Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
File: DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft (raw, json)
Hash identifier: IGYHu2s0WtEOGgEgdqyvM7WCDwfAvYSt4Ejm2y3jBAU=
Subject key identifier: AD:AB:62:61:D4:4B:AC:5B:52:F5:87:3D:BB:3A:02:49:C4:6A:41:7C
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 01958FCEDE5CEB067841EEE0411523FDA433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 14:00:53 +0000
Manifest this update: Thu 13 Mar 2025 14:00:53 +0000
Manifest next update: Fri 14 Mar 2025 14:00:53 +0000
Files and hashes: 1: DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl (hash: 6LVkKSRzRRm7YLdjrz6B48ZscSevl/GD/b56X3PAbnI=)
2: zXvVe6nLVwFkSDCiUM6x3r-Uf8g.roa (hash: pz+KoscFR8BxDTxynFStXcnjiXaUWD5kwjcvZLm4qMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:de:5c:eb:06:78:41:ee:e0:41:15:23:fd:a4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Mar 13 14:00:53 2025 GMT
Not After : Mar 14 14:00:53 2025 GMT
Subject: CN=adab6261d44bac5b52f5873dbb3a0249c46a417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:ec:57:1e:7b:f3:7a:a8:24:f8:d1:f2:2c:
06:e5:ab:09:f3:8d:8c:b6:6f:ee:18:f1:49:f2:7f:
22:bd:c5:59:54:b8:36:64:9f:06:bf:42:7a:ec:76:
2f:87:7e:ae:2d:ca:4b:53:8f:fd:48:6a:01:8a:b1:
dc:a7:ca:f8:9c:a2:b5:09:4d:7a:da:69:9e:cc:2a:
ba:5d:18:4b:30:95:43:5e:48:b4:6d:af:0c:71:20:
7e:27:aa:f7:a8:f2:61:ca:01:31:b5:62:f7:61:68:
0e:bf:f8:4b:4c:c7:63:58:c1:d1:a5:f0:1d:59:da:
98:33:b2:88:c8:a7:a7:b3:b3:0b:af:4e:a1:f7:45:
1d:7b:d2:85:4a:2c:f7:ff:28:e8:6d:55:42:76:d5:
83:d2:dc:3a:99:f2:ec:91:0c:f8:60:b4:27:8b:63:
db:b0:35:35:b3:c9:ff:c2:dd:d6:0f:81:d6:ea:81:
ea:51:93:be:72:39:a8:46:b2:7c:2f:3a:3b:88:86:
46:8a:80:29:b1:92:68:1c:88:ba:e3:f8:79:42:cd:
1b:01:39:32:c4:8f:59:72:1a:37:ad:b8:e5:55:89:
13:15:75:56:9e:85:ef:84:fe:2f:2e:10:a0:8d:39:
11:a1:83:8c:b3:c9:e1:d6:f5:0b:5b:4f:2e:ac:f3:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AB:62:61:D4:4B:AC:5B:52:F5:87:3D:BB:3A:02:49:C4:6A:41:7C
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ee:56:1d:c0:d5:96:80:5e:22:7e:35:eb:55:05:a2:28:af:
97:af:6c:3a:83:e6:57:9e:3d:94:f8:81:cb:43:6f:7c:1b:cc:
c2:d1:3e:7f:52:46:3e:f6:a9:01:ed:98:ec:04:59:51:6c:98:
77:a5:8a:d8:89:02:b4:61:eb:17:18:0f:2f:5d:71:e5:32:2a:
06:a6:c0:04:ee:c3:1d:e4:ef:c2:55:f9:a6:98:86:47:44:e9:
10:1d:25:89:8c:07:ed:f5:13:26:4c:3f:af:f7:6c:10:b7:c4:
32:27:0c:b0:45:2a:56:07:05:07:f9:27:26:5f:7c:50:57:5a:
c7:e1:8c:cc:6a:35:b9:47:14:28:15:75:50:6a:9e:4c:cf:33:
1a:9f:5b:fc:3e:5c:16:53:5c:7d:b9:10:10:00:e2:96:72:14:
b0:59:8b:cb:68:ef:96:cb:b0:67:fb:c5:e1:a4:4f:2e:72:21:
77:eb:7a:30:8e:be:72:68:a0:14:06:92:6e:1e:14:9f:ed:87:
b7:1d:11:eb:42:d8:7c:3a:2e:53:81:e9:89:62:28:0e:d6:22:
a7:1d:2a:61:38:f4:5c:53:fc:b7:96:03:49:81:32:55:e9:c3:
05:34:3d:4b:98:43:c2:f8:19:09:95:27:9c:e9:7b:d4:21:3b:
91:2f:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:01 2025 by rpki-client