Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: z7Qoy+/JG4RZ9LDPkNEb+Xo0Q9rCRVYz5l2OuYFmdBM=
Subject key identifier: 96:BA:10:04:E0:42:19:C4:C5:6F:17:ED:D3:7D:22:1C:04:CA:54:14
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019753B4AF50EEC31DAB104AA3B6F8D48C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 08:00:39 +0000
Manifest this update: Mon 09 Jun 2025 08:00:39 +0000
Manifest next update: Tue 10 Jun 2025 08:00:39 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: +Cn7LDlUjqEqEFp8NwPX4JdErvaOyrwkUM2+ipGZk0A=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:af:50:ee:c3:1d:ab:10:4a:a3:b6:f8:d4:8c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jun 9 08:00:39 2025 GMT
Not After : Jun 10 08:00:39 2025 GMT
Subject: CN=96ba1004e04219c4c56f17edd37d221c04ca5414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:74:77:e9:fd:c0:1f:f5:b3:02:82:a4:03:
a8:70:b4:b6:c2:f3:50:4e:e7:e7:c5:4f:e0:f6:83:
6e:20:41:f4:cd:57:30:d4:8d:15:e0:93:3c:87:7e:
03:1a:47:3e:54:6e:53:3d:4c:59:1d:60:ee:c8:9d:
55:60:14:e0:f9:b9:c3:5d:4b:b5:71:f6:03:e2:42:
f7:df:d8:be:36:23:1b:bc:77:c7:7d:76:f9:47:e8:
96:2b:43:d8:b7:8d:9d:23:db:34:e7:29:bd:30:d9:
09:d9:e0:80:16:b7:2e:7c:39:d8:29:a7:29:4c:6b:
df:15:fc:69:7e:a6:a2:f7:02:0b:9c:b4:f2:ff:71:
0a:f9:8e:98:58:3e:c9:c0:d2:5c:6e:fa:42:f2:62:
f4:af:40:24:b1:34:63:8e:2e:fe:8e:97:de:d6:93:
83:bc:4c:b1:bc:85:37:82:65:64:58:e3:1d:f7:b3:
c3:19:3e:2f:55:8f:4b:c6:00:a7:66:3f:32:14:fd:
3d:e6:09:d9:2c:68:03:8a:f9:88:d6:88:ca:c2:38:
82:16:dc:69:52:5d:52:37:89:8e:b6:d9:7a:cd:49:
69:0a:21:92:8e:4e:b2:98:3e:24:ac:a1:6f:73:80:
29:72:08:01:d3:13:c6:03:d0:af:62:dc:52:74:23:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BA:10:04:E0:42:19:C4:C5:6F:17:ED:D3:7D:22:1C:04:CA:54:14
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:ed:6c:f2:11:a0:24:fc:7c:54:f8:05:89:6d:6b:d2:15:
2e:f8:0d:d3:ac:f5:ae:68:78:10:a6:d2:73:61:ce:4b:d1:ae:
cf:e4:d0:91:4e:16:62:67:7b:e8:bb:70:6d:81:47:37:46:60:
1e:97:0f:0e:e0:87:05:a5:09:f8:f5:d0:a4:cd:cc:50:d4:10:
7b:6d:bf:5b:f9:8b:1f:20:71:32:a9:a6:a9:5c:df:46:f1:90:
ac:b6:b1:8b:bc:e9:da:03:88:9a:aa:cf:d6:93:18:e8:e7:5b:
a6:99:c1:53:03:ff:f7:f7:67:3f:b5:4f:32:41:9b:67:e9:5e:
de:9d:ce:e8:35:fd:d6:e1:d8:0f:fe:01:91:1d:47:70:ab:dc:
a2:e0:7b:c9:6d:77:85:7b:23:c1:20:8e:3d:3e:6f:77:90:10:
e2:ba:6c:28:ef:72:de:ff:9c:e7:ae:08:4a:94:6e:5b:8e:fd:
d4:db:d7:6b:71:ef:87:02:fc:54:87:c3:fc:3a:47:f8:28:bb:
ae:75:fc:2a:f5:70:06:5e:3c:5d:e0:17:af:11:20:a3:e5:f8:
d2:e7:87:25:e3:97:c9:d5:6a:1a:7d:a8:07:7d:97:97:56:de:
89:83:23:37:23:54:3a:63:cf:47:71:11:16:d8:4b:74:04:32:
57:2c:6e:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtK9Q7sMdqxBKo7b41IxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjUwNjA5MDgwMDM5WhcNMjUwNjEwMDgwMDM5WjAzMTEwLwYDVQQD
Eyg5NmJhMTAwNGUwNDIxOWM0YzU2ZjE3ZWRkMzdkMjIxYzA0Y2E1NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NN0d+n9wB/1swKCpAOocLS2wvNQ
TufnxU/g9oNuIEH0zVcw1I0V4JM8h34DGkc+VG5TPUxZHWDuyJ1VYBTg+bnDXUu1
cfYD4kL339i+NiMbvHfHfXb5R+iWK0PYt42dI9s05ym9MNkJ2eCAFrcufDnYKacp
TGvfFfxpfqai9wILnLTy/3EK+Y6YWD7JwNJcbvpC8mL0r0AksTRjji7+jpfe1pOD
vEyxvIU3gmVkWOMd97PDGT4vVY9LxgCnZj8yFP095gnZLGgDivmI1ojKwjiCFtxp
Ul1SN4mOttl6zUlpCiGSjk6ymD4krKFvc4ApcggB0xPGA9CvYtxSdCMOYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa6EATgQhnExW8X7dN9IhwEylQUMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5PtbPIR
oCT8fFT4BYlta9IVLvgN06z1rmh4EKbSc2HOS9Guz+TQkU4WYmd76LtwbYFHN0Zg
HpcPDuCHBaUJ+PXQpM3MUNQQe22/W/mLHyBxMqmmqVzfRvGQrLaxi7zp2gOImqrP
1pMY6OdbppnBUwP/9/dnP7VPMkGbZ+le3p3O6DX91uHYD/4BkR1HcKvcouB7yW13
hXsjwSCOPT5vd5AQ4rpsKO9y3v+c564ISpRuW4791NvXa3HvhwL8VIfD/DpH+Ci7
rnX8KvVwBl48XeAXrxEgo+X40ueHJeOXydVqGn2oB32Xl1beiYMjNyNUOmPPR3ER
FthLdAQyVyxuOQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:54:25 2025 by rpki-client