Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: qvFCRupYEtYBnI/nyzXtKnh36WAMsEFdyigk3e4Xymc=
Subject key identifier: 49:22:F6:F4:94:B2:BA:76:5D:F6:F0:FC:40:96:56:1B:C0:FA:5F:E6
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 0197B70EE82266D9ED397200AE906CE604B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0ECE
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: PX77t1Uuliw3fisoLy0IsL8WtustNA7mpWe32hFsSrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:22:66:d9:ed:39:72:00:ae:90:6c:e6:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=4922f6f494b2ba765df6f0fc4096561bc0fa5fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:74:b3:e0:07:5c:a6:85:c4:5a:12:0f:e3:
05:24:15:df:a9:3a:31:fe:d5:c6:ba:c1:96:98:07:
c4:bd:87:88:ea:be:cb:cf:2a:13:96:6a:9f:6f:d9:
07:2b:90:03:6d:ba:17:3b:7d:8f:fc:4b:09:09:ee:
3c:5c:79:e5:07:ec:7e:5e:f9:51:d4:9a:93:44:5b:
0d:95:82:04:e2:96:dc:11:a8:25:eb:81:4c:03:ef:
7d:81:73:5d:a1:5a:b7:76:1d:46:b3:51:48:fa:2b:
ae:17:fc:1e:ce:c0:b7:11:c6:07:54:32:f2:85:5a:
ef:9d:79:4a:68:6a:f8:de:1f:60:c3:e1:40:22:06:
4a:26:9d:ef:32:f2:7f:3c:61:50:d8:00:64:d5:fe:
b5:9b:8c:54:d3:b3:5b:bf:45:76:04:d6:51:91:52:
de:af:11:d9:64:96:24:c6:6f:23:b8:34:9a:9e:4b:
f6:9e:2b:3b:0a:76:0c:3c:ee:57:ba:3c:b6:40:60:
6a:1f:e1:5f:b2:c3:3d:0d:6d:97:3e:d5:fc:f1:e0:
00:44:8b:44:4e:d7:41:b4:fa:b6:c8:80:a1:5c:7a:
26:12:f1:19:51:68:87:3e:f2:df:2e:21:99:f2:57:
28:a8:a6:1d:84:8a:29:c0:5e:fb:86:2e:59:dd:7e:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:F6:F4:94:B2:BA:76:5D:F6:F0:FC:40:96:56:1B:C0:FA:5F:E6
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e3:9c:80:b3:c4:67:50:9d:6f:d0:8f:7a:26:56:cf:8a:93:
ab:e8:8e:fd:e8:8a:e5:c6:13:1a:c5:76:18:39:61:f9:18:57:
70:47:e9:a8:d9:46:d5:d9:e2:65:24:64:18:5e:0f:3c:84:96:
bf:52:ec:89:e7:56:21:67:af:4f:ba:e7:91:02:6c:b4:93:81:
8b:d5:06:c9:8f:06:94:a6:ed:66:9f:0e:b8:32:73:f4:89:f0:
1f:eb:35:d3:f4:18:e5:27:23:fe:21:50:8e:61:82:5c:21:98:
c2:dc:a4:f2:27:04:0f:0f:0f:42:9c:0d:4c:c9:3f:49:8f:b2:
0c:c6:28:c5:7e:28:01:2e:f0:64:57:a6:f7:53:3b:2d:33:a3:
bc:be:cc:01:38:03:d5:49:2c:f2:81:99:65:17:53:39:1e:f1:
d3:fb:ec:66:43:a6:64:a7:af:4e:dd:39:52:6c:46:4b:a3:0c:
02:46:a2:0c:32:b6:76:aa:d4:18:53:8e:1a:fc:a0:0e:d0:cd:
3e:56:1d:63:92:88:0d:a7:51:f8:ac:ee:42:a4:0e:90:71:3d:
5e:44:6c:95:5f:fe:51:d6:53:11:9a:13:64:dc:a4:3a:27:89:
3d:68:a6:98:76:5b:9c:50:9c:fd:9d:9c:66:c1:13:10:aa:81:
4c:0a:08:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DugiZtntOXIArpBs5gS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYWQyODk2MjE4MzNkYWU4NmZkZGE2MmU0YjliMDllMjll
MDc4YTAwHhcNMjUwNjI4MTUwMTM2WhcNMjUwNjI5MTUwMTM2WjAzMTEwLwYDVQQD
Eyg0OTIyZjZmNDk0YjJiYTc2NWRmNmYwZmM0MDk2NTYxYmMwZmE1ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZd0s+AHXKaFxFoSD+MFJBXfqTox
/tXGusGWmAfEvYeI6r7LzyoTlmqfb9kHK5ADbboXO32P/EsJCe48XHnlB+x+XvlR
1JqTRFsNlYIE4pbcEagl64FMA+99gXNdoVq3dh1Gs1FI+iuuF/wezsC3EcYHVDLy
hVrvnXlKaGr43h9gw+FAIgZKJp3vMvJ/PGFQ2ABk1f61m4xU07Nbv0V2BNZRkVLe
rxHZZJYkxm8juDSankv2nis7CnYMPO5Xujy2QGBqH+FfssM9DW2XPtX88eAARItE
TtdBtPq2yIChXHomEvEZUWiHPvLfLiGZ8lcoqKYdhIopwF77hi5Z3X7MYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEki9vSUsrp2Xfbw/ECWVhvA+l/mMB8GA1UdIwQY
MBaAFIOtKJYhgz2uhv3aYuS5sJ4p4HigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgt
MGFmNDIzMWRhNzlhLzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lMTg3MGYtOWNiNi00MzM5LWFhMzgtMGFmNDIzMWRhNzlh
LzEvZzYwb2xpR0RQYTZHX2RwaTVMbXduaW5nZUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOOcgLPE
Z1Cdb9CPeiZWz4qTq+iO/eiK5cYTGsV2GDlh+RhXcEfpqNlG1dniZSRkGF4PPISW
v1LsiedWIWevT7rnkQJstJOBi9UGyY8GlKbtZp8OuDJz9InwH+s10/QY5Scj/iFQ
jmGCXCGYwtyk8icEDw8PQpwNTMk/SY+yDMYoxX4oAS7wZFem91M7LTOjvL7MATgD
1Uks8oGZZRdTOR7x0/vsZkOmZKevTt05UmxGS6MMAkaiDDK2dqrUGFOOGvygDtDN
PlYdY5KIDadR+KzuQqQOkHE9XkRslV/+UdZTEZoTZNykOieJPWimmHZbnFCc/Z2c
ZsETEKqBTAoIjw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:20 2025 by rpki-client