Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: egyao+Updpum0jpxnJrzVhJYgfQY8qCII9MpdyyBcPI=
Subject key identifier: 91:DF:C6:E5:30:77:29:7E:CF:8E:AB:50:E2:00:10:3E:04:AB:79:56
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01993CBAC7C17F1C883636E44A03E784E1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1681
Signing time: Fri 12 Sep 2025 07:01:37 +0000
Manifest this update: Fri 12 Sep 2025 07:01:37 +0000
Manifest next update: Sat 13 Sep 2025 07:01:37 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: pk2/JlyF7c8PzbB9f+o2UYSjXg9+I4PTe5xo7vZRKT0=)
2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:ba:c7:c1:7f:1c:88:36:36:e4:4a:03:e7:84:e1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Sep 12 07:01:37 2025 GMT
Not After : Sep 13 07:01:37 2025 GMT
Subject: CN=91dfc6e53077297ecf8eab50e200103e04ab7956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:9b:59:4a:19:bd:d2:9d:c1:a1:6b:a2:11:
0a:a0:0d:78:9a:2e:8e:9c:a8:b9:58:2b:95:26:27:
e2:1f:4d:05:58:71:7e:e3:f2:da:a3:bd:a0:45:1f:
18:30:9e:26:6a:04:ef:95:88:2b:de:78:66:ed:40:
1f:35:41:d0:2e:bf:0f:c1:2d:40:90:f4:94:65:5f:
90:59:ee:be:d1:fa:d0:d0:9f:f6:5e:78:f8:da:4f:
a4:a1:4e:4b:48:a4:b3:d0:a2:ec:16:af:f4:54:09:
30:9d:20:51:c8:96:a0:ff:4a:8a:88:18:b9:01:f9:
4d:0d:3a:d7:83:0f:a3:7c:8e:90:85:8c:82:b0:b3:
9a:cd:a2:72:27:1b:6c:c7:44:85:ae:15:ff:10:35:
31:45:16:66:41:e1:27:6a:85:c1:5a:f1:63:19:11:
85:27:b0:ba:48:ef:6b:b9:e4:0f:65:a8:b5:46:83:
11:5b:70:8b:85:87:6d:68:33:34:00:aa:08:cc:02:
02:56:ed:92:c4:9b:4d:e0:25:f3:42:96:e5:d4:cf:
f0:86:32:c8:fa:21:cf:f1:29:5d:2b:12:82:a1:9a:
71:fe:4e:c7:31:1a:87:de:31:c3:b3:78:f9:dd:fa:
e1:22:35:ed:32:b8:39:ad:ed:cd:18:53:63:59:dd:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:C6:E5:30:77:29:7E:CF:8E:AB:50:E2:00:10:3E:04:AB:79:56
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:19:a5:ed:2d:36:d4:ad:33:87:f0:1a:57:a0:40:a6:f6:
43:e3:7b:81:04:fb:34:5f:09:f5:9d:30:30:a3:d5:8e:a4:0b:
70:5e:40:c4:b7:c4:a0:be:a9:c2:78:d8:4c:09:5d:4a:f8:f1:
f9:91:ce:c1:58:81:8b:8f:ef:68:c7:99:03:20:2e:8e:d7:7b:
05:2d:3e:36:b2:d7:17:58:d6:15:59:31:da:c7:1e:5a:aa:3a:
15:27:a6:17:bc:0c:5d:2a:36:27:74:71:b4:63:86:3f:48:a6:
ec:d2:b5:4e:11:4d:e7:d6:4e:01:dd:7c:2b:44:7c:70:6e:5d:
cf:37:0d:87:a2:21:ca:81:1e:fe:11:d3:a9:4f:61:c2:35:09:
29:50:f9:fb:f8:ff:74:35:2f:12:1c:97:2c:bd:82:58:93:12:
b8:3f:dd:ae:39:a4:d9:d2:40:9e:b6:53:43:a3:fa:ad:c6:ad:
2d:c6:d7:34:9f:85:3f:0a:22:06:5b:a3:d2:93:a5:3b:e2:8d:
86:2a:14:94:94:fb:72:c6:0f:a1:0c:da:df:37:14:5e:0f:1d:
d2:3f:b1:16:76:2e:bb:d4:9c:94:71:a1:1c:58:a4:a9:0a:87:
b8:a9:2c:05:68:66:23:7a:49:87:b9:d5:03:7d:9e:4b:37:9f:
7e:9b:ef:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk8usfBfxyINjbkSgPnhOHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzIzZWVjOTRlZGQwZTc0ODYxNjE1MGUwMGQwNmEyZDY2
OTBmZjIwHhcNMjUwOTEyMDcwMTM3WhcNMjUwOTEzMDcwMTM3WjAzMTEwLwYDVQQD
Eyg5MWRmYzZlNTMwNzcyOTdlY2Y4ZWFiNTBlMjAwMTAzZTA0YWI3OTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSbWUoZvdKdwaFrohEKoA14mi6O
nKi5WCuVJifiH00FWHF+4/Lao72gRR8YMJ4magTvlYgr3nhm7UAfNUHQLr8PwS1A
kPSUZV+QWe6+0frQ0J/2Xnj42k+koU5LSKSz0KLsFq/0VAkwnSBRyJag/0qKiBi5
AflNDTrXgw+jfI6QhYyCsLOazaJyJxtsx0SFrhX/EDUxRRZmQeEnaoXBWvFjGRGF
J7C6SO9rueQPZai1RoMRW3CLhYdtaDM0AKoIzAICVu2SxJtN4CXzQpbl1M/whjLI
+iHP8SldKxKCoZpx/k7HMRqH3jHDs3j53frhIjXtMrg5re3NGFNjWd0osQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHfxuUwdyl+z46rUOIAED4Eq3lWMB8GA1UdIwQY
MBaAFAwyPuyU7dDnSGFhUOANBqLWaQ/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmIt
MTBkZDk1MmUyNDEyLzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mYjdhNDItMTAwMS00ODBkLThhNmItMTBkZDk1MmUyNDEy
LzEvRERJLTdKVHQwT2RJWVdGUTRBMEdvdFpwRF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUQZpe0t
NtStM4fwGlegQKb2Q+N7gQT7NF8J9Z0wMKPVjqQLcF5AxLfEoL6pwnjYTAldSvjx
+ZHOwViBi4/vaMeZAyAujtd7BS0+NrLXF1jWFVkx2sceWqo6FSemF7wMXSo2J3Rx
tGOGP0im7NK1ThFN59ZOAd18K0R8cG5dzzcNh6IhyoEe/hHTqU9hwjUJKVD5+/j/
dDUvEhyXLL2CWJMSuD/drjmk2dJAnrZTQ6P6rcatLcbXNJ+FPwoiBluj0pOlO+KN
hioUlJT7csYPoQza3zcUXg8d0j+xFnYuu9SclHGhHFikqQqHuKksBWhmI3pJh7nV
A32eSzeffpvvMg==
-----END CERTIFICATE-----
Generated at Fri Sep 12 15:15:50 2025 by rpki-client