Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: BKqNDfxl6WMwByUdeZyLDxPx1O53tOCGGk5Y8meA4D8=
Subject key identifier: 0D:08:34:28:DA:D6:FC:58:FF:94:6B:0C:D1:E4:C7:0C:8F:65:41:C4
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0199FC5844041F07F1DD783DFEF5F74F563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: DC2pHeFUZyk3iSKCcofzJQj/wWoqUfH+AaxisdMOzLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:44:04:1f:07:f1:dd:78:3d:fe:f5:f7:4f:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=0d083428dad6fc58ff946b0cd1e4c70c8f6541c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:93:82:0b:84:49:b8:ff:01:09:89:50:93:
16:4d:5c:f1:fd:2a:bd:c5:7a:1b:39:4a:8d:47:68:
65:4e:ec:2c:54:d0:c3:df:f4:31:e3:26:ec:c1:b1:
dd:31:16:a6:a9:a5:11:2a:fc:30:3e:8f:a3:01:9c:
a1:90:33:f8:64:45:2c:1e:9c:b3:1f:ff:19:19:77:
98:fb:32:38:a7:20:54:a3:59:6b:83:b2:25:eb:1d:
1c:6b:1e:ed:4a:38:77:45:85:51:49:e1:4f:d7:7c:
4e:14:c2:98:49:61:38:3f:20:88:8b:1b:a7:41:55:
12:86:7d:72:6b:84:b7:18:c1:5a:1d:9b:76:b8:cc:
09:46:7b:13:e4:75:cf:2c:55:e1:1b:ec:0e:f6:2a:
92:a7:fb:72:d8:c3:4f:19:82:ca:65:ea:07:ee:70:
65:55:89:13:12:23:65:08:83:ae:18:7d:0a:a9:75:
59:e0:56:93:84:a9:a9:0c:03:09:2a:f4:f2:99:ab:
a1:bd:8e:11:0f:a1:59:27:22:5c:df:ff:f3:37:f7:
11:bd:4e:db:56:2d:8e:ef:26:a4:79:62:70:55:79:
e8:a6:09:b1:df:63:d4:20:4f:e4:c6:99:01:ef:8d:
7d:10:79:e0:0a:dc:37:36:83:41:9f:25:68:e1:b4:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:34:28:DA:D6:FC:58:FF:94:6B:0C:D1:E4:C7:0C:8F:65:41:C4
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:92:d8:94:c8:aa:bf:7f:a1:a5:e1:2e:d5:ea:a9:7a:49:d8:
35:c8:0a:1d:97:f8:0b:f8:a6:a7:a4:33:cc:64:de:53:6a:c3:
6d:40:f6:a3:e1:b9:40:1f:61:60:4d:e8:bf:2d:43:d6:2b:94:
8b:7b:96:15:d3:0a:bf:cf:38:30:9f:3c:10:ae:cc:68:12:17:
b9:fb:ab:0d:b6:a2:6d:6e:9d:db:1b:74:e3:5b:a9:14:89:a4:
29:b5:38:40:74:76:2c:2d:c5:5d:69:30:32:16:b9:3f:85:29:
30:d2:84:8d:6a:97:14:0f:5a:46:01:c6:50:d4:09:b1:5f:42:
b5:b1:a5:c0:b9:c4:14:54:a4:bb:0b:a3:9b:e9:1a:5e:cc:c3:
15:08:0d:cc:6d:ef:8f:04:4f:17:0c:a5:af:8f:8a:8e:d2:d1:
f8:fd:a0:fc:33:b4:9f:1c:65:b7:be:bb:21:55:59:a7:17:0d:
77:aa:a7:c9:5e:d1:a9:e5:51:0a:8f:46:a1:6e:07:8e:6a:3a:
0f:ff:91:60:1b:e6:8d:b6:49:62:50:ca:bb:1c:a4:79:1b:3b:
09:39:98:47:e3:7b:01:16:b1:86:b2:54:8a:49:b9:2e:07:b1:
3d:32:6c:f7:f4:28:34:3a:c9:d1:6b:59:88:f1:a0:2b:77:0c:
27:f2:28:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEQEHwfx3Xg9/vX3T1Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx
ZGViNGIwHhcNMjUxMDE5MTIwMTA3WhcNMjUxMDIwMTIwMTA3WjAzMTEwLwYDVQQD
EygwZDA4MzQyOGRhZDZmYzU4ZmY5NDZiMGNkMWU0YzcwYzhmNjU0MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7aTgguESbj/AQmJUJMWTVzx/Sq9
xXobOUqNR2hlTuwsVNDD3/Qx4ybswbHdMRamqaURKvwwPo+jAZyhkDP4ZEUsHpyz
H/8ZGXeY+zI4pyBUo1lrg7Il6x0cax7tSjh3RYVRSeFP13xOFMKYSWE4PyCIixun
QVUShn1ya4S3GMFaHZt2uMwJRnsT5HXPLFXhG+wO9iqSp/ty2MNPGYLKZeoH7nBl
VYkTEiNlCIOuGH0KqXVZ4FaThKmpDAMJKvTymauhvY4RD6FZJyJc3//zN/cRvU7b
Vi2O7yakeWJwVXnopgmx32PUIE/kxpkB7419EHngCtw3NoNBnyVo4bTmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0INCja1vxY/5RrDNHkxwyPZUHEMB8GA1UdIwQY
MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt
ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx
LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZLYlMiq
v3+hpeEu1eqpeknYNcgKHZf4C/imp6QzzGTeU2rDbUD2o+G5QB9hYE3ovy1D1iuU
i3uWFdMKv884MJ88EK7MaBIXufurDbaibW6d2xt041upFImkKbU4QHR2LC3FXWkw
Mha5P4UpMNKEjWqXFA9aRgHGUNQJsV9CtbGlwLnEFFSkuwujm+kaXszDFQgNzG3v
jwRPFwylr4+KjtLR+P2g/DO0nxxlt767IVVZpxcNd6qnyV7RqeVRCo9GoW4Hjmo6
D/+RYBvmjbZJYlDKuxykeRs7CTmYR+N7ARaxhrJUikm5LgexPTJs9/QoNDrJ0WtZ
iPGgK3cMJ/IoFg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:28 2025 by rpki-client