
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: gofMHnOILvz7tMDn7oZKx9KPFu3tGun8o52Es+5Q9uU=
Subject key identifier: 7C:48:34:F6:EB:BC:A0:B8:BF:7C:16:E4:63:38:F6:3F:C2:2D:F0:7F
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01978F927906E48B6EC22974582932FAEF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 15A2
Signing time: Fri 20 Jun 2025 23:00:30 +0000
Manifest this update: Fri 20 Jun 2025 23:00:30 +0000
Manifest next update: Sat 21 Jun 2025 23:00:30 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: cey4340Z/8rIo5ZnSOx0a3/G87V918sFKs0NxRcWPkg=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:92:79:06:e4:8b:6e:c2:29:74:58:29:32:fa:ef:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jun 20 23:00:30 2025 GMT
Not After : Jun 21 23:00:30 2025 GMT
Subject: CN=7c4834f6ebbca0b8bf7c16e46338f63fc22df07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:3e:62:f5:a3:ac:0f:70:fa:b8:55:a6:83:
7f:90:df:be:19:00:4e:d7:53:ac:81:e0:e1:55:65:
99:48:49:b9:47:94:d3:69:f5:d3:91:7e:5d:32:bb:
15:64:57:07:0e:c6:ce:44:06:dd:d1:47:59:ce:44:
2f:7f:29:25:64:97:b1:11:78:4c:7b:83:db:3e:ef:
92:3e:94:76:8c:99:b6:5b:4a:46:f4:31:94:40:f8:
e4:94:20:97:00:ab:17:28:f0:b6:26:c2:7d:01:b4:
a5:21:ab:0d:8f:43:d4:a9:ef:25:65:f1:ec:3d:cc:
69:89:9f:ba:db:ca:73:97:36:83:73:28:41:b1:11:
12:35:b2:a5:54:74:1e:2d:88:f2:2c:0f:e2:f6:24:
3d:50:05:5f:bb:92:10:4d:ef:09:5a:a4:f7:92:df:
b4:dc:d9:38:ad:b4:9e:90:7c:8c:01:0d:57:91:4d:
53:bd:18:19:73:93:59:72:a8:d5:c4:84:9b:8d:e4:
7e:23:2b:ac:c7:f3:7b:cb:b4:8a:83:2d:77:23:a6:
57:ad:48:36:f2:51:49:95:75:8f:23:bd:00:b2:26:
36:e4:ce:ef:4e:09:54:80:44:7b:ca:40:1f:21:95:
01:6f:71:9e:f0:3a:53:43:07:a4:bf:0a:fc:28:9d:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:48:34:F6:EB:BC:A0:B8:BF:7C:16:E4:63:38:F6:3F:C2:2D:F0:7F
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:57:9d:51:8c:44:b9:d9:c5:cd:21:25:d5:07:00:6a:71:8b:
9b:25:34:24:11:bc:1b:53:60:e2:4a:ae:e9:51:5c:ca:48:4f:
07:e6:31:03:da:a0:5d:7f:07:c5:e1:2e:2a:30:4d:ac:f6:2e:
44:12:cd:73:e8:18:64:fb:7b:86:13:cc:f3:15:26:63:72:1e:
9f:93:66:ee:73:73:37:ce:ac:a9:4c:48:28:01:8f:1f:99:e0:
3f:aa:f7:f1:8a:8f:be:89:04:bd:3d:1f:f9:c0:e1:de:6d:34:
1f:db:05:94:04:ff:fe:ce:84:93:ad:e6:9d:cf:56:98:e4:2c:
76:01:ae:4e:99:be:5e:38:eb:17:65:b4:76:50:ac:97:da:b0:
e2:bc:39:17:24:59:c4:d4:9f:69:9e:77:43:48:8a:30:93:63:
67:06:a6:5b:e7:42:6a:59:50:fd:18:a8:85:81:9c:bd:63:4a:
ce:75:22:ad:20:65:a0:39:07:95:c7:d1:10:4d:7a:b5:8a:b0:
70:25:8d:68:0d:23:a7:ec:2d:c3:dd:b8:38:8f:c1:98:05:46:
8a:3f:ad:41:71:e0:c5:df:bc:3d:4a:ea:11:ec:8a:a6:71:b3:
b8:d8:e1:01:e4:c9:b5:ef:dd:0b:c3:ca:50:90:17:3e:51:b0:
22:39:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 09:18:12 2025 by rpki-client