Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: oq9to0L1O4TEIHma/QdUzMjDcPCE0A+ECoExZwJz2eM=
Subject key identifier: A9:3C:AF:64:5C:64:4C:9E:50:A3:1E:E0:B7:E6:BF:C3:B1:65:37:84
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019892C826A1369A470D96BEF76D5DC913C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 07:00:47 +0000
Manifest this update: Sun 10 Aug 2025 07:00:47 +0000
Manifest next update: Mon 11 Aug 2025 07:00:47 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: wmCkWDUzb9b8g+KIF/K0XBMzRCgqpSPS+HNubmixtyU=)
2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:26:a1:36:9a:47:0d:96:be:f7:6d:5d:c9:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Aug 10 07:00:47 2025 GMT
Not After : Aug 11 07:00:47 2025 GMT
Subject: CN=a93caf645c644c9e50a31ee0b7e6bfc3b1653784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:15:e8:a0:50:d0:13:bc:a8:29:38:b0:4e:
e1:27:35:c6:cd:a1:2a:64:1e:68:1f:c3:92:b4:1b:
e2:66:e3:81:12:3e:b1:fd:93:83:c4:1c:4b:27:e6:
f3:cb:5b:07:3f:3b:e5:25:39:7c:93:7c:a7:fe:59:
50:ea:b1:4c:c9:37:fb:b4:09:e2:05:41:e0:86:19:
b0:79:a9:16:00:de:0d:29:0f:08:96:17:a5:f5:6b:
20:17:28:a2:2a:a7:69:cd:79:7e:ba:5e:9d:fb:4a:
e7:25:b5:bf:bd:70:96:5c:db:cc:a8:1a:9c:60:d7:
d0:bd:e3:d6:79:d2:2e:0d:3c:a8:b0:ec:ce:59:1c:
a8:a8:32:1b:15:61:dd:f1:70:ea:9e:f3:c0:dc:ae:
18:3d:04:27:99:5f:86:3f:f0:b6:d8:44:f4:2c:85:
8f:17:df:16:7b:2d:a0:d8:2c:49:c3:26:df:71:2d:
c6:2c:43:0d:8f:eb:c6:e4:37:cb:81:bd:8f:33:2b:
e5:4c:32:69:83:12:a2:17:ec:6d:73:e8:78:b0:ab:
13:43:7c:4b:03:98:e2:63:d4:75:b6:72:d2:75:ad:
5a:65:0c:b6:e9:58:38:49:45:0a:7c:e2:5d:66:5a:
32:56:e6:f5:5a:ac:46:83:77:ba:84:3d:48:2b:36:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3C:AF:64:5C:64:4C:9E:50:A3:1E:E0:B7:E6:BF:C3:B1:65:37:84
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9a:91:42:df:5d:57:40:3a:9a:64:e2:1f:14:9a:c3:0d:e0:
26:41:60:93:da:47:02:35:ef:84:ef:ef:e6:10:39:15:73:b6:
8c:1e:79:91:90:9b:06:73:81:74:85:5f:c9:0d:8d:c8:f0:5f:
4e:07:a4:b1:dc:64:0f:c3:18:db:d4:c8:aa:ff:d1:32:3a:4b:
fb:e9:16:2d:26:c8:23:f8:85:a2:b0:db:e7:f7:67:21:94:b6:
40:8f:cd:3a:3c:54:d1:15:6d:9c:47:63:d2:ff:d0:e8:5c:89:
0e:ae:26:f9:07:0a:22:6b:04:49:6d:17:04:4a:5b:e8:6f:43:
3d:5a:18:a5:a6:24:b3:13:0a:b3:03:fe:6c:fa:a9:f0:6b:f5:
12:46:db:c1:69:c1:3a:ed:49:63:5a:5c:36:04:c1:8e:54:ee:
f5:ed:e4:17:2e:f8:47:81:b7:cb:d6:73:d1:c6:16:50:0e:4d:
04:df:0e:18:2f:62:c0:42:b6:25:45:64:33:af:bb:d2:dd:fa:
2b:6b:0f:4d:5c:99:c2:39:c8:3d:2f:a4:b0:e6:36:ba:2e:95:
67:f0:2d:c9:12:aa:04:03:6f:39:42:7e:6a:8e:bf:06:4d:4c:
28:1b:e1:8a:6b:ad:25:e1:29:7c:eb:1f:fb:a1:79:ab:28:b7:
29:93:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:29 2025 by rpki-client