Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
File: rmgsTwopQO6oclQqYhXjVJkd60s.mft (raw, json)
Hash identifier: puWbsZc8oR5gMw+zyu5vFUsGv6bp0x3BKBcrjzBmel8=
Subject key identifier: 59:FE:05:B0:A4:F0:21:B9:A0:E8:3C:4F:27:F4:8D:C6:A3:2E:35:B4
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Certificate issuer: /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial: 019A7225F4DC68DCFC7B4F6FAACA81147F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: ifB7bI8Nz6a1wo-Om4qJOLNZOqU.roa (hash: G4ZTdZq0UWN0ZVqhuNwvAXhge2Xq79dXIWiLnGu1ENA=)
2: rmgsTwopQO6oclQqYhXjVJkd60s.crl (hash: 2hvPiXYR87m2QilI5zms8XjIeZ+N7RNs8sq19sHYuP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f4:dc:68:dc:fc:7b:4f:6f:aa:ca:81:14:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=59fe05b0a4f021b9a0e83c4f27f48dc6a32e35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:7e:0e:4f:b0:b1:5f:a3:72:c8:f9:f7:7c:
82:6b:da:fb:ca:96:ca:5f:33:16:5a:44:8f:8e:74:
c3:fd:31:ed:7c:f8:32:34:70:e1:65:83:c0:fa:10:
59:c9:59:e2:32:d5:2c:8f:bf:bd:6e:2c:ac:20:e7:
40:72:1e:92:9e:97:e2:98:fa:68:4b:bd:ab:41:8a:
1f:fa:61:9c:fd:68:1f:16:20:64:a5:96:77:0b:f1:
be:2f:3e:64:e5:47:21:77:00:f8:1b:5d:3a:57:70:
fc:f7:d2:7f:ac:f5:19:99:05:9b:fd:fb:26:7f:8d:
8d:30:a6:bb:3f:f3:87:fc:8b:cb:10:15:b5:2b:8b:
08:39:ca:bf:87:29:e9:c1:3a:47:d9:cb:e7:5e:f4:
27:51:08:a5:dd:5f:ba:b0:7b:2e:15:0c:a8:8a:6c:
5c:ba:8b:c4:d6:0b:b0:41:d7:80:76:fe:56:57:ca:
06:85:25:db:ea:a0:82:d0:9d:8b:0b:8c:31:0c:f5:
35:1a:44:5d:41:87:85:0e:dd:79:0e:99:a5:d2:c1:
b1:23:dc:c8:37:40:30:b1:c8:75:68:d2:74:70:ab:
9d:f7:a2:0a:c9:87:29:d1:a2:7c:98:a7:39:9e:78:
c3:58:84:e8:a7:d1:d6:17:41:b2:c2:fb:89:6c:51:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:05:B0:A4:F0:21:B9:A0:E8:3C:4F:27:F4:8D:C6:A3:2E:35:B4
X509v3 Authority Key Identifier:
keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:76:f2:46:e4:ea:96:28:e0:ca:d8:4f:42:94:bc:d5:3b:40:
7b:26:9f:62:ed:a0:f6:b5:5a:5c:eb:42:87:7a:47:c6:93:cd:
9b:0a:8e:8f:15:1c:ad:e9:f1:c6:91:df:eb:16:a4:1b:3a:9c:
17:8c:fb:38:6a:ba:33:43:a4:e6:94:bc:ea:bd:82:bb:91:67:
bc:35:d6:f3:1a:f8:54:01:0a:03:a7:f9:35:10:41:3e:49:64:
75:3a:af:24:b6:f6:6a:df:da:2e:a2:6b:1c:52:a7:5f:da:82:
b9:ef:d0:ff:40:8f:1e:ed:d4:84:38:e6:bb:f1:20:75:0a:92:
a7:a5:7a:8b:ac:b0:57:82:cd:a6:55:61:b5:65:61:f8:24:42:
e9:2e:7b:2a:77:80:0c:8a:93:52:0e:b2:95:d0:a6:19:1e:53:
e2:c5:ca:b5:67:42:20:d4:89:c3:4e:2b:89:fb:13:9d:b5:67:
4a:75:45:db:75:cd:7a:86:7d:6e:11:d5:69:32:6c:3c:44:e6:
d9:46:4e:92:d2:15:21:94:78:7c:02:e1:7e:9d:a8:1c:ea:4c:
c5:f3:18:09:6e:ba:ee:d6:70:e0:4c:83:b0:7c:6a:eb:92:dc:
24:7a:e4:e7:11:98:52:dd:9f:be:7f:be:bc:c0:d3:ae:42:75:
1f:cc:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:52 2025 by rpki-client