Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: 7L2hGV8TaY/wRItI/xUJ2dIWREh4Tua2qaa8oneK7s4=
Subject key identifier: 0D:69:94:42:C5:FF:E0:DB:C1:0F:FF:34:63:ED:DB:56:2B:50:B7:20
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 01964FDA5C800774A35FAA3ACAE51F9D1DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0E14
Signing time: Sat 19 Apr 2025 21:00:32 +0000
Manifest this update: Sat 19 Apr 2025 21:00:32 +0000
Manifest next update: Sun 20 Apr 2025 21:00:32 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: l9c2s6CcJ1WaAUrPzahWOVBNwyzmeae2iGp5PZsOjFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:5c:80:07:74:a3:5f:aa:3a:ca:e5:1f:9d:1d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Apr 19 21:00:32 2025 GMT
Not After : Apr 20 21:00:32 2025 GMT
Subject: CN=0d699442c5ffe0dbc10fff3463eddb562b50b720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:6e:d8:3a:55:d4:d6:8f:8c:3c:40:96:1d:
dc:b2:6c:fb:b9:70:2f:71:66:c6:5c:10:30:3c:31:
88:98:3b:71:73:bd:b0:06:41:17:b3:13:3c:90:f5:
c9:91:40:48:f9:14:19:4c:d9:af:d8:fd:93:26:2f:
22:8b:ae:32:2c:3f:82:60:a9:0c:6e:74:29:47:3c:
ee:e6:aa:92:8b:e3:52:31:74:ed:26:2d:f2:ad:88:
d3:46:ed:7d:15:3d:e6:59:88:c8:3b:95:8e:df:50:
fb:70:3f:75:45:51:fc:db:d6:1e:a3:c6:c7:59:54:
d0:ee:b8:3d:dd:e2:72:57:0e:7e:b9:30:6d:de:da:
51:52:cc:c2:69:3e:30:37:88:81:e2:61:0a:64:a0:
e0:93:4f:83:ea:72:f5:7c:92:18:85:89:52:7f:dc:
a5:a8:8c:eb:a5:31:6b:90:05:70:5e:7a:f0:63:a3:
d0:0c:ae:b1:47:68:9f:c1:cc:6f:91:21:3b:79:60:
f6:3b:90:13:86:de:40:cb:42:68:e7:d4:79:ca:58:
ff:e2:63:b0:c0:79:97:5a:9a:93:ba:53:38:c7:78:
3d:86:53:9b:aa:99:60:14:34:89:d6:27:ef:77:f6:
7d:75:f7:c1:db:0b:ba:cd:d0:6e:2f:21:5e:20:05:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:94:42:C5:FF:E0:DB:C1:0F:FF:34:63:ED:DB:56:2B:50:B7:20
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:8d:fa:0f:4c:22:6e:a2:89:ba:ba:4d:59:58:28:d0:23:
24:6a:f2:e3:e0:11:14:94:c8:ea:a6:ee:e5:cd:68:be:3a:ef:
7a:9a:6e:28:af:7c:b5:89:f0:12:75:46:61:ba:e0:b7:41:15:
0b:24:4d:93:2f:9f:60:9e:18:41:b0:53:e0:a8:03:7e:81:10:
2b:46:6c:3d:91:92:89:ab:20:2e:dc:3e:5a:08:19:1e:f6:04:
5d:b3:f1:fd:e9:e1:d6:52:e6:ee:3b:02:72:20:de:73:9f:fd:
0b:13:7d:d5:82:c1:23:6a:4f:6c:81:3d:6d:17:45:9a:42:fd:
56:f7:6f:ac:50:d7:f1:fe:48:82:52:0a:18:8a:54:f3:c2:e3:
a0:d7:06:2c:ce:be:8a:77:0b:75:cb:4a:d9:ee:2f:77:6b:19:
ed:a9:04:d8:f3:f5:5a:6f:01:47:22:a2:60:f2:e3:e3:35:62:
eb:2b:df:81:44:13:2c:47:53:b0:20:e1:66:d7:a7:8a:e9:74:
db:c4:ff:08:95:d6:5a:ad:db:ce:6b:24:82:66:7f:59:7e:da:
ed:24:7f:4b:14:81:34:99:7d:96:96:19:e2:6c:3d:d8:5f:c5:
74:80:4d:f0:5e:50:54:79:dc:f7:f6:08:38:9f:44:e4:ff:1c:
ab:aa:e7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:30 2025 by rpki-client