Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: k5VjU7PM9u8YZB+HOKCDPWZh38vkgYlc+23uFkiouO8=
Subject key identifier: 4F:56:44:FD:46:8A:7A:6D:25:96:49:A6:27:03:2A:92:0F:38:AA:C4
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 0198D5BC082226B3F88201185E2CAAFB3A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 05CC
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: CtRmcqnGa5B+qRJqxd/ADNeJlONfZpLKkne+50etCKs=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:08:22:26:b3:f8:82:01:18:5e:2c:aa:fb:3a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=4f5644fd468a7a6d259649a627032a920f38aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:03:5a:89:57:b8:78:82:39:46:ad:34:a1:
f2:46:49:83:12:43:0d:f7:7e:f1:b0:b6:44:12:9c:
6a:d4:70:88:f0:e2:b8:b0:35:ad:9f:9d:7e:9e:41:
2d:48:98:2b:35:ae:b0:a7:56:14:6f:ac:05:ea:7d:
84:09:f0:aa:4c:b0:29:0d:78:f4:6a:9b:26:b3:fc:
96:38:31:bc:a5:97:e5:18:d8:1d:2b:7e:e3:02:4a:
5b:e6:60:d4:de:c7:da:2f:21:2b:82:3a:1d:95:13:
31:b5:b3:01:6e:19:4c:1a:8c:2a:13:08:9d:a5:4c:
fa:bf:96:90:15:64:37:d4:75:fd:09:66:d4:a6:3c:
98:05:95:e0:b7:8e:70:9b:f6:f6:9d:3a:d7:21:a0:
71:98:92:ae:0f:b2:25:70:11:bf:f1:8f:98:f6:7e:
4d:91:06:16:82:1d:7e:41:bd:43:6b:45:d5:37:c5:
08:18:43:eb:51:df:1f:5b:ea:5d:40:66:fe:2e:f2:
83:77:a8:1b:10:e0:3e:61:73:97:41:b0:c4:9e:c2:
7a:a4:19:81:03:d0:2d:26:5d:00:9e:ae:e4:e3:7b:
b6:c7:3c:03:6e:bb:e0:50:ec:65:ad:ef:44:ea:9f:
e9:04:22:cd:c8:15:0b:7d:61:c6:64:f1:d9:51:57:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:56:44:FD:46:8A:7A:6D:25:96:49:A6:27:03:2A:92:0F:38:AA:C4
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:5c:e3:9a:f6:27:63:5d:dc:34:70:34:4b:cd:8d:06:15:
20:55:7d:27:49:95:fe:fc:15:12:d3:75:65:6a:9f:43:7e:5d:
c0:42:1c:44:62:4a:d0:99:98:85:7f:c7:66:65:66:72:1c:dd:
15:4e:d3:a4:5e:c6:41:84:81:58:c7:98:8b:5b:8c:2f:86:d9:
7a:83:93:d7:9a:0d:33:6d:8f:1d:20:3c:d0:2d:87:6b:48:20:
16:1d:f3:95:d0:67:9a:a0:d1:9f:61:d1:21:37:00:95:c7:cf:
0d:3d:1b:b5:98:9a:c5:bb:8f:ac:2e:45:27:42:69:7f:dc:9d:
ec:36:3e:16:31:52:75:78:92:3d:e7:8c:4f:5a:9d:2f:e0:be:
d5:a0:7e:3b:c0:06:76:b8:d1:50:53:e3:78:9c:a8:04:ff:cf:
0c:ce:03:ec:08:d0:e0:ea:bc:f5:d8:88:ce:60:16:e2:f2:7d:
60:e9:a0:b9:ba:09:4a:e9:f4:b6:56:5a:ac:3f:1e:59:71:00:
dc:af:6c:e9:60:59:ec:0b:3a:fa:7f:8c:53:9d:83:eb:47:04:
30:a4:76:cd:25:7e:a6:32:b1:97:f0:e4:e7:8a:8c:1a:ad:11:
74:10:84:58:48:54:ac:07:23:f5:87:a0:5c:9b:eb:fc:a0:bf:
21:73:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:18 2025 by rpki-client