Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: zrNVDBahJwibGLn8FE4qhQMAC9U/0sDLwRgA0Reny9E=
Subject key identifier: 23:B0:0E:3C:6E:10:08:23:51:3F:AD:02:51:E6:4E:B5:32:93:4F:55
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 019A71B832C2542018F0C4ABB3C8A480722B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 150E
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: uO2jmIatAo5yMWDdiP2oJBn/J1tnfo3wnuMDt9GCLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:32:c2:54:20:18:f0:c4:ab:b3:c8:a4:80:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=23b00e3c6e100823513fad0251e64eb532934f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:1f:d0:c9:bc:14:d5:3f:b2:79:a7:ed:bc:
5b:f3:47:f1:14:66:57:50:bf:5c:e2:fc:d1:18:44:
d9:92:20:52:0a:c6:c2:78:a2:42:1a:5e:e3:62:cf:
54:d7:37:24:f0:77:04:f8:e3:89:32:12:61:f8:26:
14:de:fa:5b:d9:76:0e:6b:4e:fa:6d:bd:49:39:e6:
0f:48:98:56:4b:01:f4:8c:92:ad:c8:52:66:2e:aa:
2c:30:f8:c0:70:51:e5:83:92:39:54:e4:8d:d6:3c:
2a:83:58:df:be:ce:97:7c:29:c1:a8:ce:af:fa:ea:
56:df:88:e5:d4:26:a1:a4:70:0d:36:cb:3f:e2:f5:
3f:82:90:6e:aa:28:9a:e4:d0:ee:d5:56:69:7d:11:
7d:ba:4f:72:88:94:c9:1f:8c:83:7f:ba:1e:e0:5c:
80:16:8e:8e:a5:aa:57:88:8f:e1:f3:af:66:7d:17:
2b:d6:3d:32:17:51:d0:d2:b5:90:02:36:f7:93:7f:
0b:93:b1:28:2b:ca:13:74:18:ad:cd:4e:95:1c:42:
d8:2e:e6:aa:97:65:30:b3:e6:c1:6c:99:6b:20:a7:
e2:22:b3:87:4c:fe:bc:dd:86:e6:da:0d:09:44:98:
1f:e5:10:44:cd:6b:da:c6:cc:4e:99:4a:65:90:48:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:0E:3C:6E:10:08:23:51:3F:AD:02:51:E6:4E:B5:32:93:4F:55
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5b:64:56:55:57:30:ab:f6:17:d6:81:c8:03:a2:8c:5d:0f:
7b:9a:6c:4b:51:5d:2c:d1:74:d3:a7:bf:41:c4:f3:00:bf:66:
8d:cf:17:00:3e:d2:1d:4a:2e:3d:66:ff:23:78:28:95:94:20:
64:21:0d:ba:94:7f:88:df:08:31:de:ed:e1:43:52:06:06:b9:
de:93:40:a6:c5:ae:c6:99:8b:83:6c:66:e9:79:5e:54:0f:47:
dd:2c:03:e7:a3:2c:f7:6a:da:0f:2f:64:b6:bb:ab:67:4c:a5:
df:3b:fc:2b:8e:a5:6c:d3:08:04:49:74:28:9e:43:f4:75:ba:
dc:3c:ea:75:fe:85:fa:54:f7:1b:01:12:c4:78:4b:bd:81:5e:
51:15:5c:bf:41:74:7c:09:2a:a9:98:ea:38:17:50:23:b2:09:
7b:09:fe:d0:dd:b3:22:73:e8:8b:b5:47:75:f1:b8:cf:21:7f:
90:a9:f7:25:f8:56:f0:60:fe:d2:43:20:11:63:c0:8c:95:31:
ae:7d:86:be:11:ed:52:9a:9c:4f:d2:f0:e2:70:58:ba:f3:73:
e9:ad:db:b5:df:46:3d:d7:67:92:06:eb:03:6e:11:2f:6c:c1:
6c:23:48:fa:d1:c9:f6:d7:2a:1c:f5:b3:dd:2d:2f:67:b4:fb:
a3:c0:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client