Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: 8COKCNJcsESkNP+lZM7u7ezUui/od96WRcmZqfUw4SQ=
Subject key identifier: 30:EC:6A:20:EE:EA:22:69:AB:A5:EC:2E:14:DB:F1:13:4E:6D:45:B8
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019849D33F54C2784C09AAEDD349B7A0C970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0F1A
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: QQrO0s3XNrvNidhrIhVuCxbSUb+grzYn21S5A6MAbDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3f:54:c2:78:4c:09:aa:ed:d3:49:b7:a0:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=30ec6a20eeea2269aba5ec2e14dbf1134e6d45b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:24:bc:89:3a:f8:b8:6e:46:08:ae:a8:be:
d3:9f:c2:f0:5b:da:c4:2a:15:a1:e0:4c:de:b4:4e:
85:58:83:b0:72:e2:16:ab:0f:89:61:cf:93:38:d3:
a8:7e:57:6e:57:f8:92:3c:da:11:b8:06:f7:d2:e7:
14:34:f3:5a:89:46:94:db:16:81:69:32:c7:a5:57:
6a:4f:3f:13:03:02:bc:e5:9f:3a:9c:d6:91:41:d4:
e6:eb:68:26:60:58:23:4d:ec:79:76:98:7e:96:14:
ac:5b:19:4a:7d:8c:9e:22:a7:3c:e6:1c:4e:23:03:
d2:71:29:0d:7a:e8:01:ed:ec:dd:0f:d3:82:f9:ed:
47:3c:c8:d4:60:37:d4:a3:26:a9:ea:6f:aa:62:da:
ce:49:80:e7:f1:d0:dd:ec:64:0a:43:cc:5c:96:df:
b3:5d:c4:72:03:ed:7c:07:ad:8a:58:01:17:f3:fe:
8d:f2:be:99:82:eb:2b:54:23:94:4d:8c:2b:50:c5:
92:33:71:41:32:7c:fa:0c:2f:55:2b:06:0e:ee:2d:
e1:d0:78:b0:fa:c2:6c:b1:31:c1:ec:06:21:f3:7f:
ad:b4:c5:0b:74:f3:c9:a5:03:7d:c1:31:70:17:8f:
95:b6:b8:98:e7:32:a5:6a:c2:75:7a:38:ab:0d:41:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:6A:20:EE:EA:22:69:AB:A5:EC:2E:14:DB:F1:13:4E:6D:45:B8
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bd:15:38:bf:28:c1:a6:8a:32:f2:a2:80:ee:75:a0:65:99:
a5:ba:c2:8e:e8:a1:22:b3:71:3c:c4:83:2e:5f:fd:d0:13:7c:
eb:3c:03:62:30:b6:a2:08:dc:d2:7b:c3:05:ab:c0:56:47:78:
5b:c0:d4:5e:95:4c:34:a3:4b:f3:55:34:a1:9b:ad:2e:92:1a:
a7:1e:2f:aa:87:f4:15:81:c2:8c:17:d3:82:fb:7f:e6:87:96:
be:4c:5f:4b:a7:88:2b:bd:9b:d8:3c:36:8a:e8:6b:3e:e5:03:
78:ab:86:17:e5:bc:cc:4a:75:d8:c7:ff:1c:ae:8a:de:7e:04:
73:ca:f5:73:6f:56:77:ea:bb:94:95:14:1f:dd:61:c4:cd:ad:
e7:df:40:e7:66:53:c6:ec:c6:36:91:fc:b7:a7:e1:cf:52:cf:
b3:44:c0:36:7f:14:b6:6a:b5:6d:5a:58:69:cb:e6:db:82:49:
7c:67:78:fe:f4:46:0d:fe:38:18:49:1c:b2:2a:16:e4:c9:48:
d9:e1:4d:19:ca:1d:ff:0b:d7:3e:c0:76:3a:22:4b:63:fb:34:
72:7c:cb:9d:7e:a2:a7:26:37:28:4c:6f:fe:4d:df:cc:f6:a7:
e4:a5:0f:d9:53:9b:4e:d6:83:9d:b7:40:13:2a:c2:05:dd:b7:
cf:85:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:34 2025 by rpki-client