Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: fTvLk5bRM5c7QGOwATOZztF9v2s9TPFz7pCnckhKKoM=
Subject key identifier: 72:EC:7E:D3:81:F9:7E:E2:48:D6:93:4F:9E:04:63:55:EF:2F:0E:26
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 0198D473AABC13700E1802C5DD42DAB5FAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 1438
Signing time: Sat 23 Aug 2025 01:03:26 +0000
Manifest this update: Sat 23 Aug 2025 01:03:26 +0000
Manifest next update: Sun 24 Aug 2025 01:03:26 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: OeUusFZOl6Mv3I6I8tvauMLJRWse5m0Vyf9+1Zuai/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:aa:bc:13:70:0e:18:02:c5:dd:42:da:b5:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Aug 23 01:03:26 2025 GMT
Not After : Aug 24 01:03:26 2025 GMT
Subject: CN=72ec7ed381f97ee248d6934f9e046355ef2f0e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:75:3f:9a:00:c0:28:1a:21:61:cf:2a:8c:
5d:7c:65:b7:35:2d:48:34:43:fe:0e:eb:46:0a:15:
7c:99:4b:f1:cf:0f:a4:55:67:0d:ca:cc:c8:9e:c9:
88:98:d3:f4:be:49:f2:b5:10:36:19:f6:f0:90:3a:
d6:98:db:d3:26:1d:3c:f0:b3:b3:dd:dd:6b:3d:48:
cb:69:71:6d:dc:e6:8b:6c:63:d3:e3:c4:fa:17:e7:
29:ee:8c:51:84:b0:8f:54:74:2f:ff:70:ec:5e:a5:
eb:0c:42:87:11:4c:9c:2e:a5:92:5f:fb:53:61:2d:
94:ce:e8:50:b4:04:9a:64:30:0b:1f:93:b1:a4:ff:
14:71:68:c2:85:8a:c9:34:aa:b0:5f:7e:d6:03:80:
c9:60:fe:e9:2d:16:51:08:d7:bf:1b:fa:a7:df:d6:
c4:56:42:83:29:94:93:e6:94:f3:49:0e:32:38:b7:
49:7b:4b:20:13:49:8f:ef:bb:f6:b2:67:09:c8:91:
b0:bf:94:43:25:34:d2:bf:da:b9:28:c5:9c:04:bb:
11:f1:3b:ed:3f:67:0c:8c:2d:b4:08:51:de:74:48:
55:8e:a9:e2:c2:74:ee:00:c6:e5:ee:ea:f4:ff:a5:
47:bc:7e:1a:a5:77:cb:b8:9b:e3:24:f8:c2:26:c4:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:7E:D3:81:F9:7E:E2:48:D6:93:4F:9E:04:63:55:EF:2F:0E:26
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:a4:03:02:82:ba:27:e2:e5:22:c1:a2:f2:5c:75:9d:89:
8c:ec:3b:23:9c:b2:98:d2:0b:a3:96:89:b0:36:33:d0:7a:eb:
5e:bb:29:d7:17:30:29:01:65:75:33:bd:81:6a:e8:18:a2:9c:
57:7f:09:ea:fc:54:0a:10:c7:17:0b:d2:80:56:cb:2f:fd:ce:
c0:b6:3e:45:b8:e3:55:cd:8a:18:5a:89:76:3e:92:68:7a:51:
fb:0a:5b:e4:26:15:e5:21:95:3a:84:c7:16:c6:47:7c:87:07:
f0:5e:fe:a1:ad:80:c2:7e:b5:c9:d9:70:4b:80:a6:75:7f:06:
0d:0d:f5:cd:a2:33:2f:ad:5a:d5:41:8c:b9:1f:f5:7a:99:35:
73:d4:db:5f:4f:a9:87:f0:8f:50:2e:99:b9:b5:73:c1:7a:54:
a2:55:e0:40:28:1e:fe:53:5e:a0:fe:d0:fa:28:21:df:7f:55:
fa:23:18:68:d0:8a:d3:82:54:ac:46:4d:25:8f:5d:5b:b4:50:
c3:b1:77:a4:92:74:40:b5:9c:d6:84:d8:10:5f:5c:8a:32:9e:
1b:d8:6b:4d:e6:3c:74:cd:f4:18:6c:47:d0:d9:8a:56:cb:cd:
aa:88:95:52:29:32:05:d2:87:46:b1:f9:ad:e2:39:bf:53:53:
af:a6:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:20 2025 by rpki-client