Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: sbL5JO8QmyOFk4vEMDDJHQ81YwU7erOhddBtJd7uGSE=
Subject key identifier: 78:CF:58:71:C0:87:D4:0E:92:50:F4:08:D5:52:59:11:86:FF:29:30
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 0196A4D339073296DEA21DE268F93A389030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0E40
Signing time: Tue 06 May 2025 09:00:28 +0000
Manifest this update: Tue 06 May 2025 09:00:28 +0000
Manifest next update: Wed 07 May 2025 09:00:28 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: LcJ11Yzpzho9BNU4fPEnS8CoHBMFuEtyfd+GYtDfH2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:39:07:32:96:de:a2:1d:e2:68:f9:3a:38:90:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: May 6 09:00:28 2025 GMT
Not After : May 7 09:00:28 2025 GMT
Subject: CN=78cf5871c087d40e9250f408d552591186ff2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:5b:1a:73:d8:e0:5d:b2:bd:83:b2:5c:61:
64:cd:db:f5:02:4f:0d:ba:e3:d9:84:1c:8d:d4:ef:
23:1f:fc:07:d0:cd:a6:dc:5f:d7:3b:a8:27:ef:ff:
ae:eb:c5:35:d9:d6:65:64:da:f6:a2:68:8a:a0:1f:
04:b6:09:32:c3:e1:37:69:ce:d4:52:3e:ab:70:1e:
b2:6a:b2:86:c6:9f:13:55:af:33:8b:12:05:84:e5:
c4:12:21:07:3c:e7:5c:b7:d2:15:a5:96:a3:d0:1e:
92:5c:a1:a0:d4:fc:2e:30:a3:b2:72:0a:6f:c8:44:
dc:c8:12:36:c0:20:fa:eb:cf:a7:93:71:6c:82:33:
fe:f9:c5:71:27:9a:16:7c:32:e2:55:90:77:f0:6f:
f1:81:ff:63:53:46:8d:5f:44:13:a9:48:bc:a9:89:
26:96:e5:a6:46:eb:db:bb:c8:45:1a:09:93:c3:78:
5c:be:ac:cb:06:e6:24:7f:c8:ca:18:1c:20:16:64:
96:52:cf:42:64:24:2c:37:c1:38:0d:16:3f:01:bd:
43:19:0f:2a:d2:cb:90:bf:dc:fc:5b:dc:b0:93:63:
a1:84:95:e6:0f:bf:e8:64:0f:af:c0:3d:19:60:2a:
f6:3c:28:09:b6:bb:d7:88:bc:98:69:11:2c:7f:03:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:58:71:C0:87:D4:0E:92:50:F4:08:D5:52:59:11:86:FF:29:30
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1a:2f:59:fc:dd:93:17:da:6c:04:f2:5c:6a:dc:b1:b0:7a:
fe:1d:c0:5f:fd:45:12:c4:a8:78:51:3a:b5:0d:cc:23:09:5a:
bb:6f:37:76:15:d4:de:34:23:b8:37:53:58:9a:83:3c:b4:63:
e9:3e:d6:6a:fb:02:dc:1e:43:46:fa:1c:65:b7:5d:1f:d6:4f:
b2:88:49:a2:23:24:12:1a:73:7f:5b:a9:ef:bb:8d:80:b6:e1:
87:c2:e0:4b:43:d4:ce:83:68:03:c0:3f:06:35:15:1f:55:ff:
54:94:00:34:e1:77:7a:ba:66:03:7c:96:58:43:c7:67:9d:18:
7f:b1:59:1b:7d:92:81:1c:a1:5d:d0:0f:3d:52:63:19:ea:e3:
9a:b8:01:67:4d:b3:af:99:18:8a:ce:09:e0:35:a2:de:17:82:
95:23:9f:6f:8c:0a:c6:28:17:82:23:19:91:90:f4:a6:47:31:
e6:a3:b8:92:78:d0:ff:a7:22:07:56:54:2b:85:ec:88:7a:df:
7a:f8:e4:e3:a2:61:03:79:0b:81:77:b5:f9:36:90:02:9d:9a:
d8:79:bf:cb:c6:88:92:73:b8:15:5b:2e:17:dc:63:f6:78:02:
a4:a4:50:66:55:11:a0:10:8e:d2:51:31:cc:c0:72:3e:16:9e:
7a:23:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:13:55 2025 by rpki-client