Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: Eys9G1rCXuLRrRJvlCXf474YxG0bzfdCpYSymG8waSw=
Subject key identifier: F9:63:A2:B2:B0:ED:EC:8F:06:E8:49:7C:AC:E8:CC:C8:7E:38:C8:B9
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 01987298E49BD4C9F6CC4178F688D4D51B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 01:01:19 +0000
Manifest this update: Mon 04 Aug 2025 01:01:19 +0000
Manifest next update: Tue 05 Aug 2025 01:01:19 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: ec6NaAUoSX+Y5CYrnwIQNNafFJhgqMxeH9IYf0xt0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:e4:9b:d4:c9:f6:cc:41:78:f6:88:d4:d5:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Aug 4 01:01:19 2025 GMT
Not After : Aug 5 01:01:19 2025 GMT
Subject: CN=f963a2b2b0edec8f06e8497cace8ccc87e38c8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:1a:94:b0:e5:31:09:b1:57:45:ee:3a:00:
59:04:df:9b:ce:cb:0d:24:37:53:62:43:df:cb:90:
8e:44:b8:db:a3:18:a4:6d:62:9e:6e:78:5e:b4:36:
54:d6:b2:1a:76:dc:31:08:c7:15:b9:bc:9c:4f:c5:
40:df:0a:28:6b:20:d7:94:35:26:b5:32:dc:ba:24:
b2:a3:c9:8b:d1:72:65:f1:bc:41:6e:0b:43:dd:17:
c7:3f:5c:31:0d:56:75:a1:bb:c2:28:a8:e6:ad:cd:
15:a3:8c:8e:bc:3b:78:3c:cf:4a:ac:fb:30:65:b6:
f9:ec:c4:12:64:c0:58:fa:04:80:29:08:60:a4:e3:
93:c9:4a:94:eb:c0:e6:38:81:0f:0d:8b:13:82:a6:
75:cd:4d:b3:58:10:a8:f3:e7:73:dc:93:66:24:59:
76:db:e0:e7:53:fe:39:d9:45:02:e1:ba:f5:df:b4:
e2:10:7b:00:fc:ac:2a:08:06:12:ee:5e:44:bb:0b:
3f:fe:62:ee:eb:b2:e5:c6:df:b4:f2:e9:17:e3:d2:
9e:6c:53:b7:91:9f:7a:12:6e:93:28:80:65:f8:d8:
23:a5:2c:95:1c:73:e1:ab:57:79:9b:54:95:92:75:
91:8c:e6:a6:a5:53:4a:0c:38:08:0c:4d:a5:c5:b7:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:A2:B2:B0:ED:EC:8F:06:E8:49:7C:AC:E8:CC:C8:7E:38:C8:B9
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:a3:20:38:66:f4:9d:81:10:9e:29:07:8e:d2:c9:c7:a9:
f2:0c:e8:78:69:22:e5:a2:2d:24:1d:ee:e1:b3:85:2e:31:4a:
00:63:70:09:83:cf:51:8a:90:9b:19:bb:c4:9e:7e:ef:0a:30:
19:81:f6:7c:eb:e4:de:3f:c1:dc:8e:82:ee:21:3d:92:61:f5:
94:a6:91:f6:f7:b8:f2:92:d9:f9:de:af:96:66:ab:99:76:b8:
78:ef:4b:d7:5d:be:37:dc:c2:2f:f1:6b:c5:5e:20:c8:fd:36:
ca:c6:23:b2:ff:2f:30:7f:cf:db:47:32:97:4b:a7:95:46:6a:
e7:d1:92:ad:ba:c2:89:8f:4e:f0:cc:20:38:f1:07:c5:6e:2c:
5d:df:06:4a:38:e2:59:b5:6d:25:8c:e4:d2:ab:56:1b:bf:3e:
d2:38:48:0f:81:29:45:f9:bf:72:bd:3a:ca:db:c3:fa:e2:bb:
3c:1e:73:94:2c:40:6a:d6:9f:3d:93:78:26:7f:d3:50:6c:af:
1b:54:cd:12:d7:06:0f:27:2b:eb:4c:7d:70:19:ce:56:e9:87:
59:a4:0c:0f:91:0a:5d:46:13:73:98:11:e0:77:26:28:4e:02:
ed:f6:9a:98:9a:d8:8c:35:c2:43:26:ec:0d:e6:6b:f9:7d:18:
0b:60:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:20 2025 by rpki-client