Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: MsaQ5q6OT5dPvcIczPBVvV/Z4KfsIov/gWzPgd3JodA=
Subject key identifier: C1:20:C3:AE:3C:32:4C:12:48:CF:6E:64:39:0A:2A:32:C0:CD:A0:80
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 01976929E3AACD0739B3D9BB134239E658C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 137C
Signing time: Fri 13 Jun 2025 12:00:42 +0000
Manifest this update: Fri 13 Jun 2025 12:00:42 +0000
Manifest next update: Sat 14 Jun 2025 12:00:42 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: QGIn+EgvZrTUWDiAMRJLSg/Pct4ArKoauPgTqmgWnPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e3:aa:cd:07:39:b3:d9:bb:13:42:39:e6:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Jun 13 12:00:42 2025 GMT
Not After : Jun 14 12:00:42 2025 GMT
Subject: CN=c120c3ae3c324c1248cf6e64390a2a32c0cda080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:9f:70:fd:cb:cc:f1:7a:ed:4f:8d:e3:d0:
e6:dd:a7:6f:98:43:fb:ac:61:f6:cc:a7:03:57:9a:
30:6c:8b:60:7b:63:8d:e3:11:3d:ce:8e:90:b0:2a:
30:1e:f0:f8:22:fc:6a:29:2c:bf:ca:f4:2e:01:4f:
db:bf:3f:de:2d:de:41:d3:f3:9e:58:74:d0:56:fe:
83:be:24:6e:ea:d0:44:1a:94:6a:6d:7d:41:12:f6:
1d:ce:30:b0:4a:0b:fb:68:15:14:e5:e7:d7:f1:b3:
36:7e:36:e2:e5:1e:33:57:41:39:ce:18:70:79:b7:
d2:96:70:39:58:d7:9f:c7:2e:36:b4:93:67:ed:f1:
79:90:03:8d:50:1f:ef:1a:e9:16:fc:59:93:4a:19:
4d:e4:ab:ed:24:3f:1c:a7:df:18:74:73:a1:ae:21:
ee:13:b0:dd:82:60:12:79:59:2b:82:75:0f:a9:a5:
c1:96:06:e4:b5:7f:ae:af:85:71:2c:c0:f3:bc:e0:
63:bf:ca:d4:ac:8d:d6:6f:f3:bc:bd:50:0f:3c:58:
7b:0b:11:2a:6f:be:f2:f3:10:cb:ad:0c:78:48:89:
b4:74:86:b1:34:b2:fd:66:a0:20:39:03:cc:ba:e6:
33:3f:ba:b9:31:2b:de:cc:a7:9c:a1:24:92:2b:07:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:C3:AE:3C:32:4C:12:48:CF:6E:64:39:0A:2A:32:C0:CD:A0:80
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:89:02:ed:b1:60:17:f0:0f:25:f3:4f:fe:de:0d:5d:de:35:
57:07:4a:0f:94:c0:17:34:46:8c:e5:f3:bd:ed:8a:e7:a6:47:
6e:8c:1e:16:81:ec:f6:32:ef:a4:ff:7a:05:66:a2:ff:c6:cc:
1f:d0:8e:20:71:3a:f0:d3:fc:35:2c:01:cd:83:f4:3e:d1:1c:
a4:7c:12:cf:26:6c:95:8e:04:48:85:99:01:6b:96:da:76:cd:
1a:e4:a7:1f:6f:ef:34:a5:79:36:72:04:b5:6b:65:92:90:e7:
22:d9:4d:71:f5:be:21:b5:24:fb:db:e3:39:2f:bf:93:c4:35:
4f:33:c0:9b:1c:f0:c4:11:fc:0b:c8:3b:7b:5f:39:55:dc:c6:
6e:87:eb:0d:2a:43:f1:ca:ab:72:81:e7:f9:eb:54:55:1d:e5:
d6:40:a4:76:87:43:f0:02:c6:7a:3e:30:9b:61:68:68:45:dc:
61:09:15:f2:19:c5:20:70:1f:8e:86:ef:f3:80:92:5e:48:a9:
ea:0f:0e:9d:a2:fc:e0:05:51:98:5a:3e:03:0a:79:da:36:14:
1f:8d:1c:01:58:70:77:c7:73:bf:58:49:1b:de:7f:65:57:85:
7c:ef:aa:19:05:cf:2c:ac:8c:6b:1f:59:70:79:0b:71:8f:d3:
06:b3:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:06 2025 by rpki-client