Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: 7pJRkpyIWusiGZmhYiR90GQbkmLZI+/sNDAEba35tng=
Subject key identifier: 00:B9:A7:A5:5B:8A:C5:34:48:6F:13:FA:DA:73:26:CC:6E:C1:94:7D
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 019675D581BF99111385E94A12841E6BD3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 12FE
Signing time: Sun 27 Apr 2025 06:00:48 +0000
Manifest this update: Sun 27 Apr 2025 06:00:48 +0000
Manifest next update: Mon 28 Apr 2025 06:00:48 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: 7mgB+Ylf+s1kE6m9odIbCNFgjwdnuv1OWrlEWwOY8wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:81:bf:99:11:13:85:e9:4a:12:84:1e:6b:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Apr 27 06:00:48 2025 GMT
Not After : Apr 28 06:00:48 2025 GMT
Subject: CN=00b9a7a55b8ac534486f13fada7326cc6ec1947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:43:79:eb:13:e7:f6:98:73:30:ea:2f:ce:
af:a2:56:35:2f:50:83:68:9d:3e:72:a6:17:c8:2f:
60:f1:c3:65:4b:f7:f3:19:5e:bc:1b:ba:47:99:ad:
be:b5:19:0a:38:58:d4:5d:5c:b9:fe:fd:e4:e5:02:
24:26:87:95:13:e5:27:48:c8:0a:60:03:2d:2f:df:
06:77:5c:c7:58:1b:a6:83:23:54:c3:32:54:4e:58:
70:00:9f:09:ee:6d:7e:d7:ea:c0:f3:7c:36:ca:2c:
86:4c:41:b1:5d:63:a3:58:6a:80:e0:4d:c0:f7:69:
8b:59:83:36:f2:ba:35:1e:47:9a:e7:6e:e3:8d:0f:
47:26:b2:99:5f:81:75:5f:8a:c7:8f:6a:08:40:a0:
2b:9d:94:fa:ce:5e:3c:da:65:98:e1:0d:53:75:c9:
e3:74:88:3a:7a:81:be:2a:0c:c7:d7:29:5f:87:d9:
3a:e4:4d:50:ab:c0:08:cb:17:3d:77:b2:fc:be:5e:
0e:fa:fe:ed:71:f9:26:b6:34:48:10:9d:2b:ba:fa:
2f:42:ed:f4:82:38:bd:ec:41:51:2c:06:78:36:79:
5f:88:c7:14:1b:99:54:cb:3b:c3:57:92:68:ac:73:
a0:9c:ae:c6:a8:78:5a:be:ed:52:b2:00:8c:bd:ff:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B9:A7:A5:5B:8A:C5:34:48:6F:13:FA:DA:73:26:CC:6E:C1:94:7D
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:25:a0:c5:ea:1d:5e:fc:81:bf:17:e0:96:37:29:5f:07:
c3:7e:e6:d4:83:bc:f6:eb:21:d0:a4:e4:f6:3a:01:a8:40:1b:
24:c9:ad:3e:13:0f:cc:2f:fb:51:7c:b1:61:6c:c2:c2:cb:94:
04:08:59:da:4c:6a:f2:82:99:60:ab:66:90:d2:ae:a2:6d:71:
65:f8:00:02:13:9d:2a:08:85:44:9b:d5:59:97:21:02:80:26:
d3:63:4f:93:12:e2:06:d7:96:7f:20:88:4b:14:e3:01:3f:52:
29:04:84:19:57:2c:ee:da:f6:6f:67:63:d0:a0:e8:73:67:5b:
45:6b:9a:99:59:c6:c0:24:d7:55:19:e3:8b:df:b2:9e:37:c4:
7d:5a:b7:a7:12:5f:cb:fd:ba:d0:7a:bb:63:5c:bd:66:3b:cf:
63:98:64:98:10:19:22:88:ba:d5:fd:51:92:62:c8:6f:0c:bb:
01:b8:e9:35:49:ad:70:65:c3:7c:ff:c3:6a:bd:f8:78:25:12:
4d:a6:3d:3e:9b:64:32:54:db:7b:cc:66:62:10:b4:35:72:d7:
47:37:4b:3b:a1:14:2f:9a:57:14:c9:6a:9e:88:af:ec:0a:2a:
40:df:27:07:32:0b:45:f3:9c:6c:79:94:64:9f:b4:c5:2d:e4:
3b:d8:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:36:38 2025 by rpki-client