Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: t5LG3z2PR7ZxXX2tkls+DleQGXd3eTLOm5Va9CrPDck=
Subject key identifier: 45:64:26:AC:65:45:E9:8F:D0:5D:72:63:ED:D8:FD:7E:19:A1:7F:07
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0198481B6D1444F79E2334D211DB79E8B168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 19:00:13 +0000
Manifest this update: Sat 26 Jul 2025 19:00:13 +0000
Manifest next update: Sun 27 Jul 2025 19:00:13 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: vv1/uWr/AUrSJQCpCQ4uJkp4Vteyl0XdNOLtRWe1joY=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:6d:14:44:f7:9e:23:34:d2:11:db:79:e8:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Jul 26 19:00:13 2025 GMT
Not After : Jul 27 19:00:13 2025 GMT
Subject: CN=456426ac6545e98fd05d7263edd8fd7e19a17f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:72:a3:41:9c:d1:a6:ee:0e:7d:4c:21:13:
cd:2f:77:0a:ec:c4:e8:cd:fd:02:b2:e9:8f:33:2c:
7b:26:7d:d3:11:0c:c3:87:95:0a:51:12:d8:47:f0:
3f:c9:22:92:ce:be:f3:b0:5e:99:23:20:ae:36:ab:
35:5a:15:7c:e8:4d:67:47:73:bf:a0:ca:25:6f:91:
3a:c8:cb:0f:d9:9d:ed:2d:be:73:62:9c:10:b8:4f:
3f:31:e4:e5:ed:c9:79:d4:7a:4c:76:df:14:e3:32:
15:4c:fd:d9:3c:70:83:19:aa:54:e8:69:77:b2:02:
69:bd:af:6e:48:19:a7:fb:23:08:05:b1:29:18:e1:
31:a0:b0:d1:15:19:23:5b:02:d0:b4:07:f6:a0:62:
e8:be:79:35:0d:d9:17:00:bf:50:b5:76:ad:48:5d:
af:67:97:55:33:63:2e:f2:da:f0:98:ad:c1:00:ea:
17:a4:a9:d8:c3:58:b0:de:d1:9f:4c:04:71:d3:74:
2f:4f:3c:62:84:99:f3:36:5c:09:2b:a1:34:0d:5b:
62:f9:5d:cf:de:e6:9a:6e:57:ef:99:02:04:1f:8e:
0a:55:cf:ae:1a:03:93:aa:64:ec:d5:8a:aa:ac:c7:
39:23:8d:54:fd:8c:1b:af:c0:d8:e1:6b:6e:03:9a:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:26:AC:65:45:E9:8F:D0:5D:72:63:ED:D8:FD:7E:19:A1:7F:07
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:f5:32:06:27:04:5d:3a:f7:2e:19:8b:68:cc:ba:e5:05:
a0:c1:b1:62:b6:70:4c:6c:85:b7:fd:0d:b9:41:c9:bb:de:69:
74:70:f9:2b:b3:a3:94:c8:fb:72:97:4d:f6:0d:b1:c4:8e:a3:
03:e4:77:1c:83:14:f0:17:e7:a9:8c:a8:a1:8b:d2:f6:c0:83:
19:fb:9a:3c:d5:4f:27:cb:9e:e5:06:30:bf:95:d5:7f:93:cc:
c8:c1:e0:a7:a6:6f:c3:3e:ce:31:bc:d9:16:16:25:73:47:9d:
bb:08:28:b5:43:82:ec:04:fa:c5:f2:f1:6d:5a:80:e1:77:af:
07:df:e6:02:70:1b:09:5e:2d:77:e6:1b:4c:d9:1f:4e:dd:05:
37:fd:0e:9b:81:53:f1:00:a5:78:55:4c:1c:e4:7e:d3:a3:3f:
c5:55:a9:cf:1e:4b:7f:2a:3c:78:a9:21:aa:af:16:3a:61:5c:
bf:77:95:bf:aa:3e:eb:60:5c:b4:6d:ec:9b:61:d5:e8:cc:9b:
12:14:55:aa:bb:69:df:14:af:78:ad:2d:7b:34:e6:5b:ec:72:
bd:44:3b:a9:cb:2e:67:30:eb:aa:c1:5f:80:3a:a3:e1:2e:88:
e5:28:95:96:54:de:6f:e0:5d:a7:47:53:8b:95:ec:69:ab:3e:
49:dd:8d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG20URPeeIzTSEdt56LFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz
ZjY0YzMwHhcNMjUwNzI2MTkwMDEzWhcNMjUwNzI3MTkwMDEzWjAzMTEwLwYDVQQD
Eyg0NTY0MjZhYzY1NDVlOThmZDA1ZDcyNjNlZGQ4ZmQ3ZTE5YTE3ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cxyo0Gc0abuDn1MIRPNL3cK7MTo
zf0CsumPMyx7Jn3TEQzDh5UKURLYR/A/ySKSzr7zsF6ZIyCuNqs1WhV86E1nR3O/
oMolb5E6yMsP2Z3tLb5zYpwQuE8/MeTl7cl51HpMdt8U4zIVTP3ZPHCDGapU6Gl3
sgJpva9uSBmn+yMIBbEpGOExoLDRFRkjWwLQtAf2oGLovnk1DdkXAL9QtXatSF2v
Z5dVM2Mu8trwmK3BAOoXpKnYw1iw3tGfTARx03QvTzxihJnzNlwJK6E0DVti+V3P
3uaablfvmQIEH44KVc+uGgOTqmTs1YqqrMc5I41U/Ywbr8DY4WtuA5piYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVkJqxlRemP0F1yY+3Y/X4ZoX8HMB8GA1UdIwQY
MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt
OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw
LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNP1MgYn
BF069y4Zi2jMuuUFoMGxYrZwTGyFt/0NuUHJu95pdHD5K7OjlMj7cpdN9g2xxI6j
A+R3HIMU8BfnqYyooYvS9sCDGfuaPNVPJ8ue5QYwv5XVf5PMyMHgp6Zvwz7OMbzZ
FhYlc0eduwgotUOC7AT6xfLxbVqA4XevB9/mAnAbCV4td+YbTNkfTt0FN/0Om4FT
8QCleFVMHOR+06M/xVWpzx5Lfyo8eKkhqq8WOmFcv3eVv6o+62BctG3sm2HV6Myb
EhRVqrtp3xSveK0tezTmW+xyvUQ7qcsuZzDrqsFfgDqj4S6I5SiVllTeb+Bdp0dT
i5Xsaas+Sd2Nbg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:08 2025 by rpki-client