Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: Rxgz7q+BrYlnLzof/ige3si9xhTa4zX+fssNj0J3/e0=
Subject key identifier: 14:9A:16:86:F5:02:C7:59:BE:FF:C0:93:B8:98:EE:A3:D2:6C:67:3D
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 019749D5CCCFF894055D23A27AA47C9A9D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 04FF
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: AFXBJMnINZBnRnIQ6cZT8eJP1ZhTXToI5BYzluUPN2w=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:cc:cf:f8:94:05:5d:23:a2:7a:a4:7c:9a:9d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=149a1686f502c759beffc093b898eea3d26c673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:3f:37:21:2f:04:ef:ae:5b:7b:74:44:fc:
f5:e3:cc:0f:15:b3:a7:d4:f9:0e:1f:ba:75:6f:0c:
75:78:f4:9a:18:e0:c6:13:08:28:76:10:e2:f9:3e:
16:f2:9e:b2:3e:b2:75:14:35:32:c7:49:68:5f:20:
5b:9f:25:78:74:cc:e4:63:8d:47:f7:46:96:20:75:
a1:29:6a:7c:4c:0f:8f:b3:cc:56:34:e6:39:79:58:
66:1d:f8:29:f1:51:94:cd:fa:f4:5a:4f:8f:0e:0e:
b5:64:09:96:9f:c9:4e:ca:e6:ca:b6:b3:8a:c1:da:
e6:28:43:4e:89:8e:fd:25:76:3e:0a:82:9c:a5:20:
d7:39:c3:da:e5:42:e6:e9:a6:49:a1:c2:bb:a5:31:
4e:34:ad:01:b0:31:29:3e:77:cb:dc:1f:7a:52:9c:
85:61:0d:ef:4d:39:23:e8:d1:e7:94:e6:6f:7c:bf:
c2:4d:8c:c6:16:93:90:f1:a1:36:ea:9d:20:b5:f6:
3b:e8:c3:dd:2a:25:61:03:bd:e4:3b:89:a0:f2:b9:
36:da:32:20:ef:5a:db:1a:73:4d:3a:e7:7f:11:d8:
57:e6:9e:02:08:99:19:2b:65:e9:73:51:14:f0:49:
3e:2c:35:5c:aa:83:1c:85:f2:85:af:80:ea:03:f2:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:16:86:F5:02:C7:59:BE:FF:C0:93:B8:98:EE:A3:D2:6C:67:3D
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:12:f7:6a:5c:d3:79:ae:da:b0:15:83:b3:70:09:7f:ec:4d:
ec:10:18:b2:8d:35:b0:10:4f:82:75:db:b2:86:74:06:59:57:
b5:22:bc:ae:44:b7:4b:f4:38:8a:5e:37:68:9a:58:e0:46:1e:
f1:a9:8a:99:82:8d:f3:f6:e0:64:fb:38:86:00:3e:56:95:0c:
49:4b:0b:ef:08:f3:1f:f8:0b:9c:f8:10:b9:1f:14:05:19:b7:
a8:7d:37:97:55:fb:b9:ac:da:89:1c:9e:79:5e:68:71:e4:78:
bf:b6:84:9f:da:40:ef:0b:6a:44:57:95:16:39:4b:00:fa:da:
e0:7b:44:1f:bf:32:2b:ea:3a:68:2d:dc:6d:39:12:80:0e:a0:
af:af:34:a0:b2:ff:ce:67:a5:be:9a:1a:b4:13:d7:47:73:c6:
b2:5c:d2:26:f4:1e:2f:e4:ce:99:7a:e3:03:65:eb:c4:ed:57:
92:1f:79:5d:c2:71:12:90:41:a7:5b:19:de:3b:eb:16:53:77:
b5:59:88:b8:e5:75:bb:6a:63:25:b2:1a:8a:f0:0e:bc:72:6a:
1e:f2:a7:e7:46:a0:0d:76:1d:be:29:17:93:21:da:d2:de:4c:
76:ea:d8:a7:b5:fa:01:bc:de:d3:78:c8:48:b5:d5:37:7e:a8:
fd:9c:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:29 2025 by rpki-client