Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: lGnbqZ0HglTLfEmLRElpm+fRlkLDeWvp3PwEs+AvKv8=
Subject key identifier: FF:C8:69:7E:01:12:90:1F:EF:35:C1:88:22:F7:33:F9:5D:BD:29:4B
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 019590061D1D6EDE70DB104B32852D328B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 1287
Signing time: Thu 13 Mar 2025 15:01:14 +0000
Manifest this update: Thu 13 Mar 2025 15:01:14 +0000
Manifest next update: Fri 14 Mar 2025 15:01:14 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: f+jHvnVqV2vlh6sy1ApD0yrrOqbdvDkDBgUKKI9TWcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:1d:1d:6e:de:70:db:10:4b:32:85:2d:32:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Mar 13 15:01:14 2025 GMT
Not After : Mar 14 15:01:14 2025 GMT
Subject: CN=ffc8697e0112901fef35c18822f733f95dbd294b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:fc:57:fd:4a:0d:b8:5c:00:77:b0:cb:b4:
73:81:cf:56:1a:37:a3:80:15:fc:f5:cf:06:9e:86:
88:21:85:d5:9e:da:ab:d2:83:e7:a6:66:5d:4d:aa:
e0:9a:3b:7e:9b:9e:6d:58:6a:cc:bc:ec:8b:11:71:
15:26:d9:ec:ce:bd:48:1c:36:00:ab:0e:dd:ec:88:
23:83:c0:13:ec:99:71:05:95:bb:2e:a1:59:bd:fa:
07:e5:4d:5a:5d:9f:b9:06:82:e0:1e:f0:f5:f3:b0:
db:08:a5:ba:80:79:d4:32:74:43:73:37:04:02:e9:
a8:de:e8:a6:e9:b1:95:bc:f4:9f:4c:34:23:f5:51:
9f:ee:7e:a8:2e:25:2f:27:d6:cc:7b:c1:66:50:00:
c2:2c:3d:4d:8f:d5:80:20:0a:68:71:71:c6:96:00:
98:ac:9a:e5:3e:85:af:9a:c2:9f:2a:fa:d8:27:6c:
72:4d:2f:82:fa:19:a3:48:23:0d:6e:2a:3c:a7:9b:
7e:a2:6d:cc:05:88:cb:bb:40:44:4c:9f:66:a0:8c:
28:ec:e6:46:7d:76:fa:27:96:51:26:0e:e6:77:e4:
87:95:13:b4:81:51:7c:d1:49:de:50:87:46:14:5a:
51:6c:5e:b4:db:fd:94:d2:4b:dc:88:96:4b:4b:5c:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:69:7E:01:12:90:1F:EF:35:C1:88:22:F7:33:F9:5D:BD:29:4B
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:a7:8a:c8:7c:3a:12:b9:f2:54:6f:34:d0:3e:6f:66:97:
a8:9d:0e:c9:38:60:71:61:9b:b4:9c:90:3e:bf:14:c5:bb:3a:
e7:f7:0f:bc:d3:6a:30:dd:dc:2b:87:84:db:e2:2b:a4:18:7b:
91:b7:c4:06:13:47:65:a8:1c:aa:89:21:6d:e5:17:8f:23:d9:
a8:32:47:b8:62:5b:28:6c:d3:1f:f9:39:89:6e:33:89:b0:13:
02:a7:d9:2c:95:dd:c4:c9:b9:0c:db:1e:d5:7e:7c:b8:a8:ab:
ff:10:37:bb:2f:dc:8b:6a:f3:15:17:87:d3:e4:40:c7:df:44:
2d:6a:c4:32:71:ea:44:5f:77:10:ff:4d:80:db:9c:29:86:aa:
b2:3d:42:2b:5a:05:ef:92:36:84:32:0a:5d:b5:7f:51:9b:47:
30:dc:2f:a6:c5:39:f4:f4:e8:71:19:ba:dc:64:e8:d4:b8:d0:
9e:00:c4:be:7b:87:66:61:de:82:c8:b2:3d:8d:70:2b:70:f4:
a3:4a:63:f0:62:94:94:5b:da:21:f4:bb:06:63:b6:40:95:97:
bb:4f:aa:e9:64:46:61:b3:0a:bf:a7:5d:61:bc:47:64:5f:71:
96:d3:b0:7c:10:b2:47:07:7d:7f:da:b5:20:a4:01:11:27:cf:
99:3b:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:18 2025 by rpki-client