Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: +/6bS+/+2Wb1PoUCyBbk04aAT44cs+Gz6VxgZkRiGKU=
Subject key identifier: FF:FB:C2:57:FE:97:21:B9:F3:9E:81:B9:C7:EA:02:FD:6E:85:DA:C2
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0198D515F30551A3010E23371EE3BFC7D93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: Hb70qpkSJZ0shO5fuLOVxwrtqQNs6yISEB4crrx4gCU=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f3:05:51:a3:01:0e:23:37:1e:e3:bf:c7:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=fffbc257fe9721b9f39e81b9c7ea02fd6e85dac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:e7:8b:99:50:0a:b9:93:fb:5d:70:d4:8c:
e8:19:74:01:90:06:c8:d1:6f:d9:e3:86:ae:1c:89:
a3:26:b4:f2:fe:39:7c:7a:c7:00:a7:5e:8c:29:9d:
d6:73:49:e8:7f:b6:07:e0:ba:8b:c3:6a:12:9b:61:
e9:bf:0e:d1:47:66:39:1c:fb:09:95:12:dd:cf:0d:
47:27:87:5d:44:7d:e8:13:e4:dc:47:e2:5c:4b:56:
3f:7a:9b:82:c7:78:d7:a8:e1:51:bd:1e:bf:c1:5f:
a9:75:de:23:eb:15:94:bc:04:49:aa:45:89:90:4b:
cd:09:50:5b:6b:0c:79:ed:c3:29:fd:1d:3c:3d:68:
74:11:56:c1:bd:1a:1b:dc:48:93:ee:79:9d:42:55:
1c:e2:2e:6f:3d:a5:47:b1:64:cd:1a:e8:ab:0b:7d:
6c:ad:54:3d:b8:86:80:ed:2d:76:38:9e:08:5f:56:
2a:36:67:52:20:dd:a3:06:7b:e0:52:0e:72:11:c0:
6d:c5:d0:1e:18:3d:05:67:26:dc:b5:42:84:a8:c2:
28:fd:96:3b:e3:7b:5a:1f:7e:56:47:5d:31:79:d9:
7a:9a:4d:5d:cf:0e:3e:ef:63:0f:cb:d0:47:75:1a:
cd:51:fc:36:eb:b0:07:a1:94:68:fd:b2:46:d7:77:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:C2:57:FE:97:21:B9:F3:9E:81:B9:C7:EA:02:FD:6E:85:DA:C2
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:89:b9:f6:f8:00:fd:30:95:dc:19:73:7e:60:3d:94:1d:e5:
4f:aa:6e:54:5c:03:ef:44:49:64:67:89:5e:33:7c:c3:55:5d:
2c:4a:32:55:15:1f:96:bd:9a:fd:eb:13:85:94:ad:1b:79:cf:
68:71:62:c9:af:a3:3d:f5:60:68:de:ad:2d:a4:e4:73:7b:7b:
d4:8d:7e:92:47:87:34:ed:fe:e6:29:a0:8b:de:2a:f7:b2:fb:
d1:6d:a6:38:79:8c:46:fd:29:16:6d:7d:18:f3:78:03:75:2c:
08:86:63:ab:9d:b7:e4:85:8d:01:24:93:6c:8f:cf:d5:12:83:
ef:bb:64:a1:5d:84:3d:46:59:4a:44:56:6a:63:81:ff:1b:2b:
35:62:9d:60:4e:d6:4f:23:c8:91:6f:cd:46:d5:88:b0:bc:94:
df:be:46:14:9d:6c:f4:a4:bb:02:61:70:a7:1d:15:ef:64:da:
35:a6:0c:11:6d:7a:10:1f:23:0f:55:7a:07:41:57:f1:4c:7f:
79:41:6b:d9:df:41:70:ac:5f:ee:d7:40:b4:5a:a1:c0:d5:7c:
42:64:5a:85:0d:39:4f:bc:25:01:98:23:b0:0f:66:5f:ad:87:
7e:56:15:44:f4:f6:5a:a8:b2:3f:bc:30:57:d5:2c:3b:5a:d7:
19:29:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:33 2025 by rpki-client