Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: 4r2Defz8/1LevmGq+jEMMd7vCd/thDsCWWFc14TJzcw=
Subject key identifier: 06:74:D3:C4:46:AA:C2:CE:BE:C1:11:BF:00:04:96:66:E8:6C:36:9A
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 019A7293A9AA69A82441F6BD8DD9E092D66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 2pO4mZhjkDG6WUk9boU7KILqUAKfLRAsSo5pMlnx8Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a9:aa:69:a8:24:41:f6:bd:8d:d9:e0:92:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=0674d3c446aac2cebec111bf00049666e86c369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:75:90:7e:a9:79:dc:73:77:0b:5a:74:f6:
3a:0e:54:d6:13:c6:30:21:dc:ac:ad:10:c8:c5:69:
4f:ef:8a:a1:d8:6d:5c:5b:66:08:a5:ef:af:dd:95:
31:35:2e:57:b2:0e:06:16:d8:6a:ba:bb:84:5a:68:
29:1f:c1:c4:35:13:2a:8a:0d:60:e3:74:64:bb:e8:
31:98:f9:9e:6c:31:8a:6f:96:8c:3c:ec:80:43:ae:
1c:59:61:73:8f:ab:f1:20:a2:65:3f:15:4d:58:61:
90:c7:ac:f2:74:74:06:0c:ba:59:fc:1c:f7:b3:c7:
68:45:c4:b6:06:ac:e1:e3:78:3d:48:c8:a1:97:e5:
ed:8d:48:8f:8c:4b:51:cd:73:d4:dd:f7:fc:3c:6d:
56:a1:97:40:29:80:3d:7e:ef:49:b4:b5:1d:d9:5f:
f4:09:f7:b8:09:7e:39:e2:69:4f:c8:e5:ad:e5:aa:
1b:d9:1f:65:42:bd:54:85:24:c3:38:98:01:72:e3:
b7:ab:ee:88:7f:33:33:7d:0a:9b:7c:be:13:8e:fb:
97:4b:01:00:09:7c:b9:16:ea:51:eb:21:8f:85:e6:
ef:81:70:41:bb:e9:0c:4e:03:a6:5d:13:74:80:80:
2d:67:f3:1e:ea:4d:27:1c:5d:92:93:c2:ce:db:25:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:D3:C4:46:AA:C2:CE:BE:C1:11:BF:00:04:96:66:E8:6C:36:9A
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:50:93:cb:7b:5e:8d:fd:b4:40:49:81:95:69:1d:09:2e:00:
59:2b:90:5b:73:b7:f5:4d:f8:35:fc:3a:44:71:be:4e:91:18:
c1:e8:03:37:1a:c0:56:8c:0b:e3:b6:dc:40:4e:8c:85:b8:77:
12:f1:eb:e3:9b:40:d1:72:fe:ad:be:09:1f:ec:0b:51:d5:78:
73:7d:3d:8a:f4:1d:59:8a:4c:a0:fb:7e:81:61:84:ba:c4:7f:
86:5d:4a:86:4c:19:7e:49:96:c6:5f:5d:19:f7:46:2d:4b:b5:
9b:6f:e2:72:d7:b4:18:b9:59:96:d5:35:bc:32:14:d7:05:bb:
63:24:7d:7a:5f:3c:81:5b:63:0e:2e:0e:d5:a2:62:28:67:ca:
95:fc:a1:60:42:11:c0:5b:b3:cc:cf:1e:36:ae:89:31:15:ad:
46:0d:4c:93:77:9e:e2:1b:78:22:16:94:a8:79:2a:88:74:61:
cc:e9:e2:d3:ea:99:34:0e:85:0e:b6:d5:da:8c:cc:c7:54:c7:
6f:ed:01:70:73:7d:f1:95:ad:fa:e7:24:93:93:71:a5:8a:4d:
27:a8:6e:1d:6d:b6:b7:01:51:b0:53:6b:89:65:a2:bf:70:b4:
60:17:24:b1:20:73:5d:00:60:61:7e:06:b2:0d:dc:3d:0f:7c:
46:74:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:55 2025 by rpki-client