Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: VlSsTdE8puELjOGKYlx0R5uaqKVo558K7IGYSSj6JSo=
Subject key identifier: 21:61:F1:F4:94:40:2B:E4:E1:BE:BD:E6:6E:0D:F3:B1:73:C2:D7:63
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 019A4D73957B89AD7464B519B74DA7473E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: MEuy++LW90MGa2oyWXaxp5m8PvNMC6KGikERFlsatPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:95:7b:89:ad:74:64:b5:19:b7:4d:a7:47:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=2161f1f494402be4e1bebde66e0df3b173c2d763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:17:79:8b:20:1a:fa:33:1b:4b:f6:32:7e:
f1:3a:e9:13:b0:4b:90:94:54:9b:06:2f:08:f5:bf:
6d:db:f8:58:92:a8:21:9e:5e:70:c0:5e:48:88:46:
74:c5:0b:87:86:9f:90:75:68:85:61:b4:b4:c6:61:
3d:9c:26:aa:a4:89:fd:41:01:ae:0b:60:8b:f0:05:
82:78:0a:89:99:35:ad:19:a9:23:3f:fe:ef:9d:f1:
fa:8f:3c:e9:bc:53:cb:2f:bd:5c:3f:48:1c:ab:4f:
c7:0b:02:d9:ce:28:88:53:ee:1e:43:e3:41:84:7b:
e6:f7:03:b8:34:66:a9:52:fd:8f:80:cc:2e:e0:53:
e5:35:07:f6:10:4f:e9:fe:39:94:f0:5c:e4:8d:65:
8c:c8:92:da:69:69:94:f0:4a:20:52:b4:e5:e4:02:
df:23:2d:b7:9f:1a:f2:07:43:98:6b:32:37:a0:2a:
27:f7:cd:c9:7d:e6:34:b4:ba:0b:e2:59:df:e0:d9:
f4:27:5e:10:6c:15:4c:e1:f7:d4:1d:2a:8a:94:9e:
0a:f6:4b:44:e4:99:57:33:4f:35:bb:28:36:7b:01:
73:93:92:b6:aa:0c:04:07:ff:48:a6:24:71:a4:82:
6b:0c:52:07:f2:3d:b6:7a:52:eb:c0:6a:6b:a2:48:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:F1:F4:94:40:2B:E4:E1:BE:BD:E6:6E:0D:F3:B1:73:C2:D7:63
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:20:70:53:6d:d0:72:ba:1f:65:d1:0a:d9:14:0e:83:d8:6d:
f6:ef:fd:f7:f8:b6:2d:5e:8a:1b:c7:03:59:55:13:51:75:63:
ef:f2:ba:ea:00:c8:8e:d3:e3:68:2d:e1:f8:36:87:14:8d:e5:
0b:5c:35:8a:3f:e1:79:b0:45:80:f0:8b:c8:34:ca:88:5f:cf:
32:84:67:0e:21:42:65:83:50:28:a2:a5:ee:0d:39:fa:08:81:
28:4d:d1:25:e6:91:65:1d:15:5f:7a:d6:3c:82:94:8d:a9:1d:
d0:79:e2:b6:68:bf:97:fa:2a:28:25:2e:8a:99:ae:ba:b5:a3:
6b:69:97:d3:44:84:1a:02:1b:ac:1b:01:ca:f9:6b:2c:bd:35:
38:6b:97:3a:52:af:bb:9c:3a:ec:d4:4e:d4:ba:e2:8e:cb:71:
fa:e3:c1:1c:eb:3e:e9:f1:98:1f:73:6d:79:e2:66:0e:60:1f:
e5:d2:57:ca:3d:0c:aa:6b:b6:e3:c2:a0:f1:fb:92:99:09:39:
61:e5:87:44:0e:a9:9a:c7:4f:7a:d5:39:f2:76:86:1c:bc:26:
70:86:ef:75:2d:77:4e:39:5f:bf:bc:c2:31:99:4a:c7:66:d5:
bd:2c:59:ad:93:b0:9f:9c:1a:08:1f:fc:77:44:30:7a:55:6c:
fe:47:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:04 2025 by rpki-client