Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json)
Hash identifier: zLpu3AL/SO3WV/SpwKtQPoXRJcClBwW6njESZl4eMXU=
Subject key identifier: 61:34:19:D8:4B:66:6D:FD:CD:46:BF:DC:40:8C:4D:6D:49:E8:40:7C
Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Certificate serial: 019A522CB4DCAC74C6971F8955585008D93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
Manifest number: 0691
Signing time: Wed 05 Nov 2025 04:00:52 +0000
Manifest this update: Wed 05 Nov 2025 04:00:52 +0000
Manifest next update: Thu 06 Nov 2025 04:00:52 +0000
Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: 5HSMsIeCG3dDRBzd2FeI02x19Af2ShcmAVF3/lCQRJg=)
2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b4:dc:ac:74:c6:97:1f:89:55:58:50:08:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f
Validity
Not Before: Nov 5 04:00:52 2025 GMT
Not After : Nov 6 04:00:52 2025 GMT
Subject: CN=613419d84b666dfdcd46bfdc408c4d6d49e8407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:e2:da:36:1a:3b:2e:82:d6:72:19:8a:5d:
b4:68:2d:b6:0c:13:17:9e:8d:82:cd:03:dd:ae:c5:
f9:5e:93:bc:d4:fd:79:ec:3f:af:e1:da:0d:d2:15:
0c:29:11:8a:bd:70:3f:8b:be:3d:00:66:c1:01:94:
2d:d1:c2:87:31:f5:f7:76:dd:59:e4:36:4f:d5:79:
be:f2:12:8e:91:54:43:05:36:70:96:d3:47:cc:b5:
56:9e:a4:72:7a:13:dd:ba:09:17:3e:c0:8e:06:c7:
42:7d:bd:93:71:32:e3:0b:1d:ea:ac:f2:b7:3f:3f:
22:b7:93:8c:e6:aa:cc:6e:87:01:fb:26:69:71:7b:
15:4d:8a:83:d4:9c:1d:40:81:91:57:f4:86:8d:94:
df:24:d4:93:c2:db:af:96:e7:29:ab:83:d5:f4:53:
57:9d:ab:0d:0d:cd:07:02:bb:d0:98:61:08:25:9a:
50:8b:b8:14:1a:23:a4:4a:a2:53:73:71:32:38:23:
d8:88:7c:a9:4a:29:73:88:88:7b:8f:14:32:86:36:
ea:05:39:03:94:35:1a:e6:f5:e0:b8:2a:d2:cb:54:
a3:08:66:b4:23:c9:e4:3d:e2:5c:94:cd:31:6c:aa:
b2:af:fd:e8:07:6d:70:94:e1:d2:95:32:8c:57:26:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:19:D8:4B:66:6D:FD:CD:46:BF:DC:40:8C:4D:6D:49:E8:40:7C
X509v3 Authority Key Identifier:
keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:bb:5a:43:8f:79:ba:b9:7d:dc:01:aa:91:ab:66:3e:dc:0e:
9e:bd:f4:5d:ef:7a:64:bc:c6:95:8d:eb:de:17:10:c3:f1:c7:
31:fd:aa:eb:aa:02:e1:5a:fe:4f:ae:5a:15:9c:3b:44:53:57:
28:39:02:bd:bf:41:22:56:79:01:87:73:d0:57:f8:b8:44:b7:
73:82:94:9b:0c:48:02:6e:09:08:22:58:2a:35:b5:25:fa:1e:
1c:53:12:94:af:40:ab:6b:3d:87:d4:ab:b5:b9:76:dd:9b:ab:
53:c0:1c:fe:0d:43:ae:fd:b9:64:d8:22:a5:65:17:f7:ac:64:
7a:89:a7:61:dc:17:e3:5f:a7:dc:5d:e7:64:99:02:a1:c1:d2:
63:ad:bf:99:79:1a:5d:2c:d2:ca:2f:67:a2:c7:08:f5:aa:39:
16:5f:52:6e:ec:dc:c0:42:56:5b:ea:a9:45:28:5d:d4:9d:0d:
c7:47:ef:23:70:34:38:0a:0b:84:75:f5:2a:86:93:ef:07:f0:
63:75:85:09:b8:e0:b7:6a:1d:95:54:f2:f3:2a:53:b0:6c:31:
55:92:99:e7:81:94:b7:fa:59:87:dc:6c:fa:50:da:d3:bd:58:
95:28:38:9d:ab:32:cb:bc:2a:65:58:a5:a6:03:f4:c7:38:75:
6b:00:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:03 2025 by rpki-client