Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: NONH2e8oidD+IuIJA7qVs5bJ7sXvWGufEM7f7Geb8ck=
Subject key identifier: 67:15:BF:B7:9F:5C:FA:A1:3E:35:82:8B:03:FE:66:F8:41:BE:22:1E
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 01964EC786EDE4B6AA5FA345216786343CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 047D
Signing time: Sat 19 Apr 2025 16:00:21 +0000
Manifest this update: Sat 19 Apr 2025 16:00:21 +0000
Manifest next update: Sun 20 Apr 2025 16:00:21 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: 6qQ1sqQYyllSCRZZ6QzjGlMTBiD7OKgH1If5++xRQQk=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:86:ed:e4:b6:aa:5f:a3:45:21:67:86:34:3c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Apr 19 16:00:21 2025 GMT
Not After : Apr 20 16:00:21 2025 GMT
Subject: CN=6715bfb79f5cfaa13e35828b03fe66f841be221e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:9e:1f:09:7f:9e:51:51:98:cd:a8:8e:f7:
fb:f3:b7:77:40:e6:8d:fe:4c:82:98:0c:fd:39:6b:
17:e0:0d:9c:bd:a6:4c:9a:16:d8:0c:aa:99:7a:d0:
64:2f:38:4b:89:4a:82:a1:95:2d:a6:be:1d:ea:b1:
c1:4d:07:21:f0:59:0b:ab:ff:e2:71:e7:a7:a5:86:
ec:b4:8d:d6:bb:a9:a7:bc:8d:33:9d:aa:14:ea:73:
bd:ef:98:7c:b0:9f:3c:60:c3:78:26:22:5c:10:71:
9e:84:5a:75:5f:b7:f0:28:a1:b7:e6:ca:63:60:20:
65:5e:5c:b4:e5:38:88:12:a9:d6:24:30:0c:04:b1:
7f:b1:d8:3d:0d:ce:95:a5:29:28:72:19:49:ac:eb:
b2:61:65:2e:d2:2b:99:37:61:60:4b:0c:40:43:c1:
19:c9:0a:66:3e:33:6e:27:a3:d3:70:70:34:c0:9f:
b2:c4:e4:ef:ae:e9:69:3e:24:5d:a5:1c:dd:00:79:
6a:c2:75:c3:da:80:f6:4a:d2:98:8e:10:95:b8:ba:
46:62:16:66:96:12:e4:57:68:91:bc:6b:f4:b7:24:
6c:2f:fb:1d:13:93:32:25:63:76:18:02:c9:18:74:
c9:2c:29:d7:48:11:ce:e6:88:ba:83:b7:05:ca:a5:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:BF:B7:9F:5C:FA:A1:3E:35:82:8B:03:FE:66:F8:41:BE:22:1E
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c7:10:f6:89:78:f7:85:ca:e2:68:fb:f3:01:ab:30:0c:07:
29:7d:92:fb:52:84:10:82:fb:c8:a8:ec:8f:c9:d9:43:72:94:
75:cd:f7:cf:b6:e7:df:5a:fa:80:08:c8:f3:b7:38:a0:4b:17:
9d:2f:1c:72:fb:16:e7:d0:03:87:34:e3:15:71:a3:e9:47:e4:
66:b0:8d:52:d0:a2:e6:3c:a5:9b:cc:07:d6:e5:db:0c:4b:bf:
f3:86:7c:81:22:1e:25:e0:f6:d0:70:6a:e2:0f:a9:8d:45:85:
14:e4:fd:20:e2:0b:26:f6:64:4e:58:c6:6f:81:41:77:7e:7c:
15:57:c4:87:91:86:f7:44:47:f6:7f:01:e9:b1:38:2d:20:a1:
eb:3c:a9:56:9f:2e:c0:5f:e6:2d:9c:9e:f3:84:e0:db:ad:4b:
c0:ce:26:e3:c5:dc:8f:d3:cf:33:29:e3:99:c3:8e:43:1e:cc:
8d:06:89:85:65:7f:53:c5:7b:80:9d:8b:95:cb:12:ec:c8:59:
75:3f:cf:45:4f:e9:a9:d8:51:85:8d:95:0c:b8:e3:e1:c1:9f:
9c:b4:7e:9f:1b:3b:0a:1c:81:14:e0:9d:b0:53:b3:4f:2b:ee:
62:6d:a3:0a:43:a2:c0:b4:50:79:d9:c3:2d:9d:ca:42:f5:a7:
3f:0e:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:41 2025 by rpki-client