Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: +6/H7TuozE/MvjfQGAdo8tj88ct5cCeD7hx9LdNFKJg=
Subject key identifier: 3D:E2:C6:89:8F:5A:BA:15:EE:5D:D1:FB:AC:4E:62:97:C0:FE:0D:24
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 0196CC85DB1C62BBE5D414C47F4B46E12B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 02:00:46 +0000
Manifest this update: Wed 14 May 2025 02:00:46 +0000
Manifest next update: Thu 15 May 2025 02:00:46 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: KVS8l++0mT0Etvj4HBkcFWRuEESClxkXDI63I8DUnQM=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:db:1c:62:bb:e5:d4:14:c4:7f:4b:46:e1:2b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: May 14 02:00:46 2025 GMT
Not After : May 15 02:00:46 2025 GMT
Subject: CN=3de2c6898f5aba15ee5dd1fbac4e6297c0fe0d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9b:ff:8a:90:cd:bc:75:0c:0f:3a:ef:cc:68:
f5:bb:86:70:e5:09:a4:2d:10:5d:14:a2:9f:7d:70:
8a:15:bd:25:8d:1c:7e:25:67:0c:23:93:0a:ba:32:
2e:a3:89:25:9d:9a:95:53:b4:d5:e1:b0:7a:59:6f:
06:d3:c8:78:ab:09:b7:e2:c6:e6:fe:21:64:ac:d6:
75:71:36:d7:df:50:c2:da:58:4f:2e:93:91:c7:66:
a6:1e:b9:d0:08:53:6b:7f:bd:b9:5a:df:89:08:da:
c8:c7:ab:b7:d4:d6:f1:6a:ae:16:af:31:d1:0f:cb:
ef:1b:8f:c5:bb:85:cb:f0:09:92:e9:ce:ae:a9:d1:
68:8f:16:be:7f:8d:32:90:c8:0d:2d:ad:16:ad:fd:
65:ec:55:d3:67:ed:27:16:b0:c2:3e:57:46:1f:2b:
f2:e3:48:6c:0c:9a:35:3f:ff:40:88:28:e4:df:78:
d6:7f:f4:b8:09:76:8f:32:0f:14:02:ea:2b:52:d2:
06:6e:65:80:d1:6a:45:c2:27:81:7c:c2:39:3c:dc:
a9:c4:76:05:15:e4:cd:cb:e3:d8:bb:e7:4b:7a:01:
71:1e:b9:17:7c:68:f8:f4:78:b2:c4:9f:ac:bb:d7:
58:34:ca:06:f2:69:d2:22:6f:a5:32:04:c4:e9:e4:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E2:C6:89:8F:5A:BA:15:EE:5D:D1:FB:AC:4E:62:97:C0:FE:0D:24
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:a9:8a:bb:b3:c9:2d:c9:aa:66:51:99:74:29:57:b4:d1:
4e:20:f6:a1:de:10:0a:3a:6a:42:44:e9:ce:09:5b:57:ec:45:
59:af:ea:24:d8:82:13:81:5e:08:d1:a9:d0:48:2c:0a:25:79:
3b:7f:58:0d:7b:d0:46:f8:a2:8f:f4:bd:31:c0:ef:72:ab:78:
8b:bf:8c:3d:19:a3:bc:0b:a5:ca:9c:9f:83:58:12:56:a6:94:
80:9b:6c:5e:dd:7c:ac:74:fe:d4:fd:1f:7b:76:00:ae:1a:0e:
d0:97:7b:49:38:12:fa:37:ee:8e:6d:07:59:cc:dc:44:de:8a:
8f:e7:27:75:94:bf:b4:b0:eb:45:5a:99:27:6f:ab:da:50:45:
84:18:4e:b2:d5:89:22:c5:39:7e:a1:4e:bb:67:43:7a:39:38:
b6:a4:24:6e:c0:a6:17:33:c2:11:b9:df:a3:96:ca:cb:6b:15:
63:1e:55:c8:e2:e3:37:25:28:3d:92:cb:fe:70:83:c8:c8:ad:
c2:a3:4f:ec:5c:9a:7b:40:be:78:58:aa:7c:c7:31:cd:e9:b5:
8d:4f:5f:8e:f4:97:f8:b2:64:c3:89:82:e3:1b:bd:33:a9:36:
f8:2b:41:ba:9b:de:55:ad:b7:00:ee:05:4e:e9:fa:6f:e0:d4:
0a:1c:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:09:05 2025 by rpki-client