Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: Kf3xrtOqafOLqcrrso80pVZFFGJpBzbJKooWDM2gw3s=
Subject key identifier: AB:33:3D:43:55:33:10:89:BC:78:52:CA:23:BE:40:1C:48:01:15:5B
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019747E7C93F76058F3D0FD7A45CD0146F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 01CC
Signing time: Sat 07 Jun 2025 01:01:02 +0000
Manifest this update: Sat 07 Jun 2025 01:01:02 +0000
Manifest next update: Sun 08 Jun 2025 01:01:02 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: CdVQ0GnR2zeeqkDRXFWtrlB9oqbtSZXOipUi7dz+wBM=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c9:3f:76:05:8f:3d:0f:d7:a4:5c:d0:14:6f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jun 7 01:01:02 2025 GMT
Not After : Jun 8 01:01:02 2025 GMT
Subject: CN=ab333d4355331089bc7852ca23be401c4801155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:6b:17:9e:34:98:b8:df:d3:75:bc:19:08:
74:f7:c5:5a:a4:cf:f7:96:5e:f1:5d:f3:2b:c9:bf:
1b:03:e0:06:47:d9:bf:5e:b1:d9:6a:f0:ad:81:12:
8b:04:3e:4d:e0:ea:e9:d9:7e:a2:0a:05:20:da:ac:
cd:b6:e2:e6:44:be:cb:f5:cd:7e:36:0b:12:ed:58:
93:1a:05:56:48:de:6d:2d:b7:b2:e3:04:9d:0b:f8:
66:fb:6d:f5:7a:c2:54:d5:61:bb:ff:52:b9:c1:73:
00:4a:f5:6b:62:55:17:e5:d0:a2:cc:7a:8d:9e:0a:
a9:4e:72:80:1e:df:40:3f:8c:4c:24:5b:61:dd:e2:
08:53:1f:26:79:b0:19:70:6a:82:b3:e2:66:1c:b4:
12:a6:c8:db:5f:90:7f:95:49:03:37:8b:c2:0d:5f:
73:36:81:e6:86:26:eb:f9:17:dd:54:0f:dd:93:de:
81:da:f4:76:29:d6:d0:0e:de:b1:55:02:58:61:5c:
60:f9:f5:70:6c:43:56:49:94:2b:91:26:ed:85:01:
69:6a:e6:72:56:63:04:00:7f:2b:a7:36:66:02:5e:
85:73:be:ba:d5:9b:4f:5c:ba:17:b0:0b:ce:6c:74:
14:2e:66:da:df:5d:22:56:44:1e:f5:1d:19:97:fe:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:3D:43:55:33:10:89:BC:78:52:CA:23:BE:40:1C:48:01:15:5B
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:53:aa:5d:53:cf:68:d5:bd:bd:8f:22:d6:e6:95:f6:be:f2:
e7:36:b7:9f:4c:3d:46:01:09:aa:e3:ec:bd:3b:3c:38:ba:ac:
f9:36:b6:0f:18:01:54:e1:34:39:86:ba:e4:a0:50:f2:46:1b:
df:1c:34:40:91:88:25:d5:a4:fd:09:23:4b:a6:98:7f:f8:3c:
d3:e7:e3:4d:46:05:0c:7d:85:9b:2a:8e:2e:20:6f:b9:01:ec:
ef:3c:39:ce:56:84:c0:ce:ff:73:03:0e:d9:7c:91:76:98:34:
07:08:65:5c:9a:b2:67:f4:e8:37:6e:92:6b:fd:32:0b:1d:2c:
e1:c6:31:e1:bc:b2:4c:75:69:5a:4d:ee:d1:dd:e2:4c:34:cc:
47:41:0a:62:fe:86:4b:fd:0a:d4:99:57:85:10:f9:56:b3:d0:
32:00:07:11:b6:cc:15:e6:f0:0d:f9:cf:5d:2c:c9:1d:ad:ba:
d2:43:52:1b:07:36:e7:71:57:7b:e1:ea:c2:54:35:2c:5f:6f:
15:d5:2f:a7:7b:fd:53:d2:fa:68:55:89:35:e4:a6:e1:16:34:
b3:4f:be:e0:e7:53:c2:dd:5b:59:67:60:fd:57:5d:a1:f6:79:
30:66:6e:d4:d2:b5:a1:c8:23:34:64:51:ac:3e:05:b6:59:9d:
c5:7f:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:17:42 2025 by rpki-client