Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: Zh0W1bx6LfLfsviJ8Xp3nvjaO9Z6SfLcfA1tT6+CI50=
Subject key identifier: DD:8E:1B:FB:10:D5:F8:1D:CF:C0:BA:AC:27:06:C8:18:A0:B2:D4:9F
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0199228C88ED0AAA5D957A72FFB8B58FD8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:59 +0000
Manifest this update: Sun 07 Sep 2025 05:00:59 +0000
Manifest next update: Mon 08 Sep 2025 05:00:59 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: judy3MjpX8LQ2ehixQpcUcESRjsb1+dJvK5a/rG9myY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:88:ed:0a:aa:5d:95:7a:72:ff:b8:b5:8f:d8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Sep 7 05:00:59 2025 GMT
Not After : Sep 8 05:00:59 2025 GMT
Subject: CN=dd8e1bfb10d5f81dcfc0baac2706c818a0b2d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:c4:7a:16:a1:84:79:f1:10:83:25:30:99:
64:4e:c0:56:c7:08:08:21:07:dd:02:83:3d:83:f6:
a5:2c:e2:ad:4f:ed:eb:d2:13:26:d4:14:4b:f6:64:
1d:f2:e8:24:46:3c:43:b0:de:13:b7:ac:9f:1e:17:
56:25:a5:98:ee:90:51:c9:e6:42:f0:d9:f3:05:dd:
cf:b6:ec:73:c2:0b:63:4d:37:52:27:01:cc:75:4d:
67:bf:aa:7d:4e:9b:95:5d:95:10:17:4f:1a:c7:93:
d2:b8:d1:da:03:38:f2:be:e2:64:09:4d:20:36:34:
57:60:de:ae:f4:e2:97:45:99:2b:07:62:cc:c7:de:
6a:54:e5:1a:f9:71:40:64:a8:07:ad:8a:47:b0:5d:
09:a9:3a:94:8a:b6:cf:9c:e5:a4:ee:e4:fb:ae:ad:
15:96:83:71:2c:fa:64:1b:fe:bb:7f:7f:d8:c6:2e:
33:96:61:5b:e0:af:7d:3f:81:60:96:fd:3c:a0:ad:
60:07:f5:ad:9a:19:62:1d:e4:98:fe:60:5d:19:6b:
5a:d5:03:7d:18:15:12:9f:75:e7:e5:e8:57:78:f3:
55:ad:5f:09:54:7c:2a:8b:dd:de:c6:53:de:c8:0d:
ba:f4:a9:f8:2c:bd:b3:75:ce:e0:63:8c:ff:f4:32:
a1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:1B:FB:10:D5:F8:1D:CF:C0:BA:AC:27:06:C8:18:A0:B2:D4:9F
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a5:c6:f7:1f:f5:67:8f:fb:f4:14:0a:74:9a:cc:89:94:12:
c7:82:45:fe:3a:4a:4b:4f:ac:c8:00:ca:1b:73:24:91:eb:f6:
72:1c:27:03:1c:1f:0c:b8:fc:b6:15:2b:1b:fa:8c:c0:4a:f0:
b6:bf:e4:92:07:c4:dc:96:4c:07:8b:62:7e:9f:d6:29:69:4a:
ab:fa:c0:1b:9a:2e:71:b3:3a:f6:39:35:e3:9e:af:7a:8c:c5:
79:15:91:41:d5:52:a7:f3:f3:32:25:a0:76:da:89:80:46:ef:
bb:ae:1c:a1:15:64:6c:b1:53:09:29:46:b8:43:39:7f:7a:3f:
d1:39:07:b0:0a:06:95:c0:82:e3:c9:fe:b6:c8:15:3a:e6:3a:
52:d2:a5:4b:b4:9d:ee:fd:42:fb:d3:cb:23:e3:7d:d2:8e:3b:
0b:64:7f:79:62:14:b7:d0:66:1d:ae:c1:06:87:c3:59:10:b8:
b8:b8:0c:cc:65:67:9b:85:11:34:f3:90:da:25:d0:9e:de:48:
9f:b9:f4:26:4f:70:36:f9:5c:10:b5:2c:3b:02:b4:ae:af:eb:
51:8d:ca:e0:f6:81:24:ee:32:e4:ff:ec:42:23:ee:96:17:2e:
01:48:a1:2e:d7:c2:bd:f9:f4:43:2f:c4:e5:2c:a3:bd:6f:f4:
30:6c:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client