Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: MNCer1pZrNLPDXYYgka7kJxXD+pTeQWpIihWuCwwajc=
Subject key identifier: 43:18:B0:DB:C7:8B:AB:2A:4B:11:57:E6:02:DE:79:25:38:9C:2E:F6
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 0198745013831177451B1BFE566CB18FA2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0F30
Signing time: Mon 04 Aug 2025 09:01:01 +0000
Manifest this update: Mon 04 Aug 2025 09:01:01 +0000
Manifest next update: Tue 05 Aug 2025 09:01:01 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: kfjbAPikkZ/xKzRArkKL34YGnx2FfpT3Q66czsfnGGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:13:83:11:77:45:1b:1b:fe:56:6c:b1:8f:a2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Aug 4 09:01:01 2025 GMT
Not After : Aug 5 09:01:01 2025 GMT
Subject: CN=4318b0dbc78bab2a4b1157e602de7925389c2ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:f7:d6:98:14:7e:a3:03:74:5e:df:e6:17:
25:1f:2b:64:4d:2b:73:cd:27:f7:77:59:6d:c8:8f:
c4:13:45:1b:b5:73:4a:3a:d4:0f:2e:30:da:af:ab:
52:cc:db:b0:93:29:12:52:85:8c:e2:12:b2:ee:e3:
27:59:36:07:16:98:03:42:17:9b:ea:9b:bf:e7:48:
be:72:90:d5:5a:c0:fd:59:39:59:fc:ca:b2:7b:da:
1d:38:5d:c1:aa:16:e1:10:07:ad:b5:73:7e:b6:b6:
d0:82:c7:73:79:04:b7:b4:7d:e5:40:8c:5a:54:f5:
c7:3d:c9:d2:54:42:56:00:19:19:c8:a3:a0:1d:88:
a3:3f:98:9a:d7:6c:e0:85:a7:eb:8d:1e:07:5b:6c:
2f:d5:6c:f3:c7:23:a4:c0:08:0b:8a:0b:0d:d3:5f:
6d:e1:7d:dc:b1:ac:b0:01:60:7e:ad:7a:55:e0:4e:
8a:04:fa:c6:13:b1:0b:c7:1f:52:b4:eb:bf:d5:33:
d3:2b:b5:cf:6d:a2:8e:5e:e4:82:b9:32:5d:ec:18:
35:47:ad:10:4a:44:21:b7:e4:4b:58:0f:4d:ec:9c:
e3:6d:c8:79:9b:b1:02:ef:4d:a4:07:67:55:22:73:
d7:47:5e:2d:6b:06:0f:59:2d:8e:f5:11:05:18:75:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:B0:DB:C7:8B:AB:2A:4B:11:57:E6:02:DE:79:25:38:9C:2E:F6
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:08:31:17:67:f9:c9:3a:ed:2f:cd:66:1b:a6:b8:27:22:
13:06:52:cf:f2:2a:7e:ec:9d:d5:95:78:96:9b:53:3f:a4:2e:
13:5d:86:03:67:2c:b2:2f:03:5d:a5:b9:c9:57:34:6c:03:dc:
14:c8:a8:fc:36:53:01:c7:a2:a1:af:2d:b7:0a:f7:4f:bf:fa:
f0:37:99:9f:66:78:0c:39:c4:a0:57:b1:f0:3f:fd:a8:5c:38:
d1:7f:80:7f:07:21:4d:7f:bf:8c:7e:6a:89:db:cf:a4:fe:76:
4c:a0:e5:24:ff:0b:7f:f5:a3:21:e5:47:c4:ed:30:79:1d:87:
ae:00:47:95:aa:e1:dd:c8:c7:98:41:a7:5c:fb:69:fb:80:af:
54:2d:24:17:04:d1:8d:dd:cb:ff:31:46:26:82:c2:bc:1c:c8:
48:17:dc:78:c3:a7:2c:15:7a:1c:77:3f:83:12:88:93:79:a2:
78:df:26:ed:9a:ef:38:5b:26:bb:5f:8a:2e:38:04:e4:61:ae:
b4:9b:25:d8:ff:e3:92:ab:a8:e0:55:73:07:27:a6:b1:d7:94:
4a:8c:9c:52:f3:68:34:a9:46:88:84:8a:5d:42:98:d0:56:8f:
d2:14:0c:3b:e5:95:8e:97:ec:60:2d:f0:60:bd:6a:c0:8e:0b:
50:88:6e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:17 2025 by rpki-client