Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: LK5lhBAxVvudxONlo94XnjhQj9CCFEk29wFjFtMj5NA=
Subject key identifier: 69:49:CA:A7:5A:91:2F:A1:E0:D3:80:1C:A9:64:54:20:6A:F7:DE:20
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 0197B6A0BADA7459C5369E4A4AF4E7263020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 13A4
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: /u7/zcOQxiXhsfLb6L3XdcQOCVRCLDIdDxUvMBDhglQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ba:da:74:59:c5:36:9e:4a:4a:f4:e7:26:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=6949caa75a912fa1e0d3801ca96454206af7de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:e8:e5:af:d5:53:e3:d5:6b:89:4c:7a:2d:
c3:ef:b5:35:db:4c:8a:f0:06:f7:82:e7:83:8e:a9:
3c:77:6c:a0:bd:15:8f:44:ca:ba:a4:fa:1c:55:66:
87:3a:87:23:13:43:fb:2a:18:96:90:2e:c3:ca:09:
a7:21:11:96:01:d6:8a:ab:53:c4:d4:42:62:e3:f1:
0f:30:eb:be:0c:c7:ad:4a:cb:3d:6b:e8:f6:55:a9:
be:da:03:85:0f:4a:42:2d:3e:45:23:1c:7f:05:a3:
eb:8b:48:d3:e6:c2:f5:27:9c:13:46:22:b7:9a:21:
cb:b3:55:f4:7c:e2:fd:cd:2a:33:4e:71:32:91:54:
64:b7:e2:e0:53:90:ba:f5:a6:74:01:53:56:57:56:
31:6c:51:8d:84:3e:64:b1:aa:6f:31:69:f7:9d:54:
9f:aa:42:c1:74:00:29:14:df:a3:82:59:4e:47:cb:
7c:14:fd:c6:f0:f9:41:a7:9e:ae:5b:a0:c0:8e:8d:
cf:a4:d9:a3:7c:50:f8:ce:b6:78:9b:0c:d0:2c:21:
33:50:2e:27:f0:72:ce:b0:85:cd:6f:42:c9:a3:96:
b2:a3:1c:d2:35:b5:b6:cb:bc:a9:ff:72:2b:00:09:
65:cd:e8:a4:c7:e1:ae:be:93:67:f5:04:d4:c7:7a:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:49:CA:A7:5A:91:2F:A1:E0:D3:80:1C:A9:64:54:20:6A:F7:DE:20
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:7b:92:44:91:ed:b1:c2:5a:50:38:87:20:a7:ad:b2:95:
13:c5:14:61:f8:17:6a:3e:9c:17:6d:c5:d4:72:8e:ea:05:be:
c9:14:70:66:ab:80:ac:3b:6c:e8:3d:85:1f:58:8b:b6:a8:ad:
31:fa:e1:40:31:a6:76:1c:1f:a8:01:0c:13:79:93:17:5d:91:
43:06:1d:17:99:4e:41:fa:93:ae:fb:79:53:a1:75:ec:25:ec:
6c:5f:f3:c4:8f:91:66:24:26:27:b5:37:f1:95:f0:d6:46:8b:
f3:84:89:85:10:22:ec:dc:18:f0:bf:a8:7a:85:d7:a9:79:c1:
c4:a3:cc:14:d1:f9:93:a7:7a:56:88:7f:75:58:86:6c:57:85:
36:d4:31:a3:8c:ef:ef:e1:90:88:d0:6d:b4:77:aa:6e:66:27:
c7:e6:d4:6d:6c:d8:90:ef:86:78:44:3a:4a:6e:a8:2d:c8:3f:
eb:4a:c0:31:56:14:dd:b4:3a:8f:81:f4:c6:dd:4b:6e:72:ef:
4a:46:e4:8c:13:84:bd:54:3b:ed:fe:9a:9e:1d:4b:fd:0d:75:
b4:90:8d:be:69:df:a7:87:55:fa:f0:c0:3c:1c:e3:3e:15:c9:
61:47:ea:e7:22:5f:d0:68:ac:33:9d:a0:85:33:2d:c9:40:a9:
8d:53:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:21 2025 by rpki-client