Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: MgDAlzVpFFcNidqvRDg0FnrjTP1ZfFse/pGIlVxMvVk=
Subject key identifier: 83:AC:D0:FE:F4:E3:D3:A7:39:27:E1:9A:59:A4:44:F1:35:4C:09:97
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019A232E0E1F1F3BF12C6FCC95EB481D0B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 01:00:12 +0000
Manifest this update: Mon 27 Oct 2025 01:00:12 +0000
Manifest next update: Tue 28 Oct 2025 01:00:12 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: gHa6YY8meS2Rnkrv6Td3FVCr7cyBdgTE6wMpZws9cNo=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:0e:1f:1f:3b:f1:2c:6f:cc:95:eb:48:1d:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Oct 27 01:00:12 2025 GMT
Not After : Oct 28 01:00:12 2025 GMT
Subject: CN=83acd0fef4e3d3a73927e19a59a444f1354c0997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:3d:b2:19:30:13:e0:61:2c:ea:99:39:5c:
7b:b6:2c:5e:f3:27:81:c1:ad:47:d6:04:a6:e4:55:
82:b4:a2:89:44:62:6d:e0:f9:cf:90:af:23:a3:21:
e5:1a:eb:85:28:95:f2:af:d4:18:93:8f:ac:31:c2:
ba:fb:3f:50:77:9c:c1:cf:cb:9a:dd:eb:f4:89:27:
18:7d:20:59:cf:44:71:f4:a1:d4:01:f9:72:45:33:
c6:df:96:2c:08:44:36:49:26:d2:35:ae:b0:ab:18:
03:ea:82:11:43:8d:e0:c6:53:ee:a0:83:20:4d:8b:
ed:c7:ed:a3:fc:a2:75:f3:0e:a7:bb:3f:51:4c:e1:
99:02:5d:72:20:0e:20:cc:38:8f:16:6d:e3:54:85:
51:fb:ea:06:ce:b3:40:b5:0d:4b:50:bc:3e:a1:fd:
51:19:62:73:2e:89:d5:31:64:80:0e:3d:25:8a:74:
12:04:68:70:0c:c5:f2:66:11:43:71:2f:a7:17:70:
12:de:c5:74:f8:85:61:c0:0f:6d:ac:6b:96:c2:a4:
1e:0e:10:ad:fb:3e:cd:ed:01:76:ec:a8:82:35:86:
10:5a:f2:2d:36:b3:4f:20:d3:87:34:4e:c1:f0:c1:
d3:9d:28:d8:8e:f0:9d:29:6e:37:db:14:63:58:f7:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:D0:FE:F4:E3:D3:A7:39:27:E1:9A:59:A4:44:F1:35:4C:09:97
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:47:8e:b4:39:48:ea:19:9f:32:82:6d:2b:52:38:a1:7a:47:
2a:a4:2e:3e:3b:2a:56:86:fd:96:b5:da:57:70:44:0b:96:29:
ba:be:99:39:9d:13:8a:ef:c3:75:42:2a:62:2d:49:05:b8:56:
32:14:94:ad:07:2d:b5:90:c6:f3:b9:5f:93:e0:47:5e:aa:c4:
6d:46:fe:84:2c:23:90:03:d9:3a:9e:17:3d:41:8f:28:25:19:
0d:ca:48:89:7f:87:ab:4d:cf:b4:2c:bd:15:57:f0:90:33:81:
32:ed:3d:38:71:1a:94:bc:30:3a:c3:9e:be:8d:bb:bd:35:a9:
d0:c4:58:99:f7:20:c0:c4:89:4d:43:44:c1:30:58:c8:3a:d3:
37:f2:68:5c:ab:4a:fb:df:02:5c:d8:ed:6b:4d:d4:91:9f:89:
ac:8b:7e:c7:71:fa:e0:7d:32:ea:a3:03:4a:05:0c:78:f9:63:
57:44:e5:31:7b:5f:31:3a:1c:6f:24:71:ec:f8:e3:29:31:9b:
ad:cd:1a:da:3e:d8:48:40:5d:2d:31:5d:66:01:fd:d9:b3:ee:
cc:30:0d:ce:71:ba:43:e6:88:c4:1e:fe:a7:6d:2d:ed:93:67:
c1:07:f6:b5:ca:77:01:f7:7f:99:28:d1:95:50:47:36:09:14:
7d:32:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:58:24 2025 by rpki-client