
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: jOGjrMWKFTih4Is2TZDe5dlX+lKBBuh72g0TSuqddwk=
Subject key identifier: D4:12:A0:A4:42:33:D9:C8:1C:3A:CA:3F:B5:9E:67:C5:C6:D4:FC:EF
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019771880A2AF0BE29B02AB574A971544C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0EAA
Signing time: Sun 15 Jun 2025 03:00:30 +0000
Manifest this update: Sun 15 Jun 2025 03:00:30 +0000
Manifest next update: Mon 16 Jun 2025 03:00:30 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: a4EscC46ibtdQQI9A3a2/jbeOcvCWW57u8mGMndzGGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:0a:2a:f0:be:29:b0:2a:b5:74:a9:71:54:4c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jun 15 03:00:30 2025 GMT
Not After : Jun 16 03:00:30 2025 GMT
Subject: CN=d412a0a44233d9c81c3aca3fb59e67c5c6d4fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:3c:2b:83:7f:17:3a:d1:18:64:a6:47:81:
59:4e:d9:89:bc:61:3a:cc:6f:db:76:8a:b3:5d:83:
51:fc:05:ea:25:68:f1:1e:fe:c6:9b:a4:a1:25:e1:
3a:b5:d9:7b:8e:9a:23:da:c3:2f:07:0a:ea:c6:60:
e4:b4:08:11:e4:b2:7d:5a:71:f5:d7:21:f8:3d:a5:
84:52:a4:a8:15:08:b9:9d:f9:18:05:3b:a6:5d:e4:
54:6a:78:cf:51:dd:7f:15:aa:e1:f4:00:10:85:45:
07:0b:67:cb:57:54:a8:89:05:fa:56:33:db:a3:68:
31:82:f0:68:4c:d9:66:5e:bb:ec:01:cc:38:73:d6:
8d:7a:50:96:06:e7:69:38:d9:43:8d:0f:c0:a9:fe:
ab:01:ad:03:d5:74:9f:89:e3:7c:92:b7:05:cf:9b:
20:b9:8f:d0:a4:02:27:35:82:41:0a:1c:13:96:1d:
38:c4:ab:19:32:a1:85:76:bb:f0:63:f3:8f:d8:d7:
a9:0d:6d:39:89:00:7b:ca:e1:04:59:62:8f:75:be:
af:82:38:23:64:44:24:91:d5:9a:27:4f:cf:7d:ed:
e0:71:2e:ba:d2:db:63:11:cb:43:28:61:80:35:7a:
1c:5e:bb:03:39:98:6e:7c:40:75:08:15:31:70:ec:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:A0:A4:42:33:D9:C8:1C:3A:CA:3F:B5:9E:67:C5:C6:D4:FC:EF
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:5b:d9:88:6a:3d:c5:32:36:d9:0b:69:81:65:00:7a:21:
62:7a:03:24:f6:67:8d:59:e6:85:d0:9f:de:fc:8e:90:3f:b0:
1d:df:c9:81:e2:30:3c:c3:56:c4:bb:ea:c3:e5:9c:ac:cc:52:
4b:d1:66:ab:8b:27:4a:35:b5:be:60:27:6d:d0:01:40:45:c2:
20:63:b6:95:19:86:ea:cf:54:e3:47:ee:77:49:ae:a2:05:29:
bd:91:e2:1b:dd:f9:83:b3:3d:1d:bc:a7:4b:25:e7:c4:93:ab:
44:3b:fa:02:00:a3:75:45:01:6a:d5:7b:01:ba:a6:e8:84:4b:
4f:bb:05:f1:ba:67:f9:ae:c8:04:8e:90:90:c5:92:6f:01:cf:
46:c3:6b:87:32:6d:09:60:32:e7:63:16:56:c1:28:f2:aa:34:
01:03:85:3b:6a:32:cb:93:db:b7:c9:bf:28:97:47:ff:7b:f0:
32:13:29:8c:ae:48:17:d7:03:2b:cd:73:ad:02:ab:da:cd:b9:
c9:f0:90:7d:8e:bb:cf:06:a4:86:10:0e:07:dd:8e:f4:b3:f7:
29:cd:65:70:e6:c7:aa:8c:6e:48:8a:23:46:35:12:fb:01:9e:
9d:50:bc:c3:aa:24:26:ed:6e:d7:85:c7:64:68:8b:e9:c4:b9:
33:f6:92:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:29 2025 by rpki-client