Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: 2MksnkVFlp2SoDehWZqxZhw47a/Wbeu+va7T+1Yz+is=
Subject key identifier: DB:6A:6D:0C:65:97:63:F4:EB:94:F4:0A:43:B6:C0:54:89:BC:88:11
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0194C4D12F08BACDD36179E13941731248E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 7F
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 074xEp3THe5j/wkHMxjyTGpuy6NJICBr90qWmIP0z8o=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2f:08:ba:cd:d3:61:79:e1:39:41:73:12:48:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=db6a6d0c659763f4eb94f40a43b6c05489bc8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:8a:79:26:d5:34:e4:c6:35:0a:3e:c6:64:
2c:52:f3:b5:58:7d:a0:d2:a9:a6:65:92:48:e4:20:
c6:65:1a:a3:be:6c:6f:e4:00:0b:1e:64:3d:ab:7c:
d2:2a:84:be:76:84:7c:85:37:1a:3a:f0:ec:a1:55:
5e:42:f0:b9:69:c6:8c:e7:cb:29:46:ac:34:f5:ef:
3c:6f:3e:f4:fa:78:06:af:50:5e:1b:31:af:c3:7f:
ce:58:dd:45:08:e1:7a:4d:38:81:f1:50:aa:eb:b8:
91:65:aa:64:e5:a3:4a:3e:7c:f5:90:66:bc:eb:d7:
be:ed:2f:97:60:8f:7e:5d:c8:ae:47:9a:b7:ae:d9:
f8:e6:44:19:46:d8:de:08:32:ad:ec:b3:46:d1:0d:
e9:0d:ca:41:a3:43:8b:38:0e:1b:7e:ad:98:a4:77:
bb:34:47:f5:d8:99:ca:b9:cd:94:76:34:ad:f6:86:
5f:b6:a9:73:e1:df:3d:51:a3:df:ec:6e:ab:d9:d0:
fb:08:fc:f4:15:8f:d5:7b:1a:ee:70:db:63:cc:86:
09:2b:dc:6b:ef:89:85:c5:a8:50:c7:90:96:9a:02:
34:13:c2:d0:6e:16:ea:80:d8:67:a8:45:e1:68:33:
54:e2:a4:b9:5b:5c:e7:67:7e:60:15:1f:b3:22:70:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:6D:0C:65:97:63:F4:EB:94:F4:0A:43:B6:C0:54:89:BC:88:11
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6b:c3:1a:a1:fa:d4:83:92:9c:3a:44:56:46:ec:b6:54:b2:
64:2d:cf:e1:75:9e:21:24:7f:bc:d0:b0:1e:a7:c6:24:b0:b0:
ca:fe:2f:c3:11:d8:6b:73:70:a3:4e:af:de:1d:15:70:71:f5:
7d:f8:f7:96:44:ee:61:2e:5b:5e:5c:a9:dd:73:42:c0:f3:6d:
50:78:d9:7d:63:22:a3:29:f7:f1:56:f9:16:14:4d:cf:98:b8:
36:d4:63:b6:cd:cf:4e:05:9d:8f:6d:ed:2f:ee:b5:77:f9:17:
fd:3d:8f:08:54:cb:88:b8:ab:e9:e0:54:21:f6:29:30:3b:42:
54:87:b9:c0:08:c0:81:1e:49:32:85:d3:d7:51:58:fd:68:a8:
7b:68:14:7b:90:b0:5f:a7:4c:31:69:d9:ca:42:8a:14:a1:02:
a8:68:dc:ac:16:18:4a:3e:c6:b9:73:59:fe:79:65:5b:a6:12:
c8:57:c7:ad:f3:a5:f5:20:cc:e2:0a:2f:a3:57:8e:63:38:61:
8b:7f:f8:de:d4:4c:2a:cb:37:91:f0:9a:63:33:b8:9e:e2:f4:
84:dc:4e:9a:6a:5c:71:a0:cf:f3:47:ae:29:47:d3:c6:6a:f8:
3b:bd:6a:18:97:20:c0:32:48:67:93:cb:4f:d1:22:e9:66:80:
c1:fd:7a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:56:13 2025 by rpki-client