
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: Uq2ePfpF7xZE/LpHAxTp1Ucs3CfATm8o8XTPb7pTkbQ=
Subject key identifier: 90:91:63:13:9D:F0:D1:05:A9:91:BE:69:A7:92:B2:EC:F8:88:E9:E0
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 0199FBEB27B347EFCD771EB83B5C26F17F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 14D1
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: evXxECAJ4g855N7juHK58QTtTer5tCjhpUmF8PQZyQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:27:b3:47:ef:cd:77:1e:b8:3b:5c:26:f1:7f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=909163139df0d105a991be69a792b2ecf888e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:90:b4:6e:6d:bf:3f:5f:69:89:ef:26:d7:
25:c1:b0:aa:8f:34:e1:1d:a5:3e:52:eb:83:1a:1b:
10:f4:cb:58:86:eb:72:9f:f8:92:cc:45:86:be:e0:
0a:70:2c:f1:13:7a:61:ba:41:2d:fb:f9:53:44:ff:
7c:ff:b6:01:0d:d1:49:91:b8:4e:55:ba:5b:57:d7:
1f:e4:c4:78:af:0d:ae:5e:0a:40:fa:87:82:8d:66:
fe:5e:ae:64:8b:45:3b:24:da:21:91:10:70:2e:54:
15:37:20:ab:43:4d:39:97:45:6c:67:c4:33:65:22:
fe:0a:47:ff:7e:07:52:46:f9:2a:b5:09:0d:f2:9c:
fa:a1:2a:b6:a4:db:73:4f:4b:df:c8:01:05:55:8e:
f2:84:d8:67:9f:c7:d8:b9:d8:40:e8:25:62:20:bc:
e7:e3:82:1a:ef:cc:91:1a:74:f1:49:7e:0c:d5:38:
0f:64:e1:0d:2d:c3:91:aa:66:b2:3c:13:f4:fb:95:
06:b6:10:0a:88:a7:3f:4b:07:cf:7e:51:ef:b2:b9:
65:33:9c:c0:af:d9:78:2b:c6:81:9a:ea:7e:fc:09:
67:5b:79:52:86:8a:c0:e8:9c:2c:e4:ec:5f:9b:b5:
3a:5f:80:b5:30:dd:17:fa:85:6f:6c:9c:0b:ca:8e:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:63:13:9D:F0:D1:05:A9:91:BE:69:A7:92:B2:EC:F8:88:E9:E0
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:87:b8:14:25:1c:41:41:ef:fb:8f:37:80:5a:62:83:3e:
b8:9c:71:36:4d:de:1f:30:ff:e6:dc:8d:11:d1:40:e8:17:71:
5c:ae:f5:70:f1:ee:01:bd:46:53:1e:3e:0b:ca:72:f0:fa:7d:
ba:86:99:2c:1a:20:16:24:fc:78:b6:6a:cd:71:9c:db:ec:24:
7e:b3:30:c8:1e:48:7c:a7:85:f1:ac:0f:64:f7:cf:b9:ca:41:
51:31:13:50:11:24:c9:a3:10:8e:8d:55:1e:d3:f1:14:85:2a:
a2:e6:43:db:3c:50:e9:9a:ac:52:41:b8:22:50:0f:27:25:bd:
d1:c9:22:54:c7:65:7f:10:a2:6f:8d:1c:09:4a:d3:e4:39:60:
4f:42:66:f5:fb:75:eb:8d:75:ad:8c:1e:6c:10:c6:fb:01:24:
a1:8a:b3:78:24:5b:ad:60:7d:73:9b:6d:d0:76:4b:47:7e:06:
f8:6b:72:54:78:1b:f5:f5:9a:51:16:34:02:78:d4:f3:09:1c:
7b:1a:05:04:71:e6:56:48:bd:9b:c2:c2:dd:7c:e2:fc:32:1c:
72:18:e3:07:cc:c6:95:ae:8d:4f:d0:4f:25:f8:b6:15:34:f0:
e0:aa:59:f0:79:dc:6b:86:5b:b1:f3:b2:21:6a:c7:ca:08:ab:
78:9a:33:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yezR+/Ndx64O1wm8X+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzNhOWEzYWQzMjBhOGZjNjFiNWY4Nzg5ZjUyNWQwN2U1
YmUyNTEwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD
Eyg5MDkxNjMxMzlkZjBkMTA1YTk5MWJlNjlhNzkyYjJlY2Y4ODhlOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RuQtG5tvz9faYnvJtclwbCqjzTh
HaU+UuuDGhsQ9MtYhutyn/iSzEWGvuAKcCzxE3phukEt+/lTRP98/7YBDdFJkbhO
VbpbV9cf5MR4rw2uXgpA+oeCjWb+Xq5ki0U7JNohkRBwLlQVNyCrQ005l0VsZ8Qz
ZSL+Ckf/fgdSRvkqtQkN8pz6oSq2pNtzT0vfyAEFVY7yhNhnn8fYudhA6CViILzn
44Ia78yRGnTxSX4M1TgPZOENLcORqmayPBP0+5UGthAKiKc/SwfPflHvsrllM5zA
r9l4K8aBmup+/AlnW3lShorA6Jws5Oxfm7U6X4C1MN0X+oVvbJwLyo5C7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCRYxOd8NEFqZG+aaeSsuz4iOngMB8GA1UdIwQY
MBaAFHLDqaOtMgqPxhtfh4n1JdB+W+JRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQt
ZDI5ZjQ1Zjc5M2M3LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQtZDI5ZjQ1Zjc5M2M3
LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWGHuBQl
HEFB7/uPN4BaYoM+uJxxNk3eHzD/5tyNEdFA6BdxXK71cPHuAb1GUx4+C8py8Pp9
uoaZLBogFiT8eLZqzXGc2+wkfrMwyB5IfKeF8awPZPfPucpBUTETUBEkyaMQjo1V
HtPxFIUqouZD2zxQ6ZqsUkG4IlAPJyW90ckiVMdlfxCib40cCUrT5DlgT0Jm9ft1
6411rYwebBDG+wEkoYqzeCRbrWB9c5tt0HZLR34G+GtyVHgb9fWaURY0AnjU8wkc
exoFBHHmVki9m8LC3Xzi/DIcchjjB8zGla6NT9BPJfi2FTTw4KpZ8Hnca4ZbsfOy
IWrHygireJoz5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:51 2025 by rpki-client