Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: MzFdfMPcfmUd8X7BJFQ0DgxejSpzkKBBTbZkPrBAKWI=
Subject key identifier: 2D:22:5A:17:AE:9F:99:F1:09:10:F3:C2:B3:9A:D0:79:9D:F1:1D:44
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 0199225541B31565E7DFA81B2C02712D1D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:00:36 +0000
Manifest this update: Sun 07 Sep 2025 04:00:36 +0000
Manifest next update: Mon 08 Sep 2025 04:00:36 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: 4J2NbsD61pElS/o+0vd/eBdi2n8Q+/9dlD9zc6f6QSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:41:b3:15:65:e7:df:a8:1b:2c:02:71:2d:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Sep 7 04:00:36 2025 GMT
Not After : Sep 8 04:00:36 2025 GMT
Subject: CN=2d225a17ae9f99f10910f3c2b39ad0799df11d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:29:fa:a5:97:dd:d5:6f:65:d9:32:79:00:
31:30:b2:7e:78:d9:01:83:f0:17:4e:d1:a5:b8:8a:
7c:6f:c5:00:aa:25:c7:81:3a:05:b5:c0:e8:f5:ac:
cf:d3:ce:cb:35:d2:8c:41:93:70:7f:b8:89:21:bd:
fb:34:31:96:94:76:c1:70:fa:db:11:12:d8:d2:5e:
44:cb:a4:a9:35:71:c8:1b:21:56:c8:69:7a:02:80:
cf:33:1e:a5:1a:bf:72:d5:a9:c2:89:94:85:4c:91:
44:a2:67:81:3a:38:e4:18:4e:94:2f:fb:21:1c:03:
b4:fe:81:1f:66:d0:07:ac:9d:82:f0:50:2d:f2:8b:
c6:15:49:b0:68:13:5c:cb:fb:a5:3b:83:ff:41:7a:
77:05:07:b1:e2:40:f7:3f:bf:85:9f:eb:91:f8:c6:
b2:50:20:a0:65:30:8e:ea:66:92:34:f4:7a:5b:60:
19:28:73:75:13:1f:06:ae:25:c1:47:15:3d:ec:61:
c8:e0:af:81:8c:e9:a4:77:08:8d:af:ba:bb:d1:96:
f3:d9:c6:94:12:ec:30:e5:a8:5c:cb:d1:69:91:c2:
d3:8f:2e:4e:77:3c:27:59:ae:fa:a9:47:47:1e:c6:
3e:6b:50:a5:2f:61:f9:77:67:68:b3:58:fb:19:1c:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:5A:17:AE:9F:99:F1:09:10:F3:C2:B3:9A:D0:79:9D:F1:1D:44
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:50:f9:c4:8b:74:5c:d8:8d:c7:3e:65:ea:0b:33:21:04:ac:
4e:a8:55:a2:8e:e0:fb:0b:11:a0:39:d0:40:56:22:aa:d9:56:
b6:66:1e:bc:b2:f3:9d:34:42:16:9f:71:24:bd:92:04:d9:55:
05:bd:a6:36:31:45:89:c6:82:12:08:cd:c7:01:2d:ea:2d:59:
47:23:92:58:98:77:cb:12:63:15:e6:0c:61:c7:64:4e:64:2a:
52:2a:16:98:56:c4:cf:f9:af:90:3a:db:56:f0:53:41:01:50:
66:7c:45:cb:16:f0:ab:3e:13:12:76:6e:ca:4e:8a:38:3f:2e:
1a:e9:e1:49:99:c5:77:26:f2:de:39:9d:87:a3:64:32:db:19:
d2:26:c3:95:c9:3f:17:25:65:d7:57:91:cd:7c:10:40:82:35:
ec:7b:86:96:ce:13:fd:bc:1f:6a:21:92:4c:29:66:e5:43:f3:
48:28:17:5e:12:12:8f:ea:ef:51:54:8e:4a:56:c2:4a:ac:3a:
1b:ea:a8:32:f2:99:27:8a:c7:bb:06:f4:f1:1c:f1:d9:3c:8c:
39:b2:c8:01:c3:f8:0e:96:93:7f:4a:1a:37:f8:33:e2:0e:78:
af:2c:a0:cf:2e:43:f1:fb:ff:b8:0c:8c:1d:dc:37:6c:4e:ab:
32:ba:30:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUGzFWXn36gbLAJxLR0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjgyYzRmMGEyOTQwZWVhODcyNTQyYTYyMTVlMzU0OTkx
ZGViNGIwHhcNMjUwOTA3MDQwMDM2WhcNMjUwOTA4MDQwMDM2WjAzMTEwLwYDVQQD
EygyZDIyNWExN2FlOWY5OWYxMDkxMGYzYzJiMzlhZDA3OTlkZjExZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMgp+qWX3dVvZdkyeQAxMLJ+eNkB
g/AXTtGluIp8b8UAqiXHgToFtcDo9azP087LNdKMQZNwf7iJIb37NDGWlHbBcPrb
ERLY0l5Ey6SpNXHIGyFWyGl6AoDPMx6lGr9y1anCiZSFTJFEomeBOjjkGE6UL/sh
HAO0/oEfZtAHrJ2C8FAt8ovGFUmwaBNcy/ulO4P/QXp3BQex4kD3P7+Fn+uR+May
UCCgZTCO6maSNPR6W2AZKHN1Ex8GriXBRxU97GHI4K+BjOmkdwiNr7q70Zbz2caU
Euww5ahcy9FpkcLTjy5OdzwnWa76qUdHHsY+a1ClL2H5d2dos1j7GRwxIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0iWheun5nxCRDzwrOa0Hmd8R1EMB8GA1UdIwQY
MBaAFK5oLE8KKUDuqHJUKmIV41SZHetLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgt
ZjA0OWM2NmVmODExLzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNjJjN2YtZjQ2Mi00MzQ4LWIwNjgtZjA0OWM2NmVmODEx
LzEvcm1nc1R3b3BRTzZvY2xRcVloWGpWSmtkNjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlD5xIt0
XNiNxz5l6gszIQSsTqhVoo7g+wsRoDnQQFYiqtlWtmYevLLznTRCFp9xJL2SBNlV
Bb2mNjFFicaCEgjNxwEt6i1ZRyOSWJh3yxJjFeYMYcdkTmQqUioWmFbEz/mvkDrb
VvBTQQFQZnxFyxbwqz4TEnZuyk6KOD8uGunhSZnFdyby3jmdh6NkMtsZ0ibDlck/
FyVl11eRzXwQQII17HuGls4T/bwfaiGSTClm5UPzSCgXXhISj+rvUVSOSlbCSqw6
G+qoMvKZJ4rHuwb08Rzx2TyMObLIAcP4DpaTf0oaN/gz4g54ryygzy5D8fv/uAyM
Hdw3bE6rMrowAg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:31 2025 by rpki-client