Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: zhPpBhwfBjvEEV7LiSFZ3/PQ34Pe6n3iNYBJGRKjfc8=
Subject key identifier: 5D:ED:9C:A2:40:C4:1F:07:69:0C:53:96:FB:5E:64:82:20:7E:1D:69
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0196A541487007F75998248AB33B38C7EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 11:00:41 +0000
Manifest this update: Tue 06 May 2025 11:00:41 +0000
Manifest next update: Wed 07 May 2025 11:00:41 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: 7oYg2n2eyhkOOD18dhbXz08bOM+BwQ5YLtTUtQhyY8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:48:70:07:f7:59:98:24:8a:b3:3b:38:c7:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: May 6 11:00:41 2025 GMT
Not After : May 7 11:00:41 2025 GMT
Subject: CN=5ded9ca240c41f07690c5396fb5e6482207e1d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:69:e5:49:af:45:82:57:f7:d6:65:94:68:d4:
b8:35:a9:d5:a6:05:a5:c8:72:10:db:60:1a:8c:11:
64:a1:06:bb:51:b0:6d:0a:ee:be:7b:55:d9:0e:dd:
64:79:b2:6a:45:13:7c:3d:b0:84:26:0a:e1:9b:15:
a8:97:2c:69:6d:b1:fd:d6:fd:00:51:b9:b7:99:2e:
5f:81:12:dd:f9:d9:f6:b5:04:98:7f:14:79:b2:7c:
01:40:3e:85:31:2a:64:60:c5:aa:49:14:99:d5:dc:
42:bb:ba:de:83:66:78:22:98:a3:60:9d:e4:16:70:
be:70:44:16:b5:85:59:4d:4f:93:de:86:52:35:66:
ff:63:65:68:d8:65:59:97:f5:1f:ae:d6:bf:e6:2f:
e0:71:9f:87:97:cb:c5:7a:08:2e:3d:58:ab:39:c1:
4d:b1:24:2c:5e:e7:a1:a9:69:f5:1a:6d:e0:bc:00:
a8:7b:db:2f:b7:cc:46:f9:1a:3b:91:cb:6a:c9:dc:
84:19:d8:2b:4d:0b:0a:96:82:d6:cd:95:c0:57:73:
b7:2f:5e:71:62:c0:25:9d:e9:85:28:16:3b:78:92:
5b:e9:e3:05:01:5d:3d:03:e7:59:8b:bb:e1:47:0e:
8e:f5:a6:1c:af:99:7c:98:75:5c:58:97:3a:75:8d:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:ED:9C:A2:40:C4:1F:07:69:0C:53:96:FB:5E:64:82:20:7E:1D:69
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f5:1a:2d:79:09:76:df:7e:f4:d5:48:aa:2a:fe:77:05:76:
2d:78:90:b5:a2:37:57:8f:87:46:8c:11:8e:69:78:da:f9:10:
47:57:c9:f3:b3:cc:fd:7a:1c:0d:cc:a8:27:03:ee:1e:fe:80:
e9:95:01:a1:31:05:ee:1f:39:cb:f4:2f:af:f5:50:10:bd:2b:
09:d9:c2:0c:89:52:ca:b5:a0:1c:a2:25:0a:4b:c7:e9:e1:ba:
09:fc:34:69:2d:64:5b:ec:1a:b7:04:e8:ff:ba:a9:6c:d4:3f:
fc:56:11:72:04:68:f7:11:8b:05:e6:b8:58:2d:10:25:eb:1a:
8d:ba:8b:3b:14:57:06:86:08:c3:5c:c5:98:c6:4a:17:26:3f:
2b:9d:55:fe:d7:76:da:9e:45:e2:b9:a5:09:16:2f:a5:8b:76:
66:3a:a1:1f:0d:a8:ae:d6:36:52:28:0f:0e:8f:ca:5c:49:9f:
1a:62:7b:85:21:ac:81:0d:16:55:9b:d1:32:8a:2e:a0:b4:b4:
e3:58:08:bb:d6:1f:d6:5a:46:e4:04:00:78:e7:90:d4:1e:c2:
87:1e:b8:c0:eb:61:94:27:11:14:92:6e:f4:3b:a7:00:af:09:
90:be:49:eb:b8:43:4d:24:45:eb:d2:99:9a:90:af:82:f1:a8:
71:45:52:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalQUhwB/dZmCSKszs4x+2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGI0MjkyMmQzODdjNTc4ZmE1NzY5MjQ4N2YyYTE5MDY4
NTg5YmEwHhcNMjUwNTA2MTEwMDQxWhcNMjUwNTA3MTEwMDQxWjAzMTEwLwYDVQQD
Eyg1ZGVkOWNhMjQwYzQxZjA3NjkwYzUzOTZmYjVlNjQ4MjIwN2UxZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GnlSa9Fglf31mWUaNS4NanVpgWl
yHIQ22AajBFkoQa7UbBtCu6+e1XZDt1kebJqRRN8PbCEJgrhmxWolyxpbbH91v0A
Ubm3mS5fgRLd+dn2tQSYfxR5snwBQD6FMSpkYMWqSRSZ1dxCu7reg2Z4IpijYJ3k
FnC+cEQWtYVZTU+T3oZSNWb/Y2Vo2GVZl/Ufrta/5i/gcZ+Hl8vFegguPVirOcFN
sSQsXuehqWn1Gm3gvACoe9svt8xG+Ro7kctqydyEGdgrTQsKloLWzZXAV3O3L15x
YsAlnemFKBY7eJJb6eMFAV09A+dZi7vhRw6O9aYcr5l8mHVcWJc6dY1cdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3tnKJAxB8HaQxTlvteZIIgfh1pMB8GA1UdIwQY
MBaAFLaLQpItOHxXj6V2kkh/KhkGhYm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEt
NGE1NDViMTE2ODgwLzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8zMzYxOTgtM2U3Yi00NjE1LWJjZWEtNGE1NDViMTE2ODgw
LzEvdG90Q2tpMDRmRmVQcFhhU1NIOHFHUWFGaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPUaLXkJ
dt9+9NVIqir+dwV2LXiQtaI3V4+HRowRjml42vkQR1fJ87PM/XocDcyoJwPuHv6A
6ZUBoTEF7h85y/Qvr/VQEL0rCdnCDIlSyrWgHKIlCkvH6eG6Cfw0aS1kW+watwTo
/7qpbNQ//FYRcgRo9xGLBea4WC0QJesajbqLOxRXBoYIw1zFmMZKFyY/K51V/td2
2p5F4rmlCRYvpYt2ZjqhHw2ortY2UigPDo/KXEmfGmJ7hSGsgQ0WVZvRMoouoLS0
41gIu9Yf1lpG5AQAeOeQ1B7Chx64wOthlCcRFJJu9DunAK8JkL5J67hDTSRF69KZ
mpCvgvGocUVSlw==
-----END CERTIFICATE-----
Generated at Tue May 6 21:08:05 2025 by rpki-client