Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: lpZ1dTDVNRTJszxq1nBZejGG6ppdvYEhs/h4F+qHI+s=
Subject key identifier: 0B:D9:69:31:1E:29:10:EA:6D:7E:CA:58:5C:F5:1D:ED:04:4D:81:FC
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 0196A80AFA2CF435D28EA559F32EF4EE6143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 1318
Signing time: Wed 07 May 2025 00:00:13 +0000
Manifest this update: Wed 07 May 2025 00:00:13 +0000
Manifest next update: Thu 08 May 2025 00:00:13 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: x0mE3ozzynbKyIPGv4vp+wih11WrwLv8LONURsUCDRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0a:fa:2c:f4:35:d2:8e:a5:59:f3:2e:f4:ee:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: May 7 00:00:13 2025 GMT
Not After : May 8 00:00:13 2025 GMT
Subject: CN=0bd969311e2910ea6d7eca585cf51ded044d81fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:fa:86:bd:56:9c:82:77:c0:53:0d:42:44:
24:0c:57:da:aa:8d:8a:85:99:15:e0:4b:fe:dd:f7:
ee:65:f8:fe:c0:2e:cc:89:dc:8a:13:c2:0e:4e:65:
f4:5c:3a:38:5e:1d:14:30:48:58:76:8d:4e:62:87:
0b:62:a6:60:2e:0b:58:10:2a:15:31:28:3f:9b:a0:
6e:5f:8d:f6:3b:59:2b:f1:fe:37:bf:8f:6a:41:56:
ec:62:a0:29:be:6e:9d:bc:df:84:85:ae:3a:bb:d6:
09:16:7f:99:81:6e:3e:52:25:ee:15:df:49:67:92:
ca:90:9f:cb:f2:81:61:0b:62:73:60:b5:33:19:f9:
09:d2:f9:f8:b2:c4:34:46:83:48:05:7d:b2:4b:a5:
ae:bc:00:72:b1:9e:78:1c:d3:50:86:5e:d6:5b:a9:
cd:cf:fe:c8:5c:58:d1:67:76:71:2f:b2:dd:2b:6e:
1d:c1:ca:55:7f:b3:e4:1f:d9:05:b1:2c:09:ad:84:
ba:6c:14:a4:9b:b7:ca:db:5a:4a:97:cd:50:91:1a:
23:d0:f6:aa:f2:ba:4a:6a:fd:c8:c0:85:3c:f7:c7:
1a:9c:45:c0:78:cc:3b:fa:6b:0b:2d:5c:64:0a:52:
30:0a:1f:59:c5:80:15:15:b7:0d:b7:6b:48:ff:8f:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:69:31:1E:29:10:EA:6D:7E:CA:58:5C:F5:1D:ED:04:4D:81:FC
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b5:c8:50:00:22:62:40:88:1a:c6:25:78:d5:cf:bc:53:62:
4d:31:37:74:53:e9:1b:7b:da:f8:1b:4b:c5:4b:44:2f:cf:c3:
15:70:6a:7f:09:1b:ed:08:be:34:86:04:c1:cf:a6:50:1f:ed:
f7:a5:8f:b5:51:aa:96:4a:2d:b0:b3:fe:f1:84:7b:3c:6b:a9:
e8:e3:54:f6:4c:b3:d8:b5:cd:ea:fd:b0:87:3b:08:5b:43:4c:
6c:15:2a:71:32:4f:bb:fb:ea:d3:c2:bb:f4:a5:cf:c2:62:c5:
a3:8d:6b:9a:5f:e5:12:d5:83:01:9c:39:25:3d:b3:77:94:cf:
db:98:6c:73:6c:68:50:a0:26:bc:2f:75:59:f7:1d:71:b7:bb:
cf:42:95:ab:d6:5f:d2:85:ac:89:82:22:64:a5:69:80:4e:f6:
e7:1a:9b:9c:a3:c1:e7:9e:4b:74:45:6f:f6:3f:ba:cf:ea:4f:
6a:70:fd:96:0b:e7:a6:f0:b4:76:7d:11:2c:cb:4d:b4:ec:b8:
99:3b:7b:a5:09:c5:51:08:7a:40:87:d1:36:38:d7:55:6e:64:
11:4f:d4:a0:51:42:17:e2:e3:d2:04:2d:bb:c9:1d:42:70:13:
a7:f3:2f:15:14:39:71:72:8c:6a:67:04:e2:46:80:c8:ca:c3:
9e:a6:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:05:00 2025 by rpki-client