Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: FGM9oT2G06a4iQTQcDcqbGYB5LcCSERYjuTBDfynf/4=
Subject key identifier: 83:D9:28:A0:E7:22:0A:A6:A8:F0:36:21:BC:94:45:69:97:BD:CD:B7
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 0197B632E508777871ACDCD14587F93EE94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:01:18 +0000
Manifest this update: Sat 28 Jun 2025 11:01:18 +0000
Manifest next update: Sun 29 Jun 2025 11:01:18 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: dHYNNKo0QlBI95qwgNfPg6BGPcmSggLWIwkvRhLVLLc=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e5:08:77:78:71:ac:dc:d1:45:87:f9:3e:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jun 28 11:01:18 2025 GMT
Not After : Jun 29 11:01:18 2025 GMT
Subject: CN=83d928a0e7220aa6a8f03621bc94456997bdcdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:2c:82:66:03:9b:95:95:c8:ac:57:fd:b7:
12:53:61:92:29:bc:78:07:42:e0:79:fa:81:f2:05:
9b:cf:10:46:0d:cb:ea:12:2c:f2:43:5f:19:f3:dc:
b0:7d:28:f8:d1:6c:bc:7d:99:2e:b5:fa:0c:0e:d4:
f9:6d:d8:ba:37:67:0d:e7:02:f8:a2:f3:46:12:b6:
60:58:c1:65:dc:69:27:88:bf:20:e4:00:3a:a0:fb:
be:0e:62:eb:6e:5e:02:23:08:ee:c5:0b:4b:65:68:
42:7f:72:e9:5c:72:cb:77:12:01:89:12:69:dc:55:
29:b8:20:97:ad:3d:59:0d:4e:ab:77:28:8f:c9:84:
9c:95:5b:f4:26:7f:12:8b:a3:f3:7c:0e:52:1b:d7:
fc:92:8e:f6:f0:67:92:01:ad:f2:d9:df:93:87:00:
f0:e1:7e:20:64:95:15:40:52:4d:c7:1e:88:0a:25:
b6:ae:d0:6f:96:8e:86:02:90:66:98:65:93:27:90:
d3:ac:49:db:b7:2b:0d:0e:61:6c:15:c5:2d:16:ab:
60:98:46:60:ab:87:71:e4:bf:15:a6:a1:f8:53:2a:
be:b8:08:3c:eb:63:b7:c6:5c:c5:c8:23:dc:99:42:
ac:48:a3:c6:94:ce:f3:50:a4:d1:58:e3:e2:0c:22:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:28:A0:E7:22:0A:A6:A8:F0:36:21:BC:94:45:69:97:BD:CD:B7
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:81:70:c0:c4:d4:f4:83:cd:04:f6:35:b2:33:21:a7:ea:
86:db:1a:d4:ac:6f:52:ce:bb:c7:d1:26:cb:82:d0:de:e6:89:
4e:06:bc:34:83:f4:6a:62:c7:3d:dd:ee:b5:8c:de:ac:c6:26:
e4:f8:66:c4:06:a0:92:6a:5d:5f:28:01:6d:85:50:80:76:1d:
e4:aa:de:a8:b8:79:d4:8b:34:0d:76:e6:dd:49:c5:50:c4:9e:
b9:1d:96:e1:79:eb:d9:33:28:da:5a:c6:69:94:1c:21:fe:d3:
46:24:b5:ea:44:26:25:5b:86:99:3a:ef:b4:26:b5:2e:df:af:
32:39:3a:fe:a6:57:ad:67:26:ad:6e:ba:b1:67:88:3d:7c:0b:
9d:8a:d2:ef:3b:32:00:c0:ae:4b:f8:f6:9c:2c:c3:e8:0e:6f:
e6:61:57:fc:04:33:03:85:96:1f:d6:93:72:5a:5e:a7:ff:46:
98:1b:d4:ac:82:e1:74:20:c3:60:70:18:2b:f2:85:29:9e:0f:
17:d7:27:6c:b8:9f:f3:8b:02:27:74:72:5f:ed:dd:78:b5:af:
65:6d:85:8b:ae:fe:84:2b:14:7c:4b:d9:d1:83:6e:09:40:a6:
94:21:01:8e:87:cc:c3:3e:74:dd:86:d1:23:4b:b4:5e:51:83:
f3:e0:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:44 2025 by rpki-client