Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: f6R6Mjex4l5/UvHs5O7tZVuPyyKT/r18EBHMnl7McfQ=
Subject key identifier: 16:86:5D:A8:99:14:D3:AF:6C:1E:26:CE:D1:CE:99:07:77:7A:32:FF
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019A7225C951F9F1D6F0EC3B777BCBBDABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 1038
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: 2cIl9whTKHmGteNTdh97TGiUfkEo/eSKbA7BVfmHUcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c9:51:f9:f1:d6:f0:ec:3b:77:7b:cb:bd:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=16865da89914d3af6c1e26ced1ce9907777a32ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:2f:dd:cf:81:7c:06:c2:29:33:a1:64:92:
a3:0a:8f:71:b1:d4:b2:49:19:4b:f9:a0:09:c6:6d:
3b:82:b5:f5:6e:85:47:61:4e:6e:2c:6a:e8:6f:b0:
00:b6:71:4a:65:7d:9c:5e:25:03:16:4b:17:9f:17:
8f:ca:84:7d:c8:df:f5:11:5e:46:5d:ac:33:1e:39:
44:94:6c:70:a3:6c:43:b7:c4:74:c4:99:d9:23:9f:
6a:ff:e7:ec:94:80:40:d1:9b:d1:bf:5c:58:c2:32:
36:d8:13:24:4a:03:60:a1:2c:8c:12:9a:2b:02:b4:
d9:47:d3:e0:09:54:76:12:b4:c8:7c:b2:a5:38:bd:
ac:dc:4a:97:e7:b7:42:db:a0:c6:26:ad:ac:63:0f:
bd:a3:d0:78:a1:b8:99:0d:cd:03:15:6a:0b:4d:2e:
7b:51:c0:5d:6b:e6:06:12:3b:e1:7a:85:53:88:e9:
b5:25:5b:b2:3b:c6:a6:a4:48:fe:dd:f1:e5:68:ad:
38:aa:ca:f6:34:d3:a7:76:7a:e4:78:4f:fe:cc:c9:
d8:45:6b:9d:e0:db:d1:b7:7f:f5:38:1a:a8:9d:21:
a8:7f:66:22:b1:ef:9d:c4:9e:8e:3a:73:b4:cb:fb:
e2:5a:e9:e6:2a:90:e2:fb:c5:cb:1d:e1:c2:53:3d:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:5D:A8:99:14:D3:AF:6C:1E:26:CE:D1:CE:99:07:77:7A:32:FF
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a7:6e:f0:eb:22:76:fa:68:53:90:83:ae:84:3e:14:a5:6b:
41:c0:1b:d2:8f:2d:a6:57:96:c4:ed:e3:ba:35:68:b3:e0:67:
97:6d:ba:9d:87:fe:c4:ce:fb:db:1a:5b:9d:9b:80:0a:df:ec:
ca:05:ba:b7:71:3f:f8:99:78:09:65:be:ae:8e:e1:46:fe:a0:
87:26:e2:36:09:68:af:8d:5e:8f:b4:6c:0e:c2:6f:86:b3:de:
72:95:6d:ae:46:24:fc:15:01:25:cc:19:14:53:31:37:73:70:
92:57:0b:3a:cd:41:2b:cd:d3:60:1d:6c:ee:6e:9b:48:45:2e:
04:77:9c:6b:5d:db:58:bc:85:88:7b:14:58:3c:0c:f1:50:7a:
17:5c:29:93:55:73:81:92:ee:b3:9d:9c:4a:ee:a5:88:6c:88:
fd:55:28:90:b0:49:4c:57:02:7f:c4:ad:e6:5c:8e:ea:4f:bd:
49:68:21:ee:71:fc:21:52:2c:4e:3a:51:f8:17:d6:1e:e2:b3:
56:42:96:fd:71:8f:50:d0:5c:5b:6a:84:9e:4e:8f:ab:67:8e:
40:0e:57:36:fd:f2:39:4a:74:79:97:10:03:8e:eb:ee:68:78:
e2:d9:ea:bd:73:fb:45:77:03:5b:cd:51:b7:da:e8:3e:1a:84:
26:29:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client