Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: KtWDh1GAwTYXcRiNDxqlUL8oLGAnixZSbnrPId5ToGo=
Subject key identifier: F8:30:99:10:52:8A:C9:A5:36:39:17:6E:04:F4:1E:5C:EA:6A:85:04
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 019673793F8BF7A28E363DCFBD62585B6189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 0490
Signing time: Sat 26 Apr 2025 19:00:47 +0000
Manifest this update: Sat 26 Apr 2025 19:00:47 +0000
Manifest next update: Sun 27 Apr 2025 19:00:47 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: PPhVNKnn8eW1KzkoApri65aJ3xGz+xDrZmpe4IcY+H4=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:3f:8b:f7:a2:8e:36:3d:cf:bd:62:58:5b:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Apr 26 19:00:47 2025 GMT
Not After : Apr 27 19:00:47 2025 GMT
Subject: CN=f8309910528ac9a53639176e04f41e5cea6a8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b8:5b:e2:01:6c:3e:cd:0b:49:8f:3a:bc:77:
a3:f2:56:a6:98:a2:c3:ba:97:a8:71:b1:b6:c7:4f:
c6:07:6c:10:bd:44:a1:27:7b:ee:b7:45:64:51:23:
2b:e7:c3:4e:86:ae:8f:35:14:70:cb:fc:ce:be:f6:
72:ea:d9:aa:d0:11:e3:c0:57:2b:5c:70:0e:46:45:
83:a3:da:90:e9:da:2b:d9:a3:65:3b:60:7c:49:40:
1d:12:94:a0:84:b7:e3:ef:a0:dd:fe:a1:f6:06:f9:
8d:12:64:9a:ed:eb:f2:1e:c0:8c:e1:fc:25:bb:3c:
d0:bb:be:cf:54:45:5a:fb:19:e0:f5:88:95:bc:d5:
cd:5c:52:be:cb:a0:f4:01:28:db:be:6b:2f:0e:0e:
7e:e0:3f:8f:8f:0d:68:14:f9:3a:28:66:ef:4e:db:
b2:3b:a3:6c:ff:eb:f6:24:bf:b9:4b:d7:84:ee:05:
a2:03:da:9f:d4:6b:ef:f6:76:c9:54:11:0a:04:95:
72:94:e9:86:b5:76:1b:9c:c2:97:14:85:12:01:86:
c7:79:28:e3:e7:28:71:91:7f:f7:40:9f:f8:d1:b2:
19:1a:40:79:20:5c:32:cd:57:f0:53:f9:af:21:a3:
7f:4c:06:64:68:d2:00:43:7b:19:d3:20:c2:db:c0:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:99:10:52:8A:C9:A5:36:39:17:6E:04:F4:1E:5C:EA:6A:85:04
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:75:3f:1b:07:63:48:5e:76:4a:6c:6b:55:43:1e:f3:df:57:
72:b9:f9:b6:13:fb:39:8b:9c:4f:e1:d4:bb:c9:78:d3:90:8b:
99:43:9b:be:83:3c:9f:a2:8f:a3:74:a5:14:61:bf:c8:96:11:
69:d6:43:3c:da:88:c2:da:d6:07:46:20:a7:39:30:4f:ea:06:
24:38:ab:32:5b:78:47:d4:0a:da:1a:0b:3e:be:3e:0c:13:b7:
82:69:74:eb:24:ce:87:c0:70:21:d2:04:76:2d:3a:c7:88:86:
a8:d2:12:8a:d8:c0:ae:0f:90:0b:6e:ee:f2:8a:1f:00:6f:9d:
9f:53:b0:d3:15:ba:02:68:e1:a4:ca:0c:8f:6b:77:7a:6d:be:
89:68:bc:0a:8c:ec:01:36:1e:a5:88:6c:70:86:b2:e1:6a:26:
e2:77:5b:0d:b9:a4:2f:6c:d4:31:ab:1b:a5:98:2f:23:df:63:
26:9d:9b:44:ee:f6:74:6e:0b:d6:4e:10:ec:26:63:9b:97:77:
08:24:df:df:2f:8b:6d:66:84:fd:37:ae:ea:21:be:e8:a2:9f:
be:e8:23:d5:90:27:2c:0e:bc:c3:c7:73:15:01:3f:b2:d3:5f:
59:02:c0:03:b3:da:7e:db:aa:01:bf:df:d1:1f:ed:da:75:55:
92:16:d1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:13 2025 by rpki-client