Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: hQz6KivSmZtq3YWxu57Ec9auFWj0+6HGkGTCb14N69M=
Subject key identifier: 13:84:AE:B6:73:DB:77:80:0C:30:83:5F:4C:CF:52:EA:49:C4:87:C0
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 0197B5FBF1620CAB3D389C2E79FF14114438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 0537
Signing time: Sat 28 Jun 2025 10:01:16 +0000
Manifest this update: Sat 28 Jun 2025 10:01:16 +0000
Manifest next update: Sun 29 Jun 2025 10:01:16 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: 4sT/ATfRFp10nb05pIsEIE1GV9t7+JMzh4r45U7f4Uc=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f1:62:0c:ab:3d:38:9c:2e:79:ff:14:11:44:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Jun 28 10:01:16 2025 GMT
Not After : Jun 29 10:01:16 2025 GMT
Subject: CN=1384aeb673db77800c30835f4ccf52ea49c487c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:03:1b:c0:08:16:02:2c:f8:a8:1e:29:88:
b2:08:a3:b3:33:ee:66:d9:be:a4:e9:b2:01:13:0d:
96:75:44:e0:61:75:25:5a:d6:99:92:18:79:97:dd:
21:b5:3a:f4:ed:62:07:06:4c:bf:e9:6a:78:9b:26:
23:6c:1c:be:14:d8:c0:08:33:1b:84:20:a4:dc:1e:
7b:9f:82:6e:b1:6e:4a:9e:ec:87:02:6b:e5:82:06:
da:80:d1:4f:a9:d0:44:cc:f7:70:41:47:13:8c:c9:
33:77:52:0c:92:34:5c:6f:18:c9:ec:ea:49:02:82:
3a:fc:49:a6:39:ed:0b:24:49:9b:22:8d:80:20:10:
d5:13:64:d2:a2:35:5c:2f:1e:1f:40:70:d3:cb:af:
83:5f:2d:b0:3c:b1:bb:bf:e7:21:b8:da:16:56:06:
f7:7e:80:97:38:f6:e8:91:93:4d:48:81:17:6a:70:
81:ac:3b:e7:50:bb:1b:01:c9:55:82:7d:99:1a:9e:
98:68:f0:cc:51:37:eb:3d:e2:c2:fd:99:e6:27:66:
d1:f0:16:9a:d4:4d:4b:7b:0c:64:92:1e:76:48:f1:
50:ff:51:1b:b3:7d:d1:35:c8:15:f3:39:0f:61:07:
2e:8f:4b:7f:df:b2:3b:f7:ec:50:1e:c1:7a:80:e4:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:AE:B6:73:DB:77:80:0C:30:83:5F:4C:CF:52:EA:49:C4:87:C0
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:cb:f0:ca:6c:4d:9d:63:39:46:48:6d:e2:2f:e1:b8:34:
d9:50:57:fa:ab:fd:00:7c:61:28:41:df:80:69:bc:74:01:25:
12:46:df:a4:d1:85:d2:f4:61:4d:82:dc:f6:69:41:57:47:a6:
c0:3a:f9:09:ac:43:b3:c2:f2:37:ce:82:5b:4c:c4:0a:2d:e8:
c5:ce:4c:84:37:16:f1:63:fe:6a:b9:a3:ba:47:91:e0:10:cb:
30:80:1b:f7:dd:82:6f:80:8b:6e:e4:23:7a:eb:3b:76:74:bd:
55:4b:a6:89:8c:9c:e3:51:55:d1:50:a2:d1:28:e3:77:54:44:
2c:6b:73:8f:8c:79:96:1e:f8:5a:b4:b7:2d:3b:01:d3:b5:38:
d9:b2:7d:b8:52:76:61:fc:24:4b:56:d8:1b:58:a3:cc:c7:14:
d1:71:21:20:ec:bd:f7:8a:6e:9a:e0:70:01:fc:a4:e8:bd:c6:
a1:16:35:1a:35:d9:91:b6:8a:60:de:fe:ab:fc:40:70:8f:1e:
ff:b6:9a:b7:6b:a3:e9:d7:a2:cf:c3:d6:7b:1c:d7:83:f3:65:
7d:04:50:95:00:cc:cb:f8:ad:f8:02:9f:7a:06:02:6f:81:32:
d7:35:51:13:71:51:3b:77:c2:3c:6a:f8:89:40:d9:b5:03:47:
05:77:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:17 2025 by rpki-client