Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: Gom+jC+hayEcrPGrhBmtcf1kCh76AWG2n8R5IfH+VLY=
Subject key identifier: 17:7D:58:6E:D2:A0:29:DD:A5:2C:0E:47:4B:6B:09:86:87:4A:E2:F0
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0197B96AA141F1EAD926D3E0CA02CBDF6D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 02:01:02 +0000
Manifest this update: Sun 29 Jun 2025 02:01:02 +0000
Manifest next update: Mon 30 Jun 2025 02:01:02 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: HxnzieJsIVj41spa2LpT8/1dzBhftTaARzXnAjASoDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:a1:41:f1:ea:d9:26:d3:e0:ca:02:cb:df:6d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Jun 29 02:01:02 2025 GMT
Not After : Jun 30 02:01:02 2025 GMT
Subject: CN=177d586ed2a029dda52c0e474b6b0986874ae2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:80:35:b5:5e:b2:b9:4d:b6:75:0a:28:37:
30:3c:54:bd:02:ba:2f:26:a1:6a:f4:c4:43:49:29:
55:47:9c:cb:d3:27:a7:71:b4:b7:43:0f:05:31:92:
d1:a6:4c:03:a7:11:73:98:01:c8:53:f3:1a:c6:a7:
67:18:14:ca:8c:21:7e:ab:d1:d1:fe:d0:48:4b:0d:
db:57:49:96:2b:a5:95:9b:a0:41:39:4c:15:9d:fd:
37:c0:02:07:68:1a:f2:a6:9b:60:2c:20:fc:de:f9:
4e:fc:d5:23:5f:62:03:9e:ae:78:46:0a:1e:e6:f8:
fa:be:75:7e:c3:8d:e7:a1:af:7d:8d:3a:61:13:85:
70:d9:70:1c:e0:38:0b:9c:e1:27:82:f3:83:1f:6b:
07:2c:ff:a3:8e:3c:4d:6f:8e:5d:56:f0:c1:a3:1a:
f8:ef:ce:3c:5f:f0:38:ad:1e:37:75:80:b9:b6:17:
37:5a:4f:57:97:56:f5:5c:fa:e8:6e:22:1e:37:2f:
89:1a:d4:ba:4b:0e:19:30:70:b8:95:6d:a3:75:f3:
fd:c8:0e:f7:d0:6a:4f:05:d1:62:7e:6b:fd:af:5d:
8e:c7:4e:b3:fc:da:58:2d:42:a7:e8:88:05:d9:ba:
df:a6:83:77:6e:ff:9f:2c:84:26:a6:a5:82:36:41:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:58:6E:D2:A0:29:DD:A5:2C:0E:47:4B:6B:09:86:87:4A:E2:F0
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:52:6e:8f:35:34:dc:e7:0e:00:4a:e6:8e:3f:1b:52:15:
d0:f6:52:19:d1:72:dd:f2:c1:44:34:e4:41:16:02:6f:cf:26:
41:b6:47:04:c2:ea:84:e6:fe:ca:b6:1f:d5:92:6e:2c:69:2c:
36:16:6c:cd:e8:10:83:23:4a:65:63:ed:67:1c:40:ed:de:5f:
fe:79:00:ba:1a:6c:7a:81:db:f5:29:1b:b7:bf:b9:d8:4b:54:
66:67:26:f1:23:d6:08:cc:40:da:f0:8e:5b:4f:1c:4a:ac:41:
1c:40:39:cb:fd:52:10:b3:7c:39:37:a0:3a:36:f6:06:03:8d:
4c:7f:2c:d3:80:c1:26:94:d8:f6:8c:f7:6f:15:0b:2a:e0:40:
7d:cb:a9:4f:fb:61:e4:dc:db:45:50:c4:57:70:3b:fa:61:fa:
b3:6d:85:4e:67:1e:73:00:a9:f3:23:f1:21:2e:e5:45:76:b0:
ab:9d:e7:86:2a:14:1a:f2:20:4d:ee:ff:71:1d:f6:07:94:21:
db:10:90:7a:96:d7:e9:73:78:b6:7b:4f:b2:f3:27:01:72:1e:
1a:72:f0:06:71:e6:75:16:97:58:98:7e:a4:6d:5d:ce:6b:c8:
ab:c9:41:89:c2:0d:55:4a:39:1e:7b:2f:9a:56:41:ea:0e:8d:
af:e0:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:02 2025 by rpki-client