Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: vw36lpEjadtjKkRETRGqTAsOV5gOlCTgZRJO1iULUwM=
Subject key identifier: 90:F1:28:2F:A0:3F:D4:91:96:50:2C:B5:E1:8F:5C:ED:0E:08:93:6A
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0197B7452B664549BDBE002BFF3856F3D4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: nCNXY95mW3RhLU9zb6FHz+rxPAo6eTOf/1tzWUusj80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2b:66:45:49:bd:be:00:2b:ff:38:56:f3:d4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=90f1282fa03fd49196502cb5e18f5ced0e08936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:8f:9e:37:f0:76:5e:96:eb:73:4f:62:6a:
9b:1c:74:a6:7b:30:94:8c:20:38:13:25:fc:c1:95:
d5:19:79:18:06:3e:e1:f1:cd:b2:06:3e:d2:3f:82:
ca:ed:eb:b7:93:38:97:c8:b1:be:23:0e:6a:e4:f6:
59:7f:3e:c8:9a:9a:05:1d:92:90:37:82:db:b4:f6:
15:fe:8d:3f:70:0e:d8:b9:1c:27:cb:b7:a4:85:0c:
60:b1:b4:a6:b5:e8:15:e9:ef:97:3d:51:27:b9:a6:
34:a4:3e:05:2e:f0:0f:7a:83:c1:40:11:82:f6:0f:
54:fc:bf:8c:9c:1d:6b:7c:f5:0b:2f:65:37:91:ae:
24:b5:11:fe:3b:77:c2:1d:44:fc:b2:59:f9:71:ff:
11:aa:c6:cd:0b:b9:83:8c:7f:a4:77:0d:50:db:e1:
53:1f:e9:1f:1e:13:d4:ed:52:ef:87:9b:6d:4f:46:
a0:03:9c:f0:bd:3f:12:bf:65:d7:f0:ad:f9:d7:06:
6e:52:76:97:3f:07:4a:7e:ef:d4:d0:4a:5d:a0:9d:
48:54:d1:24:e3:95:ea:e8:f1:e2:1b:40:48:de:19:
de:75:34:f9:60:e0:e2:1d:23:9d:08:81:bd:d1:96:
01:a5:c8:9f:f4:1a:d6:75:87:17:d2:da:0a:25:a7:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F1:28:2F:A0:3F:D4:91:96:50:2C:B5:E1:8F:5C:ED:0E:08:93:6A
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:55:9c:07:f7:fb:36:3d:31:e6:4b:71:d9:df:af:69:fe:
80:21:0c:a5:b3:4b:59:2a:64:e4:07:59:92:9e:70:fa:00:89:
e5:f4:ff:ee:fc:78:74:86:da:8b:34:d9:46:1a:f9:7b:98:dd:
d3:90:e8:9a:60:8a:3e:17:05:27:f5:d4:25:5f:a0:67:85:e9:
75:6e:41:ec:0e:6f:c5:9e:2d:25:e9:70:3a:e7:4c:55:19:19:
ff:8b:da:60:09:49:c5:ec:03:65:69:c1:7d:9f:ee:82:66:e6:
34:a5:3c:80:31:1d:69:52:e9:a0:3d:12:08:8a:da:8a:86:7a:
2a:11:20:92:f6:a5:63:06:b2:a8:e3:8e:f5:95:74:8a:f0:ea:
a5:b8:a6:83:69:e8:a0:b3:d8:4e:22:be:20:4b:84:42:97:2e:
b0:5a:11:0e:e7:24:57:0d:12:ea:11:aa:db:97:3e:fc:1e:05:
38:eb:35:bc:25:6f:ad:c8:22:de:5e:7a:98:87:24:30:a6:57:
e3:27:e2:b0:85:81:43:ff:db:5e:b3:9f:a8:9e:85:d6:85:59:
bb:a9:20:f9:f8:89:ea:8a:63:da:00:18:75:b6:b1:7f:f9:c2:
93:2e:7b:8f:71:ec:1a:cd:a5:d6:bb:25:20:23:66:00:57:a3:
8c:36:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:03 2025 by rpki-client