Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: J0ret5AAwcmAt/w0CC0cJOZXYWcYaUjl0yPq7pWsTvw=
Subject key identifier: F8:A8:96:86:C4:64:73:8A:46:12:92:5B:A2:0E:80:45:65:33:9A:AE
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0196B0A09DC0D19D5A3E6BD40FFB54210822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 16:00:38 +0000
Manifest this update: Thu 08 May 2025 16:00:38 +0000
Manifest next update: Fri 09 May 2025 16:00:38 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: P+32YmnGScKXqWhE5L7gGp61sTPIBHvHvOms3X3EjFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:9d:c0:d1:9d:5a:3e:6b:d4:0f:fb:54:21:08:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: May 8 16:00:38 2025 GMT
Not After : May 9 16:00:38 2025 GMT
Subject: CN=f8a89686c464738a4612925ba20e804565339aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:a3:c1:45:e5:9b:57:62:d8:f4:34:83:59:
c2:5f:59:0d:58:26:35:72:73:f5:6a:d6:ae:18:d6:
0d:83:31:f7:da:ab:62:af:ec:1c:49:85:02:6b:97:
8e:35:76:0a:2c:cc:b8:c8:f8:ef:5d:4f:0f:45:b4:
32:05:87:3a:94:88:e4:57:f7:32:c6:95:5b:b8:b4:
45:a2:d1:46:07:2a:a4:16:35:39:94:24:f7:e5:d8:
b5:d1:47:26:94:ec:b3:37:57:ee:c0:19:cf:9b:df:
f1:3d:44:d3:48:0d:40:dd:62:40:83:a7:b0:19:f7:
ed:f5:84:1a:51:52:31:31:f0:83:1d:fa:06:bc:2a:
06:b3:ac:81:65:1d:93:a1:be:5e:93:49:df:28:86:
e5:b5:23:94:4b:00:fd:fe:4d:cc:d5:f3:ff:71:39:
34:27:45:ec:57:74:55:08:e7:f3:90:ac:29:fb:ac:
0c:00:63:19:26:f2:78:41:50:1c:f6:0b:6b:ce:ce:
61:45:26:6d:6d:10:43:c3:30:8a:63:8c:21:b2:23:
69:42:31:c9:3e:fb:99:ca:f4:66:e3:6e:ba:59:83:
23:eb:56:ef:4b:95:1d:03:9f:ff:d6:e9:29:2a:53:
b7:d3:b1:cd:20:37:90:4b:f8:d4:8c:3f:54:c4:f3:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A8:96:86:C4:64:73:8A:46:12:92:5B:A2:0E:80:45:65:33:9A:AE
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:56:ac:76:f1:54:66:50:69:d3:ec:4c:fd:63:eb:99:73:
81:35:81:63:b2:bc:06:38:56:e9:c0:14:f3:7d:9d:02:e8:50:
04:80:cf:f8:ef:f4:0e:d0:bf:95:77:4f:a0:1e:9b:5f:ce:88:
76:99:b6:13:11:16:8d:53:23:70:71:14:a7:0c:a5:ab:26:a2:
ae:b3:e6:9d:60:4f:c2:d1:50:eb:73:67:90:25:6d:48:ec:91:
2a:c5:f6:a0:86:57:fd:1f:5f:fa:ae:fb:1c:96:b1:3f:16:31:
2a:02:57:d7:ba:3a:94:23:44:b4:3d:3f:24:76:d5:88:b9:d4:
a5:e2:d4:d7:9b:b8:c0:cc:f8:8b:67:83:6d:31:3b:b6:74:9c:
d5:5d:40:4a:55:ce:ab:14:c7:bb:48:0d:70:54:c2:94:b8:66:
44:61:09:a2:09:4f:15:92:52:08:b5:a5:6a:d2:3b:92:1c:aa:
d2:8e:bb:ba:16:36:a1:30:14:aa:fe:e3:5f:3f:54:c6:d5:8d:
6e:06:8d:0f:27:23:c2:94:af:48:6c:ea:bc:bf:49:bc:ad:41:
1e:33:77:7b:fb:51:91:cd:1f:0e:c5:6b:e7:98:04:86:31:aa:
b7:f8:8b:54:8d:1f:06:d5:7b:13:ec:34:8c:3d:7c:2b:2d:d7:
7f:94:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:35:51 2025 by rpki-client