Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: sA5USlTpxFw5ld3n67o+nz9l+OBDIah6uFhbWXZzN78=
Subject key identifier: 63:EA:66:30:1D:5C:0A:4E:78:57:90:49:3B:E7:3B:A1:90:D4:FC:2E
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0198D54E2668D0682EF8BFC859CBF2BB7E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 9Yf7kcH/rH9U/hF6F1JTzMvFOCUECdyisgU8zHGAhaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:26:68:d0:68:2e:f8:bf:c8:59:cb:f2:bb:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=63ea66301d5c0a4e785790493be73ba190d4fc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:57:25:f1:28:3d:46:0e:8f:36:3a:89:19:
f9:34:da:a0:19:1f:78:d1:fc:1c:14:03:98:41:6e:
48:be:70:39:7a:46:d2:7a:13:e7:d2:ff:04:8a:a4:
58:88:b9:72:3e:60:66:57:cb:49:7c:e0:47:2a:0c:
b7:2c:6b:70:83:0f:7c:25:95:22:ba:38:38:88:76:
cc:80:84:ed:0e:44:99:94:0e:5c:b8:55:8e:1f:52:
c6:ac:18:db:70:65:3d:21:a8:8d:60:97:83:2f:53:
a3:64:3f:7d:3e:dc:48:1d:21:22:cc:e5:2c:82:24:
41:4a:ca:4c:2e:7f:6b:f6:91:92:ab:67:e0:dc:ae:
98:ba:77:68:b5:83:d8:46:2d:7d:49:5e:74:3c:74:
ca:1b:61:96:5d:32:32:5c:9c:49:e0:4b:66:2b:a2:
57:ad:77:19:e8:2b:8c:f4:54:58:a4:d7:e5:be:aa:
ef:bd:95:b3:42:ce:01:9c:9a:8f:5f:4b:fe:c5:a6:
13:b0:d9:d6:e0:78:ff:7c:8c:d3:6b:b3:fc:27:b0:
ef:47:ae:5b:41:6e:1e:53:8b:00:18:9e:79:01:8d:
7c:68:b5:e2:3b:06:68:c5:ba:cf:4b:c8:f0:00:1d:
2b:87:1b:a6:b8:8a:97:c5:7a:7a:c2:83:4d:d5:ad:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EA:66:30:1D:5C:0A:4E:78:57:90:49:3B:E7:3B:A1:90:D4:FC:2E
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:89:1d:90:a2:4d:4b:12:bd:be:0a:47:23:77:c3:34:0e:94:
88:2d:a0:f0:3c:2a:a0:b5:70:44:0f:21:d1:8c:d5:ef:39:8c:
c5:55:e9:36:76:9f:60:d7:f6:e8:61:64:57:94:b2:83:94:cc:
8f:8a:73:83:16:e7:a6:62:72:25:a1:bb:ed:a5:81:29:5c:e2:
7b:6b:81:7d:2b:7c:b4:be:0f:80:3c:3a:22:0b:62:d3:6d:34:
3a:dd:25:dd:12:5e:bb:d5:4f:d1:98:71:0d:0a:0e:ac:22:67:
0c:a4:7c:8f:2a:e4:0d:f7:f6:a5:76:33:d0:a4:18:20:df:55:
19:d6:c1:18:06:1a:5f:4a:c3:f1:c5:6b:78:92:a1:4d:4a:d0:
dd:36:9f:f8:bf:b5:e7:56:ca:b9:d1:fc:17:3e:45:a5:5e:9c:
b6:18:57:01:55:03:a5:d3:4a:e9:6e:25:fc:e4:fb:b2:3d:e1:
62:b3:d8:2c:67:90:01:e7:7c:00:b9:de:f0:47:c2:b7:27:86:
33:43:d3:bb:2d:d6:54:93:79:9f:c1:1d:58:a2:25:be:9c:cc:
0e:25:b8:1b:aa:8f:50:80:ff:14:9d:ec:4f:a4:9c:b6:09:8d:
f5:91:6c:dd:a8:38:2b:f8:4c:c0:a6:7f:9a:94:66:26:8c:6e:
38:50:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:49:37 2025 by rpki-client