Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: hIibSMih3oy3CPnTGPA8mthdCsoAJf6B+XFZj3HbZFw=
Subject key identifier: D6:39:46:1C:03:0E:7C:2F:6E:4B:20:96:3E:CD:44:4F:10:68:AE:D0
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 019926D6CC733A7596F05072DE62E663B082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 02C4
Signing time: Mon 08 Sep 2025 01:00:34 +0000
Manifest this update: Mon 08 Sep 2025 01:00:34 +0000
Manifest next update: Tue 09 Sep 2025 01:00:34 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: W2yb+JtFKHyNAUL3HiO6EfwlCsbhmpTmcHA1fbHDTZw=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:cc:73:3a:75:96:f0:50:72:de:62:e6:63:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Sep 8 01:00:34 2025 GMT
Not After : Sep 9 01:00:34 2025 GMT
Subject: CN=d639461c030e7c2f6e4b20963ecd444f1068aed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:ab:1e:59:c2:6b:ae:72:57:65:5b:b9:1e:
25:ad:20:2b:a4:48:92:79:3f:ac:af:2e:1e:05:65:
f4:f1:16:20:aa:11:65:60:22:22:08:ac:74:fa:8e:
60:67:42:67:e8:9b:de:1d:2b:88:f9:f6:7a:61:fd:
e0:25:88:11:7d:b8:e6:03:5d:92:3e:5e:c3:32:f8:
94:ba:cb:42:ad:21:cc:86:73:e0:54:33:18:67:02:
94:15:da:ef:e0:2e:20:24:51:b5:91:5f:4b:34:a8:
9f:ae:05:43:49:fe:85:fb:cb:29:c6:4c:30:5a:64:
e1:72:58:c5:0c:0e:61:e3:e5:e7:3e:0e:4b:0a:76:
40:1d:b8:eb:71:72:f5:25:fd:07:fb:9b:cd:c9:aa:
cc:fe:6d:aa:fb:ff:1c:6e:f8:d7:e9:72:4e:d5:da:
84:2e:2c:ea:b6:53:c0:ba:15:5c:81:bd:d8:d6:65:
79:7f:16:bc:3f:28:23:c8:71:6a:2f:01:38:9b:58:
82:c8:8c:80:2f:35:0c:8d:fc:47:78:59:11:62:a4:
0b:3e:71:a1:03:23:33:d2:51:b2:44:b0:a7:36:00:
b7:3b:5e:9a:6d:10:6a:96:ef:e9:8b:55:d4:78:0d:
cc:33:f9:68:4a:61:44:cf:55:85:c7:78:76:b0:1c:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:39:46:1C:03:0E:7C:2F:6E:4B:20:96:3E:CD:44:4F:10:68:AE:D0
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:83:4a:a9:84:05:d6:03:51:bb:64:e0:c3:c2:8a:86:b6:d4:
c4:16:fe:f6:e7:9a:49:45:a0:c1:0c:15:40:78:95:45:92:d6:
5d:e8:eb:62:aa:2e:24:eb:a3:22:f7:8a:0e:c5:b4:83:bf:01:
5c:87:ab:51:ca:28:dd:9f:60:e2:b7:ab:7d:ea:63:61:22:50:
cc:55:69:0f:99:0b:d3:e9:dd:c3:b1:4a:e2:56:ae:1c:8b:31:
70:cb:51:74:1a:77:cd:e7:32:fb:1e:ba:01:4c:3e:50:af:07:
64:0b:cd:fc:a4:68:3e:25:2e:ff:a8:84:50:48:4f:e7:97:14:
37:47:1a:cf:e1:84:c7:48:5a:a3:90:e5:ee:6b:89:fd:70:6d:
7c:2b:77:d3:28:66:05:49:84:db:42:89:07:81:23:32:99:85:
5b:6c:22:45:3b:47:e4:8e:c6:1f:b1:be:8e:1c:99:97:9a:45:
d3:a3:c2:ec:17:68:de:be:b8:b7:81:df:98:03:87:32:a9:c7:
c3:d9:05:0e:7f:a7:27:08:c7:bf:4c:cb:81:d7:24:5b:62:cc:
e3:78:13:3f:6e:6c:3b:4c:68:5e:b5:e5:9e:30:2c:76:04:9d:
f7:13:23:9c:ef:2f:09:27:9b:88:75:53:17:ef:16:63:ec:20:
e9:b7:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:18:13 2025 by rpki-client