Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: fkT69CeAMWIbS23mzqgH9cDeQgL3VL6cU2gf/SYsjSM=
Subject key identifier: 3F:15:1F:56:77:CC:19:6E:87:DA:53:F3:D0:AC:CB:A9:1C:94:4D:98
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 01974E206124711EFC2599F711884C51B0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 136E
Signing time: Sun 08 Jun 2025 06:00:34 +0000
Manifest this update: Sun 08 Jun 2025 06:00:34 +0000
Manifest next update: Mon 09 Jun 2025 06:00:34 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: uXFIC1wG4R3NkpXt10YKpdVQ4i0PDKLkkmonQpaGGSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:61:24:71:1e:fc:25:99:f7:11:88:4c:51:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Jun 8 06:00:34 2025 GMT
Not After : Jun 9 06:00:34 2025 GMT
Subject: CN=3f151f5677cc196e87da53f3d0accba91c944d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:4b:ba:ee:b1:6c:a4:4a:6d:98:5c:b2:a3:
22:54:6f:6c:e4:a2:e0:ff:64:64:1b:90:3e:a5:f6:
41:17:f4:5a:ad:24:48:63:16:9d:c1:dc:e7:e8:74:
40:01:a1:d4:98:00:d1:02:96:94:f3:b5:72:07:b1:
31:22:d9:5a:c1:cf:00:7e:c6:4a:6b:f7:6b:0f:f6:
34:d2:ab:80:c7:ff:9f:c5:be:4a:f8:9f:37:eb:10:
c4:bd:64:52:e2:50:40:6e:1f:01:ad:fe:5e:6e:6a:
20:19:56:69:5a:e3:9e:fe:e4:5d:78:d3:c6:f7:78:
ac:0d:aa:bf:bc:77:f2:be:9f:7f:a5:2a:17:0c:30:
48:b3:4a:14:ca:88:1d:eb:d9:32:5b:a2:42:05:1a:
aa:c1:ca:3b:cc:e2:6c:66:2c:b2:33:4b:82:33:23:
26:40:a0:16:af:c8:1d:af:48:85:d1:c8:68:c7:ef:
43:50:2b:5f:fb:ac:d7:b1:07:d3:1a:9d:da:c7:df:
b7:aa:3b:59:0e:4b:ca:fe:5a:c0:48:3f:73:58:0a:
d1:2e:48:fa:80:c1:dc:04:da:52:17:df:3f:d9:d4:
b5:d2:1b:bc:c1:94:4f:5c:60:ef:b7:58:bd:0b:5a:
83:ab:3c:9f:36:74:af:01:aa:61:02:45:91:81:e0:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:1F:56:77:CC:19:6E:87:DA:53:F3:D0:AC:CB:A9:1C:94:4D:98
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:19:e5:66:92:ee:94:cd:82:c3:97:fd:71:55:ce:c0:6c:b5:
d2:97:24:6d:ab:7f:29:56:cb:5e:2b:b3:a1:a2:f4:55:4a:a9:
ec:09:1e:6c:d2:30:fe:35:07:73:53:10:49:77:69:1b:f3:40:
87:eb:3b:b4:a3:f4:18:22:84:64:bc:74:cf:e9:3a:65:95:68:
91:37:f7:66:f6:ac:9b:df:98:46:25:e3:6a:de:dc:70:90:e6:
a5:25:e0:a4:d3:4a:1a:d5:45:80:69:a6:dd:5a:39:b7:0f:21:
1b:56:72:57:5b:cb:07:80:fc:b8:81:64:c9:0b:d7:c4:cc:a9:
50:30:0d:90:3d:b7:b5:72:1f:70:39:58:31:a8:09:60:13:b8:
91:fe:92:e4:53:5f:32:fa:34:f6:e4:e3:d3:0c:1a:78:89:5a:
f8:09:0d:9b:60:85:9b:54:e0:59:77:d3:60:7b:fb:09:6b:e2:
2d:95:6c:66:ae:2e:2d:82:75:48:97:03:e2:26:c3:29:cd:da:
c3:0e:a4:ed:ab:8e:4d:78:48:03:2c:fc:16:83:91:e8:ca:51:
bf:0c:31:cc:30:22:76:13:43:24:d2:30:6e:d4:98:01:06:b1:
f6:45:9c:4f:6e:44:4b:a8:9b:1e:02:ab:59:92:18:ec:80:39:
09:27:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:20:29 2025 by rpki-client