Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: XMd+SulmRX5oYxxPFVyqVCQHT1IZ3nooIVKpoGPsI8M=
Subject key identifier: FC:D3:FC:15:D2:E8:83:D1:96:4F:D3:54:62:94:58:01:2D:3D:4B:4C
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0199FC8F36BD225C3B89E83BE3BF04365CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: PxfnKJjWgjQukupLKBCNkJu7PgSD20T52t+9styCUVE=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:36:bd:22:5c:3b:89:e8:3b:e3:bf:04:36:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=fcd3fc15d2e883d1964fd354629458012d3d4b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:3e:06:ed:79:6a:5e:14:86:40:f9:d6:f3:
fb:31:e2:ec:79:75:28:45:5a:95:6f:2e:ac:cc:f7:
74:85:f0:67:0c:88:fc:8c:69:e6:78:6f:02:28:04:
c1:23:36:32:fb:46:85:f4:56:b1:b7:1d:81:1c:3e:
5e:f6:27:d6:59:d8:ae:22:85:4c:1b:d5:43:7f:8a:
0b:d8:5e:a4:aa:b8:05:94:b0:aa:99:3a:9c:cb:23:
15:00:b0:27:53:35:19:05:82:d0:a2:4c:01:a3:7b:
33:1b:82:47:ba:72:a9:90:a3:53:76:51:e8:41:84:
66:cc:70:80:bc:98:32:1e:b8:fd:b3:28:75:91:05:
e7:4e:38:f0:3f:08:ea:20:83:e4:7f:cb:7b:87:50:
bc:47:08:82:75:ca:05:02:fa:48:97:42:56:4c:8b:
f6:0f:71:3f:61:a0:12:c5:0f:a7:46:55:1c:4b:30:
55:43:8a:d1:6a:0c:97:ea:69:07:69:0a:13:12:fa:
f9:ff:ec:53:fb:d0:25:eb:df:13:6c:df:c1:b0:2f:
fc:80:29:f5:b4:e4:f4:36:ea:d3:69:41:09:43:c7:
24:f0:b2:43:81:8e:00:b1:9c:0a:66:78:8d:92:1d:
fb:4b:75:24:69:10:ce:4f:bc:84:57:79:ca:bb:fe:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D3:FC:15:D2:E8:83:D1:96:4F:D3:54:62:94:58:01:2D:3D:4B:4C
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8a:86:ad:0d:24:cd:cb:51:6e:a3:25:6f:ca:d0:cb:70:71:
af:ef:df:a3:3b:d9:23:fe:ea:59:27:f2:1b:b6:96:49:d2:22:
98:ca:d2:11:8c:2b:2f:b8:46:de:d8:1d:43:e4:08:77:4a:a8:
88:a5:68:1d:3c:9f:06:4e:e2:89:ab:66:b1:ba:55:e3:f7:34:
20:39:b8:c9:5d:a3:66:54:01:a7:c6:c1:d8:97:3c:48:4b:5b:
a6:bd:2d:d5:27:1b:1e:52:7e:fc:58:44:0d:47:c8:0a:c4:3c:
48:e3:ee:6a:73:9b:65:ad:dc:b3:c2:6a:93:e5:2f:79:2f:3d:
af:52:74:0f:bb:7b:06:7c:e2:61:1a:1a:12:96:bf:9b:a7:7d:
c6:c9:90:dc:4a:48:00:46:ba:40:f2:a2:48:f9:13:59:64:bf:
f6:b7:7f:ac:5d:aa:65:eb:84:78:09:89:f1:31:c3:ab:8d:43:
77:da:7e:d0:1b:cc:91:d9:7f:08:89:96:19:ed:c7:bf:70:1f:
17:f2:74:1c:3d:68:69:cb:d8:46:78:c1:07:ff:56:58:20:07:
e2:c5:23:28:8b:a0:b3:be:16:70:03:14:c0:60:98:3e:aa:c5:
4f:0d:df:19:8c:78:b7:54:d8:b7:f4:6f:b2:d1:0c:15:6c:1a:
7c:73:94:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jza9Ilw7ieg7478ENlziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz
ZjY0YzMwHhcNMjUxMDE5MTMwMTA3WhcNMjUxMDIwMTMwMTA3WjAzMTEwLwYDVQQD
EyhmY2QzZmMxNWQyZTg4M2QxOTY0ZmQzNTQ2Mjk0NTgwMTJkM2Q0YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ4+Bu15al4UhkD51vP7MeLseXUo
RVqVby6szPd0hfBnDIj8jGnmeG8CKATBIzYy+0aF9Faxtx2BHD5e9ifWWdiuIoVM
G9VDf4oL2F6kqrgFlLCqmTqcyyMVALAnUzUZBYLQokwBo3szG4JHunKpkKNTdlHo
QYRmzHCAvJgyHrj9syh1kQXnTjjwPwjqIIPkf8t7h1C8RwiCdcoFAvpIl0JWTIv2
D3E/YaASxQ+nRlUcSzBVQ4rRagyX6mkHaQoTEvr5/+xT+9Al698TbN/BsC/8gCn1
tOT0NurTaUEJQ8ck8LJDgY4AsZwKZniNkh37S3UkaRDOT7yEV3nKu/4S4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzT/BXS6IPRlk/TVGKUWAEtPUtMMB8GA1UdIwQY
MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt
OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw
LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4qGrQ0k
zctRbqMlb8rQy3Bxr+/fozvZI/7qWSfyG7aWSdIimMrSEYwrL7hG3tgdQ+QId0qo
iKVoHTyfBk7iiatmsbpV4/c0IDm4yV2jZlQBp8bB2Jc8SEtbpr0t1ScbHlJ+/FhE
DUfICsQ8SOPuanObZa3cs8Jqk+UveS89r1J0D7t7BnziYRoaEpa/m6d9xsmQ3EpI
AEa6QPKiSPkTWWS/9rd/rF2qZeuEeAmJ8THDq41Dd9p+0BvMkdl/CImWGe3Hv3Af
F/J0HD1oacvYRnjBB/9WWCAH4sUjKIugs74WcAMUwGCYPqrFTw3fGYx4t1TYt/Rv
stEMFWwafHOUJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:12 2025 by rpki-client