Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: 51bkqTQ+bJW9DbkLNVDZyvpLc92NRCgw9krAN9+OndI=
Subject key identifier: 83:67:81:AD:1C:EF:E0:75:58:B8:4B:75:36:C7:4B:F1:95:B2:24:DD
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 019A71133C48E001B12D352FE7DB79D4DC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 06A1
Signing time: Tue 11 Nov 2025 04:01:17 +0000
Manifest this update: Tue 11 Nov 2025 04:01:17 +0000
Manifest next update: Wed 12 Nov 2025 04:01:17 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: RKfoIgr0vpHWWVMrzAUO/Be1nbFR4P9k+coX6Fzp+mM=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3c:48:e0:01:b1:2d:35:2f:e7:db:79:d4:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Nov 11 04:01:17 2025 GMT
Not After : Nov 12 04:01:17 2025 GMT
Subject: CN=836781ad1cefe07558b84b7536c74bf195b224dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:ae:27:e3:d4:a5:bf:0c:06:07:ca:9b:29:
ea:5f:54:a7:03:5a:4d:03:cf:ba:27:0f:9c:73:bc:
0c:5d:76:52:bd:f8:53:75:a8:66:8e:90:e8:bc:5e:
20:9b:05:f5:f2:90:f8:be:57:ad:29:1e:22:c7:61:
a1:26:77:da:59:35:24:fa:b0:58:b5:15:6b:2f:6e:
f4:19:fb:f9:20:df:29:e2:5e:45:16:fb:03:3d:7f:
59:1d:5d:b4:77:5c:22:8b:14:81:5a:15:c7:1f:63:
36:15:6b:95:93:28:48:56:c3:24:c0:18:f0:17:7c:
e2:80:49:18:e4:fe:74:37:67:f5:cc:ff:92:f0:52:
c3:aa:49:78:d3:46:c7:65:f3:21:db:85:68:b2:37:
d8:78:8f:f4:61:56:79:fb:f9:5b:23:51:78:f7:53:
8c:8b:c0:46:63:91:99:6a:9b:73:7c:af:d1:03:79:
37:f6:71:3f:38:8b:da:a6:97:9a:33:1d:6b:75:f2:
bd:a3:3a:00:68:04:b2:74:ca:59:3e:11:6e:67:d5:
a1:27:cb:fb:55:e3:92:46:4c:f5:8c:cb:23:11:d4:
ee:44:c8:f4:2c:96:b5:82:3e:c7:2b:de:41:6b:fc:
32:8d:71:a5:e8:36:91:9d:2e:36:f4:b9:42:69:c4:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:67:81:AD:1C:EF:E0:75:58:B8:4B:75:36:C7:4B:F1:95:B2:24:DD
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:26:1b:ca:83:f4:9f:bf:91:b6:1b:d3:39:10:da:6a:d3:d2:
ef:64:85:08:73:67:ea:a6:87:08:d7:b2:4e:00:af:4c:13:9e:
9d:f0:17:22:17:a7:66:02:cf:da:bf:67:05:10:b2:6c:4e:ec:
be:db:b7:61:16:f5:90:83:5a:b2:90:21:48:4b:e3:e7:af:74:
2d:d9:01:42:13:ad:f1:59:5e:ff:4d:63:76:ce:cf:bd:ff:0b:
3a:4a:5c:21:f8:5b:39:63:ab:c5:3d:b4:01:ca:81:d1:6f:47:
db:06:03:f6:05:e1:ef:bd:76:8f:51:e2:2a:62:e8:4b:c9:06:
79:e2:1e:d8:b3:2c:7d:3e:51:a6:6a:91:b9:10:42:77:c8:e7:
0b:45:3f:d0:a7:ee:4d:6d:92:95:44:ca:58:43:b0:71:85:c8:
ac:43:95:11:6a:70:84:e8:f3:45:78:af:09:36:bc:7b:74:54:
02:06:4b:92:fe:61:2f:0c:b3:05:4e:b2:74:25:15:3b:83:b5:
9b:80:be:ba:b5:78:ca:b7:15:8a:e6:17:fc:0b:ee:88:3a:63:
6d:72:d7:27:91:85:39:52:d4:33:86:63:f7:d5:ec:2a:0f:34:
37:37:df:e9:ec:ec:45:59:41:2c:a5:5d:72:12:5b:12:d2:22:
94:eb:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:52 2025 by rpki-client