Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: e/OjQ/aP+4+/U11Eik4B95c0DsanglM24qPzFFDAXRg=
Subject key identifier: E2:B3:85:D6:32:2C:A9:E1:EF:70:C6:3A:12:AC:77:95:99:56:EB:75
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 019846D204C8483ECBF70779FA3C0BF36BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 0582
Signing time: Sat 26 Jul 2025 13:00:25 +0000
Manifest this update: Sat 26 Jul 2025 13:00:25 +0000
Manifest next update: Sun 27 Jul 2025 13:00:25 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: CcaVe99Zt1O5DeGTRMasTF8svi29yisaNz5JCxtnRsA=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:04:c8:48:3e:cb:f7:07:79:fa:3c:0b:f3:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Jul 26 13:00:25 2025 GMT
Not After : Jul 27 13:00:25 2025 GMT
Subject: CN=e2b385d6322ca9e1ef70c63a12ac77959956eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:d2:dc:af:e6:09:74:06:29:4f:60:bb:14:
25:30:36:69:68:f8:28:ae:97:18:8f:a1:1b:0b:ce:
42:a8:65:5c:78:98:6e:9f:53:e9:38:8e:bd:15:7d:
7a:c8:19:5f:e3:1b:02:f9:c2:3b:3c:29:4e:29:09:
34:4b:d0:fc:22:49:ce:43:92:61:44:29:e6:fd:ae:
ee:b5:e5:f7:8a:4a:80:2c:ac:ae:f3:76:31:d2:4e:
4a:84:a8:b8:22:5a:c2:89:37:f3:ee:76:26:d5:2e:
54:04:25:d9:05:ce:3a:a9:45:85:91:6c:ba:77:52:
37:1d:b9:5d:10:cb:80:9d:47:6f:ec:84:78:bc:e9:
5b:97:b4:c6:a1:bb:71:46:2b:af:80:8e:bf:40:ad:
6f:6f:01:92:88:bc:28:4e:1a:fc:9f:3e:27:e3:98:
3f:b9:0c:99:49:3a:0f:73:fc:ed:9c:94:0f:83:3c:
5c:e2:4f:2f:7d:25:5d:29:00:03:36:52:81:e2:ea:
d3:39:3e:27:0c:f8:8a:58:3f:c0:26:16:85:fc:bc:
93:c6:df:65:bd:5e:ac:5a:45:04:21:ec:92:e0:03:
c6:07:fc:07:d3:3d:cd:ac:a4:5e:1f:14:04:ff:58:
21:99:f5:e8:64:ce:30:45:4a:d0:0d:f2:d7:70:81:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B3:85:D6:32:2C:A9:E1:EF:70:C6:3A:12:AC:77:95:99:56:EB:75
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b9:1c:36:7b:58:c0:8d:c9:ec:4f:71:f1:24:d2:27:c9:2a:
98:04:68:2c:0e:f3:d5:71:5b:2f:75:42:3a:8b:05:7d:30:2b:
10:56:df:98:2f:b6:4b:08:f1:88:a7:12:c4:e8:98:7d:d4:91:
1a:38:54:49:dd:06:b0:6f:69:ec:08:2d:80:0d:be:f0:3f:02:
b3:f4:d6:2d:d9:cd:68:b0:99:78:ed:b3:17:da:a3:21:78:36:
3c:ac:b3:ad:7d:ea:6a:75:5c:f0:a7:05:6c:ab:5b:27:2e:fe:
04:b3:b3:63:38:55:f4:d9:29:ec:01:14:2f:e8:da:ec:ed:eb:
35:fa:28:44:01:fe:f8:85:84:f3:15:df:8f:dd:e0:1b:6f:51:
5b:bd:5c:70:4b:bf:f4:64:d2:12:bf:be:a0:60:c8:8f:d4:79:
57:ca:be:b0:d6:45:65:3a:37:02:d8:f0:58:81:08:d4:67:e8:
4e:4d:5e:6c:d3:5b:92:15:fd:4b:67:a1:57:20:01:e8:c2:70:
6d:c6:74:7a:bf:19:14:09:39:ad:aa:bf:50:88:c6:2e:1c:b0:
71:00:d5:a3:4c:f5:bb:54:04:5a:ff:5f:5b:31:ef:53:49:ff:
36:5d:ce:c3:4a:61:38:ac:3c:27:c5:a0:e9:d3:32:ec:46:68:
2b:ad:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:08 2025 by rpki-client