Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: DwYgPm2OEOCZhO2xYVrpHk6NFHs2HKIe9rBetKNCi/o=
Subject key identifier: 4C:74:A5:F8:FC:9E:25:26:8F:E0:BD:12:37:46:3A:AB:C0:D9:BB:B5
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 01965123D73C6E68C8A1ABF50C659A063054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 12EB
Signing time: Sun 20 Apr 2025 03:00:25 +0000
Manifest this update: Sun 20 Apr 2025 03:00:25 +0000
Manifest next update: Mon 21 Apr 2025 03:00:25 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: 0Dqiz71rWL4kPKKOcq/nDoNQ4rEmW5jyrnOeBkCJ0uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:d7:3c:6e:68:c8:a1:ab:f5:0c:65:9a:06:30:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Apr 20 03:00:25 2025 GMT
Not After : Apr 21 03:00:25 2025 GMT
Subject: CN=4c74a5f8fc9e25268fe0bd1237463aabc0d9bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:ac:8a:b5:7f:c2:23:12:9e:cb:91:65:a2:
24:b9:92:8a:7b:da:37:54:cf:28:3e:45:60:31:78:
a7:b7:2a:91:7b:49:c5:d0:be:41:ac:7a:b6:41:6e:
7b:51:1f:d3:ee:cb:6f:db:fc:9d:8b:a0:57:50:5a:
e4:20:ed:73:df:e5:e5:58:5e:64:87:88:3e:c7:9e:
e1:78:01:75:30:70:3c:da:27:ae:7a:c4:bf:b1:d9:
23:04:57:4c:19:96:65:f1:08:b7:5b:2f:87:9e:a1:
c4:54:7f:34:5b:38:0f:1d:76:63:79:fa:49:3f:0d:
e1:47:df:96:99:73:85:82:2f:63:36:36:4b:d3:2d:
9e:e2:a0:7f:f8:d7:4b:1f:9b:cc:a5:9f:ba:cb:38:
f9:84:49:98:c6:bd:43:12:f7:db:e5:66:f7:bf:e8:
3f:02:a2:cd:94:1e:54:44:fa:93:17:05:ca:72:34:
79:7b:8d:90:0b:32:a9:8b:91:05:8a:c1:45:11:77:
04:24:ea:d3:c5:ef:59:96:0a:d6:b3:82:ad:92:a2:
38:33:b6:62:22:2b:7e:a5:44:6e:c0:86:86:64:e8:
b7:14:9b:ee:fc:f2:9e:c6:bc:9e:d0:b9:d4:b4:96:
98:c3:60:95:db:62:5a:94:5e:3f:71:bb:3b:02:06:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:A5:F8:FC:9E:25:26:8F:E0:BD:12:37:46:3A:AB:C0:D9:BB:B5
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:97:88:00:3d:99:4d:2b:31:da:49:06:1c:55:e6:8e:b5:
e4:b6:8c:2b:ee:83:56:ea:71:1a:e7:de:89:db:84:34:47:09:
df:3e:f4:24:27:a1:19:67:c0:30:47:b4:dd:ab:6d:84:0f:b4:
6f:8b:3e:06:5a:90:91:61:df:7e:cd:f8:51:8f:14:01:d5:1e:
91:d6:aa:b9:1d:75:2d:77:0d:14:c7:c9:3b:70:cd:0c:37:fb:
24:a2:e9:1a:58:35:6f:a4:07:7d:7d:56:94:e8:8d:7b:e1:d0:
1c:92:6a:ca:a9:48:93:40:d0:a7:e6:6e:51:23:09:9b:a2:4d:
01:b6:56:72:33:1a:d3:c1:3b:ba:a9:1d:98:ff:7e:cf:d0:7a:
ba:49:7f:b3:7a:7d:06:cc:dc:ae:8c:f2:ba:5a:da:d5:ec:e9:
df:5d:c3:20:c9:e1:36:7f:c2:f4:0a:d6:a1:ac:e4:33:7c:cb:
9a:ab:76:25:79:4e:64:57:bb:df:5f:e9:7b:b6:f2:e2:c0:a4:
bd:b6:85:07:55:79:7d:ed:ba:f1:ac:76:e2:6e:b7:6c:44:b5:
4d:01:0c:3d:d6:71:e3:d3:f6:64:5d:34:01:80:8a:f9:aa:29:
0c:29:1a:ea:c9:97:6e:91:37:d6:01:e7:59:a0:51:55:2d:50:
40:1d:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:20 2025 by rpki-client