Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: dNx84hOQZPMWXz9/++QxlvarLKjsjlCHqS0PUbHR+1M=
Subject key identifier: 36:7A:A8:97:70:99:B4:8B:71:06:F3:3C:A0:6A:B6:EE:13:89:CE:89
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0197B933B267360B30DBF69E1F76348016BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 01:01:02 +0000
Manifest this update: Sun 29 Jun 2025 01:01:02 +0000
Manifest next update: Mon 30 Jun 2025 01:01:02 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: 3KJxVbJFe0BK41yEK1Q6c/dBpySM8oPnbd4fTmY68UE=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:b2:67:36:0b:30:db:f6:9e:1f:76:34:80:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Jun 29 01:01:02 2025 GMT
Not After : Jun 30 01:01:02 2025 GMT
Subject: CN=367aa8977099b48b7106f33ca06ab6ee1389ce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:9a:cc:60:9f:97:c0:93:53:a0:e5:b6:f8:
21:d7:a7:11:02:c4:13:ec:d1:5a:8f:d4:fe:76:fb:
7e:f3:4f:1f:5c:42:03:3e:71:de:d9:d9:26:72:b8:
a0:2c:91:ac:f1:d5:93:66:02:d4:d3:9f:3c:cc:fe:
1d:6d:a7:01:61:a6:cf:75:f9:5a:79:dc:0e:28:e7:
a6:d4:6d:4e:92:2f:1e:bc:23:5f:7e:89:25:b2:dd:
3b:4d:47:ef:95:9e:62:6f:e3:34:57:7b:b9:54:ec:
c9:47:ea:cb:f5:a9:4f:13:87:3f:ba:04:df:a6:6a:
da:b3:4a:50:55:27:7f:be:ac:7e:a3:8e:9f:fc:59:
c4:75:83:1e:ad:8b:86:05:4d:bc:ab:a0:d8:d4:4e:
23:b3:a9:e8:86:d2:dc:82:e2:85:26:9c:cc:09:71:
d2:94:36:54:da:9e:8a:30:25:64:1b:49:55:88:78:
5b:47:e1:13:9d:ed:1c:1c:46:13:81:5d:6b:42:fc:
65:30:e5:c4:91:a9:7f:33:4a:77:ab:84:64:22:77:
9f:4d:ba:ad:1b:e8:a8:4f:ff:4f:39:f1:92:d7:25:
d4:87:44:70:56:cc:47:f9:e2:7d:71:21:05:2f:76:
6e:92:a3:1a:ff:29:0c:1f:94:88:a0:98:74:a5:aa:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7A:A8:97:70:99:B4:8B:71:06:F3:3C:A0:6A:B6:EE:13:89:CE:89
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e6:53:51:64:f1:6a:f0:81:5c:47:e1:81:04:6f:67:1a:78:
a2:a7:40:cb:9e:e9:14:fa:e1:a2:7f:78:ed:15:b0:46:af:d5:
07:9e:2f:2a:82:53:13:93:61:7b:3e:9c:0c:f7:d6:a7:58:9b:
2e:5e:53:31:ca:70:e7:66:5f:5e:31:c8:2d:bf:0a:87:45:83:
4b:0d:4b:06:64:3f:5d:31:8e:1b:80:7b:59:dc:00:d4:2c:41:
c5:5f:cd:e0:4d:0e:44:ad:2e:54:cc:90:f7:80:eb:79:f0:07:
52:2e:cb:35:11:8b:5d:5b:f3:29:d6:33:ee:78:44:88:43:4f:
1e:33:0e:9d:53:88:b1:35:c1:fe:61:ef:e0:f7:80:03:c0:92:
de:88:4b:8d:b0:84:4f:2d:a4:ea:35:56:71:6a:87:07:36:f8:
3b:9a:76:78:f8:84:f0:23:33:f5:b1:0d:84:1b:13:f0:9e:12:
74:09:fd:fb:e6:98:f3:24:5b:05:55:d1:f0:f7:09:e9:7b:65:
b0:8e:92:94:42:f1:59:de:70:22:85:da:ee:3a:4b:61:fd:39:
a1:b8:98:7e:16:b4:9c:bd:ae:58:84:8e:15:3d:74:40:9e:9e:
73:a7:21:14:53:01:0b:44:11:0a:6d:aa:8c:f8:45:76:05:eb:
5a:17:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:15 2025 by rpki-client