Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: lG20HmUnYs8PyNDRQqWBJSJNaal9efQeY8WiuPmwyUo=
Subject key identifier: 24:35:50:4C:35:E7:B7:69:CD:EA:DB:48:BC:5B:42:01:5E:3E:CE:4C
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 019875D1BF30B323B2FBC55A4C77E94E2BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 1407
Signing time: Mon 04 Aug 2025 16:02:16 +0000
Manifest this update: Mon 04 Aug 2025 16:02:16 +0000
Manifest next update: Tue 05 Aug 2025 16:02:16 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: wC7VI34iSxYPPoKDjdIvw+swNd2+NoF9UX5pUwEhUjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:bf:30:b3:23:b2:fb:c5:5a:4c:77:e9:4e:2b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Aug 4 16:02:16 2025 GMT
Not After : Aug 5 16:02:16 2025 GMT
Subject: CN=2435504c35e7b769cdeadb48bc5b42015e3ece4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:1c:7d:75:40:3f:0f:f0:5b:e9:3e:8c:f9:
21:70:cd:c0:89:13:df:05:23:56:56:16:4c:99:c6:
67:bd:c3:5c:fd:25:2d:2d:2f:b8:ac:a9:92:e4:4e:
30:1e:86:ac:02:c6:de:d8:95:a9:8d:8d:cf:55:b2:
da:84:ee:ea:4a:24:69:1a:71:79:0d:35:e8:c6:17:
c2:ed:03:20:53:8b:0c:3e:bd:f1:dd:42:c3:3c:5e:
31:2a:21:78:23:5a:af:c4:d6:b2:d5:d5:08:19:a8:
12:a0:ed:86:56:8a:68:c3:bc:c3:77:f5:9f:05:25:
13:d0:28:21:68:06:be:43:14:14:8c:9c:d5:b4:5a:
ef:9a:d2:59:18:f1:a1:14:0b:90:ce:c4:f3:08:42:
22:07:6f:b2:54:99:c7:a6:e1:ff:44:1c:9c:35:eb:
42:4e:de:6e:eb:fc:bc:00:f0:4e:90:67:ed:c3:40:
8c:43:e8:22:4a:31:8f:8d:1e:0c:b6:37:2f:b8:b8:
50:77:99:b0:a5:be:f2:c5:cc:8e:29:1d:90:70:6f:
5d:dc:77:f2:94:40:dc:db:ad:c2:c8:29:bc:18:1f:
80:27:27:9b:ab:4d:aa:79:44:a6:82:66:be:b7:2b:
b7:4d:cd:cc:b1:10:03:71:02:dd:7f:0e:77:53:dd:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:50:4C:35:E7:B7:69:CD:EA:DB:48:BC:5B:42:01:5E:3E:CE:4C
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2a:4f:97:e9:d8:1c:e3:26:39:db:6c:85:f2:52:98:06:c5:
71:16:88:13:ef:a6:19:4d:c2:fd:87:c3:f6:50:3c:e2:48:16:
72:01:70:7f:d9:f2:48:05:26:26:e9:d4:74:91:53:88:1b:5e:
33:dd:5f:95:e5:8d:8d:11:bd:1d:b3:22:18:50:e2:f9:ca:5c:
f1:b1:dd:39:a4:7f:38:37:89:4c:7d:d2:2e:30:d0:43:4f:d0:
8d:17:53:07:5f:30:ed:4c:f8:b6:38:9b:22:26:5a:f6:02:f4:
30:da:0c:47:33:69:e4:2c:f9:9d:0e:e5:51:ae:06:57:72:2c:
37:f4:0f:90:38:79:f4:96:14:19:d4:5e:b3:82:d5:4d:1d:e9:
8b:74:cd:38:b2:f0:37:4a:35:f6:3e:04:68:f1:3c:14:99:45:
14:24:3d:14:65:41:23:ec:2f:71:d5:9b:f9:ca:6d:4f:d9:98:
af:2b:5f:59:f4:37:c8:28:9e:79:b3:5f:e4:5d:7c:98:50:72:
22:0e:c5:27:bb:5c:49:b1:e3:58:34:fa:45:cf:96:41:d8:78:
ed:17:ff:4b:3c:e2:2a:c5:82:01:61:13:8a:1b:27:43:95:c9:
3a:9d:91:6a:ab:61:3c:eb:3b:af:f2:78:85:51:7b:c7:67:43:
4d:ff:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:27:18 2025 by rpki-client