Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: LwXtRsMZfYeNoCToHumBlqzLU0pRjlLzPX0qOP4QeRY=
Subject key identifier: D8:B7:BD:CC:A9:4C:AB:DC:FA:7A:F9:F1:54:96:12:08:0F:0C:D8:D9
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 01983570B105E4A5630FAC5A93B44D87DF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0247
Signing time: Wed 23 Jul 2025 04:00:34 +0000
Manifest this update: Wed 23 Jul 2025 04:00:34 +0000
Manifest next update: Thu 24 Jul 2025 04:00:34 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: c4zDkXjj+727Ryknvd9ERgMry6EVFna+970JK2n26Ow=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:70:b1:05:e4:a5:63:0f:ac:5a:93:b4:4d:87:df:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jul 23 04:00:34 2025 GMT
Not After : Jul 24 04:00:34 2025 GMT
Subject: CN=d8b7bdcca94cabdcfa7af9f1549612080f0cd8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:0a:ea:ee:3f:0f:ee:8e:55:70:cd:88:92:
b2:82:f7:a3:c3:ef:e3:75:46:83:9b:0b:74:3d:84:
a0:64:5a:69:7f:9f:31:62:27:cf:c3:02:54:49:5b:
92:ff:1a:ca:5c:b7:fd:18:21:39:cf:3a:e8:ce:42:
fb:70:0d:10:d8:80:68:41:2b:2b:5b:97:a2:df:cf:
74:ea:4a:12:d3:5f:27:c4:39:24:28:b2:ff:35:78:
7a:28:a8:23:1a:8d:5b:05:4e:86:53:b0:4a:6d:bb:
8a:e5:75:ed:be:bb:1e:11:72:d6:55:26:95:a7:4c:
00:19:98:8f:2d:cb:fe:57:47:bf:79:6c:34:5f:78:
46:7a:82:2b:35:65:0b:55:47:ba:b9:4c:2a:b5:e8:
74:03:11:31:6f:4f:0a:9a:8e:4d:6e:eb:42:d4:35:
7d:18:5c:f6:34:c9:4a:ef:64:55:ec:da:23:75:dc:
95:8b:a4:56:05:af:10:f2:3b:df:1b:47:2c:5b:79:
19:29:95:46:52:b1:2a:7f:9c:2c:64:74:2d:82:f5:
1f:63:ef:8e:58:77:1c:14:95:94:28:32:8c:bc:3a:
4f:76:c5:4e:98:2b:a0:70:2b:9e:92:f1:2f:e8:e1:
90:01:b0:22:76:0a:ec:b3:93:08:12:46:46:35:24:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B7:BD:CC:A9:4C:AB:DC:FA:7A:F9:F1:54:96:12:08:0F:0C:D8:D9
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:65:8b:43:83:1f:17:47:c3:d5:02:23:3c:2a:af:44:8e:55:
18:91:77:62:71:4a:33:1c:86:3f:44:6e:53:a9:6b:fe:08:be:
69:9b:ee:a6:97:cd:fb:61:7c:e5:8b:16:1b:7c:4b:60:ae:84:
04:bc:47:f3:e3:d3:08:12:af:83:09:a6:1f:eb:df:53:a2:70:
53:6e:5c:bd:f8:cd:cf:78:dc:ce:87:e3:09:e1:5d:b7:a2:98:
0d:d2:e9:6c:8b:e0:d8:01:19:f5:2d:81:46:3a:4e:8c:9a:59:
a2:14:05:32:2b:c4:c4:40:fa:dd:1a:12:ea:48:0e:1e:bd:82:
8b:db:ce:73:5d:a6:af:4c:9a:0e:0b:3e:f6:0e:ff:9a:db:7d:
76:d9:37:5c:16:7e:0c:2d:0a:cf:a8:27:2a:cf:f6:1b:e0:be:
27:78:ba:90:40:bc:62:35:22:00:80:18:50:ca:61:ba:64:64:
d1:17:45:bd:d4:b3:ac:9a:a3:20:d5:fd:75:84:e2:b7:bc:60:
7c:fc:ea:92:be:60:2a:0d:6f:0a:fb:02:29:84:ea:21:46:b3:
61:88:95:ea:d5:65:c0:67:c2:c4:9a:34:41:da:26:18:65:dc:
a3:bc:1f:94:da:10:94:d5:aa:bb:ce:b6:54:4d:a8:41:b6:2a:
c2:93:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:15 2025 by rpki-client