Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: Z4soNc73LwoZYOzg+mPoFptcnhKlj4g2YTaVJkmGwQo=
Subject key identifier: 8A:30:FB:62:93:0E:59:6D:4A:65:6D:76:15:7C:D4:E2:B1:11:2B:30
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 01976BF484D628240B642BD701A9E3396BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 01:01:16 +0000
Manifest this update: Sat 14 Jun 2025 01:01:16 +0000
Manifest next update: Sun 15 Jun 2025 01:01:16 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: tK6CebCPGwXTpJ1X3H6JEDXX/x/wcA4VN/0EXYfCB40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:84:d6:28:24:0b:64:2b:d7:01:a9:e3:39:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Jun 14 01:01:16 2025 GMT
Not After : Jun 15 01:01:16 2025 GMT
Subject: CN=8a30fb62930e596d4a656d76157cd4e2b1112b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:63:f7:ac:5d:f2:7b:97:ae:cc:08:03:fc:
02:ae:fe:36:a2:ce:4c:c9:65:53:e9:96:3e:1b:33:
d4:f2:87:a0:38:ae:b2:49:4c:ce:9c:49:98:1c:b7:
fb:cd:e3:db:33:84:e0:0a:7a:5c:e6:36:8f:82:9d:
f3:76:16:ba:b6:27:2b:2f:55:d0:8f:62:1a:eb:91:
d1:89:4a:d6:91:21:cc:d5:f0:16:50:cf:48:24:e4:
b5:87:f3:d2:62:f4:41:70:78:7d:d1:5e:af:87:6c:
50:1e:e8:c1:91:b8:f1:63:e3:42:a9:45:a1:17:d3:
19:aa:1f:ac:93:93:07:97:50:c1:30:25:47:ab:e7:
f5:b7:51:65:08:2b:ea:74:55:00:db:3c:46:32:10:
cd:5b:74:4a:c8:31:21:f3:d5:aa:a4:7c:63:32:a4:
e0:b8:c4:85:72:f1:c2:aa:28:c1:ae:59:d9:6e:f1:
ad:9d:8f:d7:51:8a:36:43:eb:95:41:37:9e:60:ac:
ef:8d:f5:81:93:1d:cf:3c:71:d9:b3:7d:2a:bb:0f:
36:6c:f9:3b:77:d0:ea:05:94:9c:98:de:dd:e0:c3:
eb:44:0c:fa:bf:af:24:98:dc:f5:88:44:35:28:67:
09:6b:f4:21:46:fe:08:48:b9:be:7c:97:71:03:7b:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:FB:62:93:0E:59:6D:4A:65:6D:76:15:7C:D4:E2:B1:11:2B:30
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0c:af:15:9a:bc:f0:ae:24:37:76:75:85:9a:9a:a4:fb:36:
3f:46:30:d2:ef:8b:50:62:2b:ea:f2:12:69:42:7b:65:7c:57:
84:27:0f:cc:56:0b:1c:5f:6d:4d:65:dd:14:3d:56:6b:c1:3d:
2d:da:17:4a:3e:e6:18:5a:be:bf:11:d3:e7:fc:fa:67:96:18:
db:24:ac:4d:fc:12:55:af:d8:41:ef:89:a6:32:b3:b1:8d:72:
a1:1e:7c:20:88:f3:85:c2:48:05:0d:be:3e:a9:2b:6a:36:4f:
69:eb:a4:31:f4:a4:a6:0c:ae:c1:dc:11:3a:3e:78:3a:b3:d9:
25:76:7b:57:ec:32:91:cf:68:92:0e:7d:ac:d5:c7:1e:11:15:
01:58:fa:4f:49:2d:a9:4a:7d:d2:94:a3:15:bf:14:6b:0a:d4:
5d:7e:bd:b5:5f:6f:d0:cf:2b:7c:b2:53:ee:6d:9f:96:d3:ab:
50:2e:c6:f6:21:82:4e:3b:cd:46:eb:5f:29:78:c4:de:08:3f:
fa:0e:ab:da:ac:bd:e8:8d:78:02:3a:2a:20:88:d2:8f:a7:9d:
7b:a0:33:64:0a:54:43:d6:fd:44:80:3d:65:ee:20:a9:27:e0:
c4:71:94:da:c1:7b:be:6e:f4:a7:65:1f:c7:0a:e9:60:4f:2f:
7a:3e:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:42:06 2025 by rpki-client