Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: 6c1Hjj8mZBnrUC6+iEfNecKnGbLp6ujzlGbA6pm1JcE=
Subject key identifier: 6D:91:1C:BA:DA:40:46:90:3D:CF:CA:3D:28:40:3C:F2:D9:2F:E4:67
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01965A94E4B7496B36A27C1690D4E7D249AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 23:00:29 +0000
Manifest this update: Mon 21 Apr 2025 23:00:29 +0000
Manifest next update: Tue 22 Apr 2025 23:00:29 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: VsafSvzIlcqXWYDOUWmQ7Gc7dp9Vaaq4vvQnx2SuWX4=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:e4:b7:49:6b:36:a2:7c:16:90:d4:e7:d2:49:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Apr 21 23:00:29 2025 GMT
Not After : Apr 22 23:00:29 2025 GMT
Subject: CN=6d911cbada4046903dcfca3d28403cf2d92fe467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:30:8b:6e:25:2e:4a:71:c4:f2:76:e2:5e:
47:68:7f:62:37:23:9d:cd:21:bd:6d:0b:25:3b:1a:
05:5f:c0:f4:f7:cc:1f:36:d2:19:99:fe:d8:99:77:
83:5b:b1:fc:aa:66:96:18:09:32:82:50:70:88:d6:
10:38:dd:a2:8a:e0:22:ca:6d:6c:51:1f:47:fe:25:
7c:c7:49:19:16:33:72:ad:e2:3a:a5:ee:2e:aa:a7:
86:fb:eb:c1:99:48:cb:7a:6f:19:eb:07:44:7a:59:
a1:09:57:1c:3e:da:b3:b3:ec:9c:55:a3:1a:c7:cb:
91:44:11:0b:01:d9:0d:29:24:f3:ff:6a:bb:0c:69:
e6:9c:7f:b6:15:af:31:d4:20:bb:bd:7a:77:e6:9a:
72:36:a8:26:1c:2d:08:70:90:b2:f5:d7:e9:5e:6d:
e0:d9:5d:37:64:96:11:68:5a:2c:e6:3f:7c:bb:6b:
a1:b0:50:27:2c:4e:bc:d8:dd:92:73:ad:3d:16:b6:
60:62:d0:b8:58:b4:41:37:8f:b3:e9:1f:a4:e8:7c:
e4:59:a3:35:fd:07:c9:bb:72:63:7b:dd:2f:ce:5a:
0c:27:de:b2:35:43:2f:0c:bd:0b:fe:0b:94:cb:2a:
e9:ef:39:2c:c3:1c:cf:41:cd:a6:04:b0:97:f6:ef:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:1C:BA:DA:40:46:90:3D:CF:CA:3D:28:40:3C:F2:D9:2F:E4:67
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:f5:0e:34:f4:96:c4:6c:63:fb:4d:5b:4d:35:6a:ee:3b:
46:7e:7c:7b:ce:de:4a:90:0a:19:07:ca:6e:03:17:a4:61:ed:
c0:a1:c9:20:f1:7b:85:3b:14:4e:c6:2e:78:27:a9:be:e6:1d:
ce:25:95:d1:50:0b:5f:e2:54:50:6d:a0:08:1c:7d:3b:83:e9:
8d:e3:e3:90:48:36:21:ca:bc:63:48:52:cb:72:e2:bf:76:30:
4f:a3:30:c9:55:de:a1:28:cf:ce:fa:e2:5c:05:bd:8e:74:2b:
3e:1a:76:12:36:53:b1:27:30:80:5b:cd:c6:09:6e:cb:a9:ed:
28:46:95:ce:3d:55:ce:b0:78:6f:2b:b9:f7:7f:e7:8e:9b:37:
ed:53:7c:79:4a:97:b5:24:65:9c:87:bc:62:2b:f5:e1:30:1b:
78:0e:7b:3e:8a:2c:7f:2a:b0:c4:11:eb:2f:70:8c:c7:f5:0b:
0f:17:e2:ee:70:ca:ee:a2:36:ac:0d:87:6f:03:b1:a6:0d:f6:
4d:03:5a:15:aa:ef:8b:b5:5a:d3:88:fe:b3:79:a9:f0:23:ae:
35:6f:39:70:9e:26:4c:19:18:98:78:90:97:62:a7:84:15:9e:
93:cd:49:c0:79:4a:cd:9a:60:5e:cb:49:82:4a:0e:db:4f:3d:
f2:99:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:57:12 2025 by rpki-client