Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: Y217yi9opSipwoLrEz2YKSS/0LWG8CTiV0yFCao5XCo=
Subject key identifier: 41:38:99:77:E5:EA:B7:5B:D6:55:BE:9B:8F:7D:A6:01:10:A6:C2:FB
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019A4F61F34BE6EDF70EA3283614486B3DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 1026
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: TJxCfFhbiqGrt3Sp7cwh0DEYFVDDi3pc9f+YrSb1riI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f3:4b:e6:ed:f7:0e:a3:28:36:14:48:6b:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=41389977e5eab75bd655be9b8f7da60110a6c2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:4e:35:b9:49:81:54:02:86:d2:f7:19:7e:
4f:8e:79:27:49:96:a2:34:63:91:b5:57:e0:52:fa:
0c:b2:85:86:69:c5:93:96:de:2c:3e:f6:25:b7:c5:
26:5c:a3:63:22:ce:fa:30:98:96:da:ba:de:87:ed:
f9:c1:b8:53:01:01:87:d7:3a:84:85:11:73:fd:2c:
a2:21:9e:97:69:ba:6a:a0:83:1d:6b:00:de:e9:ad:
bb:6c:74:1d:fc:0b:9f:71:f3:bd:42:56:51:8c:08:
b8:cb:19:d8:b9:0c:0c:5c:3c:d1:ae:71:43:9a:47:
24:8a:cf:68:30:68:b4:72:40:65:7b:4e:78:b9:1b:
4b:cf:95:fc:c4:6f:60:e5:a1:f9:db:e3:94:fc:98:
10:2c:20:66:2c:38:10:66:5a:52:31:8b:87:2e:a8:
40:48:08:27:eb:9c:58:50:fe:e0:58:ca:13:30:54:
4c:6c:4c:04:b5:f0:5d:27:f3:a5:fa:6c:ac:71:b0:
6e:bb:68:27:1f:6c:41:7a:d6:c9:87:51:11:fc:04:
db:29:36:bf:e1:39:ae:45:13:b9:ec:0a:b9:df:1d:
76:29:c0:d0:cf:54:2d:04:d2:69:06:2d:da:e0:0b:
0f:cb:a6:57:63:f1:76:5a:6a:df:11:63:a2:cb:1e:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:99:77:E5:EA:B7:5B:D6:55:BE:9B:8F:7D:A6:01:10:A6:C2:FB
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e7:e2:e2:c4:3f:a9:08:cf:b3:72:42:80:02:fc:c5:8b:b1:
b2:c6:1b:03:0b:2f:d7:cf:ad:f9:a0:d2:42:4e:ae:45:11:82:
cd:62:8d:6a:fc:2d:81:54:62:af:66:22:1e:8e:14:53:ad:04:
59:cc:4e:ad:84:b8:e7:1a:c8:0f:ae:aa:47:42:fa:77:1a:75:
06:ad:b2:80:17:86:9e:c1:a9:36:8a:4f:98:fd:8b:99:d1:cc:
61:73:df:6c:97:3c:d1:db:be:f7:1c:7b:0a:49:47:98:fb:3e:
9c:83:88:21:5b:3d:57:dc:9e:a9:89:02:39:8f:6d:8d:a0:d0:
7c:d9:e4:05:6d:33:54:d1:e8:8c:a1:af:18:74:f4:c4:be:35:
df:14:67:10:f2:64:71:b9:3b:2b:c2:32:85:88:98:e3:b6:f6:
c2:5c:72:af:32:4c:12:f9:ee:d3:6d:dc:b6:41:9c:4a:40:1c:
c2:60:26:6c:04:fa:ac:e2:bb:c8:53:8a:b2:05:63:1c:bd:be:
ab:2d:d6:87:aa:c8:a0:4f:e4:28:b9:ef:e4:ad:ed:c9:b2:95:
09:32:02:d2:25:bc:14:17:80:d1:f3:a8:b3:9f:75:d6:2b:f1:
1e:f3:03:87:b5:a0:57:6c:98:2c:4f:ad:e8:0a:d8:1b:4c:bc:
57:dc:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:22:00 2025 by rpki-client