Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: oUXlFwqZNzCCmJfQ+GScDlqrApQ0ytAbFmJQ6EDkMUU=
Subject key identifier: A5:68:2E:F8:50:54:1F:35:4D:B4:E0:7E:17:2A:2A:8A:0D:33:A8:61
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0196ACC3CF446F8DF843AACA859D68091CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 22:00:35 +0000
Manifest this update: Wed 07 May 2025 22:00:35 +0000
Manifest next update: Thu 08 May 2025 22:00:35 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: Yx0+xYs+yHDWzLe5SrARAa2wqYawVRQDHtov5mL5fcQ=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:cf:44:6f:8d:f8:43:aa:ca:85:9d:68:09:1c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: May 7 22:00:35 2025 GMT
Not After : May 8 22:00:35 2025 GMT
Subject: CN=a5682ef850541f354db4e07e172a2a8a0d33a861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:10:8c:a3:45:b9:46:ac:c0:7b:bd:41:c4:
f2:2e:05:fc:ad:7a:fe:b2:8a:86:08:3a:94:47:47:
ac:16:0e:60:ff:d3:84:6f:59:b4:28:f6:e2:a5:ce:
f0:43:58:52:3c:74:0f:2f:9e:78:bf:ca:0d:e0:b8:
9c:30:f7:d3:de:fd:d9:bf:09:54:59:04:27:33:06:
bc:b4:09:50:1f:1d:f3:47:f4:e2:d9:df:e9:70:f0:
dd:21:20:18:4b:a8:60:2c:58:51:03:c2:cf:e0:56:
21:da:b7:3d:76:21:1d:78:c4:94:91:ea:75:aa:8c:
96:80:d9:b4:97:43:ca:5b:85:f7:62:da:28:4c:5d:
28:30:3f:b5:78:70:04:a0:5e:a2:b9:a2:e9:01:b7:
61:db:f5:6b:b9:9e:53:4b:91:ad:56:fb:2f:ae:7d:
e8:7c:ba:19:86:4f:4c:94:be:5e:c3:93:1a:fe:7b:
34:1a:5c:44:1d:35:c3:a1:ba:55:9e:a7:b7:f7:2d:
d5:db:2b:b0:3c:c9:71:f4:c7:b9:6f:59:df:f8:f3:
51:7e:b2:9a:e1:c8:2b:c2:cd:37:8c:2c:fc:6b:57:
e5:ab:06:ba:81:79:d6:ff:96:bb:bd:bc:11:b3:97:
46:ca:d1:3f:72:fc:40:ad:a4:e0:44:0a:8a:04:ae:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:2E:F8:50:54:1F:35:4D:B4:E0:7E:17:2A:2A:8A:0D:33:A8:61
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6f:bb:4e:38:8d:ef:8b:fb:21:72:0c:57:8d:55:20:73:46:
a0:b4:8c:ae:68:92:f3:05:8f:4b:54:55:94:f3:d2:51:be:49:
a6:af:1b:cd:2d:38:c8:07:83:bd:76:86:97:73:c6:db:65:e1:
7e:81:ad:eb:c9:9c:ae:65:f7:ff:58:f1:95:07:48:e7:5d:16:
99:fe:fc:01:24:a1:08:b6:8f:30:a9:23:11:ea:8e:5c:fa:ca:
78:3c:dd:ab:75:45:50:31:e5:ff:b3:fd:86:25:74:de:ba:5d:
bf:43:3c:de:d5:e3:bc:17:9d:d5:41:a5:2c:d0:46:58:4c:2c:
77:95:da:8a:51:4c:d0:18:d6:66:a9:d5:cb:12:0c:9d:b8:fb:
9c:df:c0:b2:47:93:4f:01:d6:61:85:a6:eb:88:d1:d3:5d:2e:
b6:cd:81:40:ef:79:d1:81:76:0f:75:41:e7:0e:c2:99:22:0e:
84:5b:87:ea:a7:0a:75:8b:de:29:30:af:96:a5:e2:d4:dc:ce:
82:38:72:ef:65:d0:07:58:22:59:34:18:eb:d2:a7:4d:e7:56:
78:68:98:15:fe:66:85:9f:fd:cd:d5:78:50:ef:d2:7c:ed:df:
8b:b7:0d:e3:1d:dc:bc:b3:11:39:e1:e9:f8:e0:5e:7c:1e:d9:
57:43:a4:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasw89Eb434Q6rKhZ1oCRzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz
ZjY0YzMwHhcNMjUwNTA3MjIwMDM1WhcNMjUwNTA4MjIwMDM1WjAzMTEwLwYDVQQD
EyhhNTY4MmVmODUwNTQxZjM1NGRiNGUwN2UxNzJhMmE4YTBkMzNhODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfwQjKNFuUaswHu9QcTyLgX8rXr+
soqGCDqUR0esFg5g/9OEb1m0KPbipc7wQ1hSPHQPL554v8oN4LicMPfT3v3ZvwlU
WQQnMwa8tAlQHx3zR/Ti2d/pcPDdISAYS6hgLFhRA8LP4FYh2rc9diEdeMSUkep1
qoyWgNm0l0PKW4X3YtooTF0oMD+1eHAEoF6iuaLpAbdh2/VruZ5TS5GtVvsvrn3o
fLoZhk9MlL5ew5Ma/ns0GlxEHTXDobpVnqe39y3V2yuwPMlx9Me5b1nf+PNRfrKa
4cgrws03jCz8a1flqwa6gXnW/5a7vbwRs5dGytE/cvxAraTgRAqKBK4Q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVoLvhQVB81TbTgfhcqKooNM6hhMB8GA1UdIwQY
MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt
OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw
LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2+7TjiN
74v7IXIMV41VIHNGoLSMrmiS8wWPS1RVlPPSUb5Jpq8bzS04yAeDvXaGl3PG22Xh
foGt68mcrmX3/1jxlQdI510Wmf78ASShCLaPMKkjEeqOXPrKeDzdq3VFUDHl/7P9
hiV03rpdv0M83tXjvBed1UGlLNBGWEwsd5XailFM0BjWZqnVyxIMnbj7nN/AskeT
TwHWYYWm64jR010uts2BQO950YF2D3VB5w7CmSIOhFuH6qcKdYveKTCvlqXi1NzO
gjhy72XQB1giWTQY69KnTedWeGiYFf5mhZ/9zdV4UO/SfO3fi7cN4x3cvLMROeHp
+OBefB7ZV0Okdg==
-----END CERTIFICATE-----
Generated at Thu May 8 07:31:50 2025 by rpki-client