Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: M8k761vGFdRYL+fEeaFf0VyOGmfW0Sd7ulwybXu7Cxo=
Subject key identifier: 4A:64:53:48:DE:1B:55:09:8F:8F:C5:69:05:C0:11:C0:20:AA:CD:BF
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019A2F690FD31288E0E0B9F724B8B94341F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 034D
Signing time: Wed 29 Oct 2025 10:00:05 +0000
Manifest this update: Wed 29 Oct 2025 10:00:05 +0000
Manifest next update: Thu 30 Oct 2025 10:00:05 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: xIwR0IyNdEYaAcPmo3G2VrMQLl9a5xPktK2yaqCxIqo=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:69:0f:d3:12:88:e0:e0:b9:f7:24:b8:b9:43:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Oct 29 10:00:05 2025 GMT
Not After : Oct 30 10:00:05 2025 GMT
Subject: CN=4a645348de1b55098f8fc56905c011c020aacdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:46:bf:75:c3:b6:39:90:31:d1:ab:27:ae:
93:82:41:41:79:b3:7a:c7:14:c8:25:b1:e6:8d:35:
29:c2:db:92:81:96:d7:cb:c8:d3:ed:93:f8:74:79:
c2:ee:96:bf:a1:3d:ef:e2:18:e5:c7:79:a2:93:2f:
5b:ea:ac:a0:44:17:13:42:9c:52:2e:f8:8a:0f:97:
92:34:a3:92:c3:ee:52:5c:96:3a:68:30:c7:a4:3a:
84:b1:21:74:59:33:29:53:ed:ff:04:f4:07:98:22:
29:0a:84:5d:6d:ba:58:8e:77:93:ec:14:42:48:28:
db:2a:44:98:21:90:d2:15:c7:00:ab:90:7a:06:db:
76:ec:cf:91:87:a9:76:99:39:8d:7c:13:d6:07:d5:
e9:fd:04:37:12:85:25:f6:69:55:57:a5:cd:88:2d:
ea:e2:fe:c7:9f:00:ed:e6:48:31:b0:ea:61:8d:54:
61:aa:2c:19:71:8b:bd:40:37:c1:e5:2d:fe:a9:37:
09:6a:fd:1d:c5:ed:a7:02:34:eb:7b:aa:19:36:44:
4e:4c:a5:d2:84:eb:d3:6d:4d:92:e7:58:2c:c3:83:
88:22:55:5e:b2:ba:e6:58:bb:7b:10:42:e9:db:ce:
eb:cb:ba:97:25:47:21:6c:fb:42:1f:bb:5e:c6:bf:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:53:48:DE:1B:55:09:8F:8F:C5:69:05:C0:11:C0:20:AA:CD:BF
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:20:e8:c8:27:94:2b:73:5a:79:1e:0d:73:7f:34:f7:33:
21:40:3a:85:bd:68:f5:91:20:8a:01:65:14:46:ae:61:c4:ac:
52:ba:ff:01:f7:56:7a:ea:3d:c9:16:c0:5d:e5:8e:1b:ae:b5:
a6:d4:7b:27:a9:48:70:5b:8f:5b:6f:1c:67:7b:a8:84:20:f5:
6c:5d:6a:0a:26:8f:42:6c:00:04:00:89:e1:05:d7:cd:8a:26:
99:0d:d5:e9:d5:09:cf:1e:8d:0e:75:59:00:26:25:85:14:ba:
37:b2:71:9c:0e:3e:1d:aa:a2:e2:88:d5:d0:3c:f9:5d:39:c0:
a7:bf:ce:d4:95:32:e4:ad:42:a5:5b:16:6f:b4:1e:ac:22:49:
09:9c:6f:bd:3a:47:c3:97:dc:b5:89:ff:a2:b8:64:02:42:59:
0d:02:09:8a:e0:b0:d7:3d:a2:e1:ea:60:78:5b:95:22:8f:fc:
b3:73:05:57:0a:6e:b9:49:a8:3c:8b:97:e3:fb:69:17:f9:66:
07:c3:ce:04:64:db:d8:ee:79:ab:49:65:3e:f7:3c:76:8a:fd:
c7:82:ee:65:38:d0:31:6e:18:bb:6c:ca:7a:7f:8a:f3:ca:b6:
99:3a:4c:01:1a:e3:a3:07:42:4b:c6:d4:83:5f:22:84:11:09:
c2:a6:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:05:55 2025 by rpki-client