Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: 4o2TM5xaOIk96ALtrN79l6DQwYTyWRPXVPXjF5w6VEw=
Subject key identifier: 5E:E4:0D:48:DE:13:56:98:40:83:13:17:D8:AE:E8:70:18:11:5C:7D
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0199FAD805DA3B937A719D1A4B8F5F75B964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 05:01:25 +0000
Manifest this update: Sun 19 Oct 2025 05:01:25 +0000
Manifest next update: Mon 20 Oct 2025 05:01:25 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: UtfO/i53nAZ23pz4s/XuNm0+VpW6qdqNsZYfHSUEyIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:05:da:3b:93:7a:71:9d:1a:4b:8f:5f:75:b9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Oct 19 05:01:25 2025 GMT
Not After : Oct 20 05:01:25 2025 GMT
Subject: CN=5ee40d48de13569840831317d8aee87018115c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:74:94:4b:61:87:35:eb:11:6e:41:00:fc:
4b:27:66:c4:38:5e:0e:58:b6:b1:e2:ff:d5:59:35:
74:c1:8c:71:41:24:b2:b6:30:3d:34:d7:33:04:d5:
98:5f:ca:f9:eb:37:95:bb:04:1e:be:96:28:e5:f8:
27:45:7b:33:30:67:d4:2a:b5:6e:27:9b:c2:84:bb:
8d:4c:9a:b6:24:66:b6:e3:6f:97:2f:5b:39:88:c0:
0f:39:3d:88:a5:a9:fa:07:ba:57:89:7c:03:cb:55:
09:bf:c3:1a:11:a1:13:f0:35:16:22:39:1a:17:21:
aa:f1:5b:49:70:17:3f:3e:e9:57:86:33:e8:4c:84:
f8:18:d7:71:f0:e3:03:a8:3f:39:20:a1:0a:78:67:
53:26:77:4e:c7:40:7c:95:a7:c0:1d:72:9a:92:12:
a3:91:d0:d5:d7:34:2b:70:a5:c5:7a:cf:0a:33:26:
a4:72:cf:2b:05:17:27:f4:d1:48:cc:cf:b1:49:b7:
fc:78:a0:5f:3c:02:95:16:10:e2:ec:4d:f9:94:4b:
d7:4f:3f:48:73:7e:19:05:9d:69:c1:9d:8e:d1:07:
1e:0a:ee:50:4b:80:1b:7b:da:ac:50:b5:38:e3:6c:
71:6d:83:9c:ff:98:4d:5c:8f:bc:42:f8:3b:7f:da:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:0D:48:DE:13:56:98:40:83:13:17:D8:AE:E8:70:18:11:5C:7D
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a7:65:bd:54:24:d6:5d:13:df:64:cd:52:49:fa:df:fd:15:
d0:ff:71:67:96:39:a8:94:55:bd:cb:48:c4:51:4d:e4:d6:a4:
eb:5a:8b:cc:65:6a:43:e3:21:b7:8c:05:68:c3:bb:89:e3:a1:
b3:32:be:13:a0:8f:57:e2:56:6f:2e:68:b5:b2:a5:23:32:ff:
76:93:3b:65:f7:3e:b6:c9:c7:9d:b0:ef:53:b9:9f:50:07:d1:
01:c9:e5:81:c7:dc:23:2e:f0:8e:c6:b2:6c:72:a7:6a:48:1e:
81:c7:78:b1:48:08:cb:11:6c:d9:df:17:6e:0e:f9:0f:4a:f1:
1c:b7:83:13:53:a7:43:b7:8c:b8:56:37:6f:45:ba:e5:ae:ac:
87:91:2a:9c:d9:4e:56:b4:45:6a:79:13:a7:a9:ca:e9:da:7e:
7c:49:74:0a:c9:93:a1:03:78:d2:77:05:fe:13:40:a4:00:60:
18:92:cc:8e:ad:fc:e1:05:43:a1:68:05:c6:17:d7:4a:ff:b5:
c6:7c:83:11:41:21:63:46:1b:54:19:ba:f2:aa:5d:d6:53:7a:
8f:ae:21:0f:7a:39:03:da:30:36:ba:c7:d5:3d:49:a3:c5:43:
36:b2:cc:8d:44:7e:fc:01:60:08:13:8e:fc:24:a2:6f:ec:11:
f6:1b:75:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:03 2025 by rpki-client