Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
File: g60oliGDPa6G_dpi5LmwningeKA.mft (raw, json)
Hash identifier: q9S2HcmfdeYfUv91AcbLb0GE28LMqP2m21BpaW9dykc=
Subject key identifier: 30:66:65:4A:95:9D:77:FD:FE:97:94:2B:62:70:FC:11:CE:E5:B3:F2
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 0199FC583673BDA1F23902D41A843BF2CD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
Manifest number: 0FFB
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (hash: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=)
2: g60oliGDPa6G_dpi5LmwningeKA.crl (hash: zfxNU+CGjrlm7LcWvv2a7raSojnUXfMqTIfq4jU7bJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:36:73:bd:a1:f2:39:02:d4:1a:84:3b:f2:cd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=3066654a959d77fdfe97942b6270fc11cee5b3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:b7:f0:22:a9:01:08:25:c2:db:32:af:16:
85:a7:0a:3e:a2:64:bf:a3:21:df:d5:51:86:16:75:
82:37:d5:f5:6d:fc:5e:9d:67:5e:dd:6e:27:14:ae:
0a:b0:3d:85:3c:c6:7f:b3:4d:84:a6:a3:72:0c:45:
ae:ca:e9:cd:46:16:52:7f:b6:32:e3:20:3e:f0:8e:
2b:c3:a5:33:72:a7:e0:41:48:75:7d:74:c6:59:43:
40:61:03:c6:10:f8:c1:4b:f3:5e:27:d0:3d:b5:d9:
b0:26:bd:4b:20:08:35:f6:52:91:82:7d:b4:2d:ef:
46:76:8d:db:a6:54:df:06:18:3b:5d:c9:83:11:a0:
f4:3c:15:a6:c9:4e:52:84:11:09:fe:81:03:a3:f3:
ff:35:4e:74:74:85:0e:8f:93:5e:6b:3d:46:b8:6d:
83:77:56:3d:2a:ff:bc:86:d9:2d:90:1d:61:a9:d4:
e0:dc:0a:ce:20:e4:d3:e9:fd:f8:28:d5:b1:ee:10:
b0:34:a3:2a:17:ed:a7:a6:5b:f0:5d:6e:52:6a:6b:
18:16:55:d0:93:a9:a4:ce:b2:76:ba:ae:34:13:cd:
5c:e4:7f:b6:fb:1e:af:49:a0:e5:a2:26:91:0b:42:
25:e5:4f:5e:2a:86:f2:91:34:c3:86:17:97:c4:28:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:65:4A:95:9D:77:FD:FE:97:94:2B:62:70:FC:11:CE:E5:B3:F2
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:16:0b:90:73:08:5b:d6:6f:5e:d0:a0:03:94:c6:6e:7e:ea:
7f:d1:d8:95:72:3d:42:b8:67:40:2f:8a:14:fb:d6:30:72:1b:
1d:58:d3:99:30:f9:b6:61:cd:a7:0a:d0:14:28:38:a6:f3:9a:
34:0c:7e:3e:a3:b3:5d:09:aa:df:6c:8c:d7:d1:3b:a3:b0:ee:
a4:7d:db:2e:99:d4:61:55:57:60:90:07:85:23:4a:20:ef:ee:
04:df:d2:fe:31:26:90:d1:f1:bf:68:d1:1e:5b:fc:a1:67:a2:
e5:6a:69:d6:09:a0:78:1b:cb:b3:74:44:21:32:fe:2d:08:ed:
6c:45:85:25:ae:a1:17:2b:02:c8:51:37:de:f1:ed:b6:0e:73:
08:8a:78:8b:2b:20:0d:88:8c:81:e9:d2:c1:89:78:05:18:be:
88:fb:1e:b1:33:fa:34:1a:25:89:b1:6a:b6:fe:5d:ca:03:4c:
2e:43:b4:d5:17:91:93:33:62:0f:a6:e3:a5:10:27:e7:48:b3:
c8:a8:52:31:1d:20:c9:ba:ce:99:dd:2c:9c:88:8b:a9:86:88:
37:2e:2c:83:de:9d:6d:db:51:59:02:cc:41:95:d2:29:2d:5e:
87:19:91:21:e0:5d:61:87:ab:30:32:ac:d7:d6:73:cd:67:86:
09:0f:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:32 2025 by rpki-client