtAUhaqrhdtEmnNy3zoCTQYSs22VhvWfCbQ7LmdfjdIzm0qKjc/SVE9cGnAqeoi/
cyEy1VtYDh4ccYf3aNOY7XAjdgO0XkAh/3nD8lcSiAGMSgl27yGmxoyEjB0jRPnN
SEyTJiho30BaYrVD9PM5kgMG5hn1WBawj7DalYqdhpf7co7RzZApj4+Rju+Kvz6r
euZu0OzfKN2MMeXbwybwIyDoycIqcblvRuV6NquOiF+Hoy4mUl92tZRB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWUKSU5UoT0uHr0I4bABksGh/wPMB8GA1UdIwQY
MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt
NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw
LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2qrFrx1
sZmcGHYgg2UtDseHE5JJSjb611CiSIVKoKEtOGQEjUuaX9b6fl4vU/A+umEc2KLF
0zS/LUMAiKzXNafpRlvrLwsNStyQsLkBIjl8HeKULfJnd3q482kkKa61ShrYilsq
74EldPX+dW7FdLGo7hgIk2B/HWF0OIUoFD+6B8FIjp/RRRS2gYQk91mnMNdhl0PN
XizQj8iH0o4mNKwci91g5FIHvUutelUy90x1aRbr8Ns9gusWjfq1wu4IFZQwFQu/
OnNZPG/AyBbdzuzq8H0LfOmN1+MESIhMnGZ9BAgKhnfjttdMSkhHEpLPBnkMZXxJ
kEzHQXTGQ/hBUA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:52 2025 by rpki-client