Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: //x3q/7zTwSKtAjwjLMtr6szbxpljpg5qzwotFIm8YA=
Subject key identifier: DD:FF:3D:A9:F7:C3:1D:6F:9B:40:88:B0:EB:DC:D5:E0:48:6F:92:20
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019748FABAEA84594B1B7AB3CD68EE0FF35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0E95
Signing time: Sat 07 Jun 2025 06:01:20 +0000
Manifest this update: Sat 07 Jun 2025 06:01:20 +0000
Manifest next update: Sun 08 Jun 2025 06:01:20 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: yKnDVbVNRgorlUSqMGitm1qeCPG4xwhaGzCPvQJsD4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:ba:ea:84:59:4b:1b:7a:b3:cd:68:ee:0f:f3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jun 7 06:01:20 2025 GMT
Not After : Jun 8 06:01:20 2025 GMT
Subject: CN=ddff3da9f7c31d6f9b4088b0ebdcd5e0486f9220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:55:59:5d:87:34:e0:05:04:a6:a2:2d:91:
a9:bb:00:0a:df:f0:0c:7a:f5:d2:04:d3:e7:ec:02:
7e:8c:19:76:5d:c9:c1:93:db:f3:08:d3:bc:d8:b9:
02:90:8e:68:8f:16:21:4d:d3:8c:83:5e:cc:3d:99:
f4:c9:1e:c8:fc:5d:e7:5d:84:42:ed:aa:36:9c:48:
40:ab:6d:59:31:d0:24:8c:42:54:39:ee:df:3f:f9:
60:6c:33:5b:f1:71:ba:84:d9:c7:7f:ee:54:f6:1a:
12:3c:41:36:b6:a0:b4:7d:d1:c2:40:76:03:55:c3:
8c:dd:ce:89:b6:30:1d:c1:a9:ef:4c:03:51:1f:18:
e8:0c:9c:4e:87:79:ca:7b:6b:fe:1b:0c:a8:0c:9c:
11:51:cf:1e:e0:24:b5:26:97:27:90:8d:d8:3f:7c:
47:04:cc:f7:bc:ac:54:ea:bc:d3:c9:ac:a1:a9:f8:
59:ff:40:9a:77:db:7b:92:36:f0:d6:89:cc:7c:b8:
a4:5b:80:98:4b:62:e6:a0:01:5a:56:c1:6a:b5:0e:
c2:d9:f9:38:fe:ec:1e:fa:02:e9:53:ee:aa:ce:31:
9f:02:71:2c:be:77:08:77:05:02:08:7a:09:6f:bb:
24:35:02:37:34:f6:fa:25:cb:a8:89:b5:e8:6c:75:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:3D:A9:F7:C3:1D:6F:9B:40:88:B0:EB:DC:D5:E0:48:6F:92:20
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:94:dc:f4:09:69:21:50:a8:f4:2c:fb:b7:05:33:c8:93:4d:
2d:ec:be:20:fb:42:f9:22:6a:6d:16:e1:55:c4:a9:e3:a7:7c:
f1:4a:16:aa:3a:0e:d5:d4:4a:b0:d9:c1:be:0f:d1:c6:8b:74:
18:a5:15:96:30:3f:5e:20:93:ae:cc:f9:cc:6d:08:78:2f:23:
60:e9:1b:19:b1:35:bf:f0:0e:d1:d7:3d:a1:33:38:16:77:0e:
8f:b2:1e:54:0a:dd:11:e8:24:dd:0d:18:52:27:e2:0c:e0:d1:
2c:11:ba:6e:f3:8a:0b:93:8c:51:f7:4b:cc:8e:ca:c1:49:3c:
98:19:b1:8c:1b:3d:c1:8f:8c:10:49:cf:38:37:2f:20:4a:ad:
66:eb:13:d7:6a:ee:a6:03:14:a7:c6:0d:c8:46:f6:6d:79:f7:
2a:cf:11:05:02:f5:11:af:e8:ba:b6:01:94:26:ed:88:ef:16:
36:51:eb:81:29:34:26:32:8b:22:08:da:a4:92:71:49:53:1f:
94:90:35:72:b9:88:90:4c:f7:cf:86:34:10:0a:a3:fc:cd:22:
89:99:f9:89:5d:31:62:b8:22:84:8d:0b:8b:a6:65:0b:8c:9d:
78:17:e1:9b:93:75:d4:e8:2a:78:80:c4:05:6c:34:e8:20:de:
e2:61:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:48 2025 by rpki-client