Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: 4mhFtYSI4fvuOT7VVVDxI8GGwtrAU89hyoBY6l2lFTo=
Subject key identifier: 61:86:FB:02:F2:95:7A:4F:4F:D4:D2:2A:8A:25:44:20:90:B2:50:C5
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 019651FFC0985D9123A7CF5749D1401844FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 07:00:37 +0000
Manifest this update: Sun 20 Apr 2025 07:00:37 +0000
Manifest next update: Mon 21 Apr 2025 07:00:37 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: uIZQj+BBeGqrowRCR66ns65oxyTDdwMuPu2WS6raNfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:c0:98:5d:91:23:a7:cf:57:49:d1:40:18:44:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Apr 20 07:00:37 2025 GMT
Not After : Apr 21 07:00:37 2025 GMT
Subject: CN=6186fb02f2957a4f4fd4d22a8a25442090b250c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:07:dc:3e:e0:44:30:b8:e2:40:3d:07:c4:
28:c7:3d:65:34:05:af:64:16:cc:2d:96:e0:b9:c9:
6f:4d:68:f2:ed:a9:33:b7:fb:f9:af:a0:39:f8:7e:
3c:ce:ef:f9:0e:3d:c5:68:6c:98:fd:a2:3d:80:2c:
e6:d6:4e:41:e0:78:47:76:2b:2e:7f:21:78:ed:94:
6a:eb:fb:07:49:99:d6:0d:f1:9b:3a:e3:01:35:45:
42:d4:b0:e9:a9:27:8f:60:ef:2b:6d:c3:5e:42:6c:
1d:2a:54:79:4e:99:8a:28:6a:14:55:00:32:d9:d7:
91:b9:50:8c:40:e0:17:b1:4f:92:20:60:d9:c9:68:
31:2e:03:95:ca:ce:59:e0:a3:72:a1:d0:b0:9d:52:
4e:44:fa:2f:13:46:01:a3:f7:a8:9f:8c:9e:1e:d6:
0a:95:1b:48:9f:ee:4b:c1:e0:ed:d1:6e:8c:03:83:
3e:75:6d:87:25:d6:f4:df:a7:20:c1:2d:0e:eb:47:
ee:e2:e1:cf:e8:05:c1:b6:6e:20:93:42:54:72:1c:
2e:ad:fa:ca:f8:34:e8:94:28:d5:ee:34:e0:42:b6:
e5:03:6a:b6:95:03:db:92:d4:8b:20:76:18:00:ad:
db:05:b0:b6:e5:3d:42:cc:80:78:f8:62:1c:b5:df:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:FB:02:F2:95:7A:4F:4F:D4:D2:2A:8A:25:44:20:90:B2:50:C5
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:7a:cd:4a:96:f5:62:26:3b:40:8e:1c:d7:77:e6:45:5d:
35:cf:6b:66:e3:fe:f5:ea:25:6d:a3:bf:8d:a1:cd:11:d2:2b:
46:61:e4:11:b4:64:ce:19:fc:c9:28:d6:5b:8a:a0:0d:e4:d6:
46:a6:56:6e:48:31:72:82:32:a6:45:7f:d5:8b:b6:3e:95:ec:
94:8a:67:e8:73:5d:e2:86:2c:9a:72:91:07:13:8c:22:7a:f4:
cf:cc:0a:34:ec:1a:ca:6a:24:51:ac:68:b5:c7:74:48:43:0d:
c9:77:f3:7c:da:7b:92:4b:3e:ff:90:3d:97:3a:f0:fe:65:5d:
c7:e1:a7:e2:60:23:0e:8c:f5:c9:34:41:c7:10:c3:dc:29:c2:
a7:a2:21:d1:9f:12:5c:c1:98:bf:63:c0:c4:d2:ff:37:15:85:
3b:e7:4f:1a:f6:9b:01:2d:46:ef:be:9b:8a:5b:af:83:53:d3:
95:b0:69:bb:7b:36:96:c1:e2:f2:ef:a7:6b:02:b1:4b:a1:a6:
a0:80:13:d1:5d:9e:6e:e3:1c:69:b2:72:f0:b1:83:93:04:d1:
09:d4:c1:6a:1a:67:8e:77:54:9a:c4:fc:49:e4:3f:31:3a:10:
89:e7:cc:a1:ac:88:47:90:ef:32:0a:27:38:22:16:d7:b2:06:
d3:2b:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:34:52 2025 by rpki-client