Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: q4JNLa/lFM2Zx7mYPu/4XnDzL/g90V1JV1W/of6BUXI=
Subject key identifier: FD:DB:A9:73:26:4C:69:62:6C:57:4A:F7:34:4D:48:8A:06:CC:90:DF
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 0199FBEC0192719E29CBA26AA0562C3A6E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: XeWxzPVquPLSMCccRTRv+r2IVKaHrZwWyUx8WtP7cTg=)
2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:01:92:71:9e:29:cb:a2:6a:a0:56:2c:3a:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=fddba973264c69626c574af7344d488a06cc90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:e9:a8:d3:ad:ce:f6:1f:f1:b3:79:af:3e:
8f:2d:35:ea:27:61:7f:c7:a3:86:9e:00:35:91:d0:
d8:23:e4:40:4a:40:83:42:a0:09:22:68:24:8b:ae:
de:8f:78:37:9e:14:c6:c2:17:08:fc:e6:2e:52:df:
31:2c:cc:bf:01:e3:b8:fb:09:3d:06:eb:62:a6:dd:
0a:8e:68:ac:fe:f0:97:98:fc:b3:fa:e3:05:ef:ef:
f6:9c:62:c8:b0:76:9b:95:d6:dd:63:8d:ff:61:40:
22:4a:bc:5b:f0:90:a0:1c:e1:5c:e6:86:48:39:9a:
54:c0:56:da:f9:56:12:e3:97:13:e2:d4:a7:6c:ee:
37:ad:a9:a0:f5:cd:26:20:a4:ed:29:d5:1c:60:66:
40:12:ef:b7:f6:f5:72:89:41:7c:09:bc:b2:5f:6a:
f7:3f:a6:37:39:60:bf:f5:bf:ae:0c:1a:a8:c1:fd:
24:7f:5f:ba:dd:87:cf:84:1f:7e:b9:24:a6:a4:b5:
c2:a9:c0:c9:25:cf:d3:08:d8:bc:72:d7:ad:7a:4b:
75:b5:dc:c4:d2:04:8d:01:8b:c0:04:d8:46:7f:15:
c0:4f:d2:cb:2d:6d:d0:47:d9:40:85:f1:ac:b2:99:
70:32:cc:db:75:d6:e5:95:3a:12:63:73:13:01:79:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:A9:73:26:4C:69:62:6C:57:4A:F7:34:4D:48:8A:06:CC:90:DF
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:06:90:09:7c:35:12:c2:c5:6c:95:53:23:fd:2a:f3:19:
7a:6e:09:30:4e:00:d3:cd:c8:85:57:e8:8f:d7:ff:4b:81:68:
ef:94:31:10:84:64:09:70:65:f0:86:14:ea:ff:87:52:4a:9e:
93:f6:c6:87:59:af:ef:06:1c:72:55:1d:15:ff:da:b7:08:e6:
d2:f7:69:a4:c2:ca:cc:2a:42:61:22:5b:54:eb:0f:ba:cf:9a:
a2:ac:97:dd:0c:57:05:4b:d6:3d:f2:20:a4:43:15:b5:ca:c3:
55:ad:4e:af:af:b3:06:64:1a:39:86:6f:e3:cf:02:15:4f:56:
43:7b:3f:51:2b:21:66:ef:a7:cd:cf:dc:b3:9f:3d:5d:4b:35:
19:b6:97:8e:05:6c:bd:31:89:9e:87:f1:2b:6e:4d:da:31:bf:
10:31:ac:b2:ec:6f:e0:96:43:05:82:6a:12:de:35:ce:30:5b:
cf:a5:79:2a:81:dc:b9:4b:24:38:f7:35:d8:9e:eb:94:17:4c:
05:8b:83:9f:92:a0:a4:56:09:a7:e7:a2:f8:5e:40:74:fc:0b:
89:8b:c1:35:62:3f:1c:ee:48:a0:68:06:fe:24:bb:6e:97:74:
00:50:fc:20:fb:de:9d:74:2a:5a:c6:17:fb:ff:4f:32:7f:5a:
bf:d0:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:05 2025 by rpki-client