Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: KK8X4e0REHt2Kcnzmc80C2AOdLYkVVTcMiSc4nAEJaw=
Subject key identifier: 83:8C:9F:EC:99:2D:0F:22:62:70:CE:18:45:F3:11:61:6E:EF:28:DD
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 019A31FC3733387F982BAE07B7D717ECDCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 22:00:04 +0000
Manifest this update: Wed 29 Oct 2025 22:00:04 +0000
Manifest next update: Thu 30 Oct 2025 22:00:04 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: VfA8hNqMwy5whnSL5KnjoqUSoEQdr8Mj55oKUv3hB/o=)
2: YWrqOkxE4kuwAHt0esRIKza-z2w.roa (hash: Q4zyDjmDnvDWNfDLHpwpAtywKuNbvOWbOIgdLd25txk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fc:37:33:38:7f:98:2b:ae:07:b7:d7:17:ec:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Oct 29 22:00:04 2025 GMT
Not After : Oct 30 22:00:04 2025 GMT
Subject: CN=838c9fec992d0f226270ce1845f311616eef28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:21:10:a2:98:b6:91:4d:2c:fe:4a:e1:65:
f8:c5:3d:a7:17:64:c7:0c:94:43:de:49:41:c8:48:
da:cc:96:5f:04:ac:1f:5b:bf:9d:01:51:8e:5e:a8:
7b:99:a9:7b:82:db:fe:67:97:7f:99:5c:23:5f:53:
18:2a:29:d0:03:b3:68:7e:da:ea:46:2b:d6:e9:b7:
72:19:5d:e7:16:df:77:a7:de:89:03:10:03:53:f6:
f6:2b:af:6e:f9:ef:ad:32:f2:d6:ef:6c:ab:75:aa:
f3:58:7d:85:a2:92:41:30:e7:39:5b:11:3c:ce:c6:
bf:63:89:2d:26:cf:b1:76:97:1e:e8:60:df:3c:82:
1d:86:e2:36:b8:09:25:77:68:d4:e0:8d:8f:d2:e9:
a7:84:55:18:38:57:ae:14:98:4d:1b:c2:80:ab:12:
74:e5:b6:5b:a8:d4:6d:9a:e2:7f:1f:70:52:3a:aa:
86:52:ad:7e:89:e6:a7:4f:63:b0:e0:c5:44:42:b2:
a1:40:77:34:a0:c8:f9:f7:de:e0:07:c6:db:28:19:
43:b2:99:bf:fb:dd:8b:9d:88:91:d8:59:0c:a9:0f:
0c:20:64:d1:ee:97:af:e2:2f:a4:6c:7e:6f:74:8d:
ad:f0:99:10:de:5b:b6:96:43:c2:f8:a1:cc:de:dd:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:9F:EC:99:2D:0F:22:62:70:CE:18:45:F3:11:61:6E:EF:28:DD
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:32:44:60:02:97:96:9c:5c:ff:d3:ef:d9:cc:ea:9d:ef:7d:
75:a6:e1:47:12:01:2b:18:e1:7c:b1:44:ec:01:a6:e5:53:85:
45:cf:c8:80:16:50:f3:c3:ab:b6:62:3d:9c:8f:57:cb:51:96:
a1:70:f3:43:99:9d:5e:7a:7a:e6:fb:94:7a:98:bb:08:20:59:
2c:24:d7:37:c3:e8:b1:aa:af:d9:a2:47:b1:d6:95:3f:2c:18:
49:d5:05:c7:54:18:19:6a:3f:9e:8f:64:99:48:78:6f:3a:5c:
de:f9:89:1d:66:cb:a6:a0:11:68:3d:4c:49:c4:7b:06:b5:12:
1a:d6:1b:50:b6:f2:ed:85:ec:28:76:d0:09:a3:cc:12:8a:ed:
80:d1:bb:c0:3e:52:fa:92:a6:73:3a:e3:1c:0a:90:d6:e2:8a:
11:af:54:a5:19:55:fe:2b:6d:d9:ea:9f:0e:02:07:d7:df:dd:
f8:b8:d9:15:e3:c4:bb:bc:ac:7a:a7:32:c5:09:63:ef:50:2d:
78:c2:c0:4f:ce:bc:81:06:d1:26:81:6a:e3:f0:0c:7e:df:e7:
01:9a:a3:e9:e4:08:41:6d:03:c3:7d:fd:84:35:9d:1a:27:b1:
53:55:44:5c:d7:4e:77:d5:17:aa:1b:fd:03:bb:9e:fa:ca:90:
75:02:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:58:59 2025 by rpki-client