Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json)
Hash identifier: mA0ZA5Pidbg7+l+MtDDIREuaW867kqJPtlYznxYrxBs=
Subject key identifier: 39:F3:69:8E:47:ED:4B:7F:4D:35:2E:A6:2E:15:CB:03:3B:B8:E2:9E
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 019655DC94BF5E34688DBAF986744CAF7CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 01:00:41 +0000
Manifest this update: Mon 21 Apr 2025 01:00:41 +0000
Manifest next update: Tue 22 Apr 2025 01:00:41 +0000
Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=)
2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: RubxHw8UKFbMkIc62bsaE0+H0e1sEgtoayc2M7aAfGk=)
3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:94:bf:5e:34:68:8d:ba:f9:86:74:4c:af:7c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Apr 21 01:00:41 2025 GMT
Not After : Apr 22 01:00:41 2025 GMT
Subject: CN=39f3698e47ed4b7f4d352ea62e15cb033bb8e29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3a:8e:59:ba:61:cd:39:66:5a:55:d5:8e:88:
4f:bc:e8:a6:15:63:40:07:f9:53:ec:4c:1e:1d:cd:
47:17:26:78:8e:4a:ee:ba:07:34:d7:45:f8:ce:f2:
54:ba:33:65:38:c4:00:77:72:50:54:f8:63:a1:ce:
e0:e9:4e:e9:58:a4:fb:a7:17:99:3e:a9:d8:5b:9e:
62:d5:0c:06:26:6f:3d:7d:c6:a5:6c:e3:dd:a5:6e:
93:6f:49:94:50:a4:77:e1:99:d8:17:cd:9d:7a:21:
74:31:a5:1b:d1:c8:d9:af:04:3b:b4:ec:35:a3:f4:
ef:f3:7e:10:f0:6d:e9:47:c6:91:8b:ea:a0:52:c9:
ec:8d:12:f7:71:2d:4c:ef:6f:b8:95:00:39:6e:a3:
06:04:68:87:45:ee:b0:7d:e9:5b:f1:d5:1c:3c:65:
9c:03:53:62:99:d5:fa:85:d9:c7:12:58:5c:07:34:
46:60:b2:f1:9a:79:39:59:93:ad:ec:76:43:51:6e:
51:4d:be:cf:9f:be:14:da:27:8e:aa:f8:cc:f0:8d:
31:33:97:28:8f:19:c6:71:fb:70:31:13:83:8e:3a:
1a:7c:6c:de:f0:89:9d:6f:fe:ee:8a:a1:1d:9f:ee:
94:cb:9e:df:d8:a5:96:79:b1:47:d0:b8:6c:8f:20:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F3:69:8E:47:ED:4B:7F:4D:35:2E:A6:2E:15:CB:03:3B:B8:E2:9E
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:00:79:77:e2:a7:42:64:2c:dc:54:c5:c8:a1:99:56:ab:
b9:c2:86:dd:b2:26:3e:fe:97:07:8b:b1:97:1a:5c:7c:d9:cd:
99:28:43:3c:44:8c:d5:13:ff:56:08:59:3b:a0:ae:c7:da:6e:
3c:96:ca:00:37:ab:60:e3:9b:d1:94:92:27:1d:6d:0c:77:2c:
aa:57:13:a3:87:d7:15:e6:11:aa:83:62:95:00:4d:4f:ab:de:
79:ab:17:6c:d7:c0:e9:e0:c3:9f:8e:5c:7a:c7:20:a1:f1:c0:
ac:98:c7:ce:88:09:91:27:e1:39:f9:1e:b5:ab:9e:fd:6c:0f:
ac:44:a8:f5:51:b7:e7:96:94:89:be:e1:7c:8e:04:d3:6c:c9:
47:1b:15:d0:02:0c:57:7c:09:65:36:15:36:21:df:82:a4:61:
46:a8:75:26:85:6e:c2:a3:f9:35:11:6e:8f:3f:7c:c2:25:03:
5a:03:8b:ed:11:cb:5a:48:36:38:42:98:4a:92:14:2c:29:2c:
fb:62:b8:d5:f8:49:f6:21:52:35:eb:ad:03:a0:cf:aa:ad:51:
e9:5f:40:b1:b9:a9:0b:09:02:04:5f:2a:09:33:f7:44:ec:e8:
d1:e1:69:32:86:73:f9:ce:1b:8f:e4:a3:35:bb:af:ed:2c:e6:
0f:a3:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:45 2025 by rpki-client