Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: VZ6+HqVXAs8igrWfrgngdEDXTCo8ck0sOydJCmDqznI=
Subject key identifier: A8:80:AB:78:91:0D:C3:01:E8:70:67:80:38:75:48:9A:0D:40:F4:0C
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0197B7EA6803EB93CDC0EBA767DD3055272E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0206
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: Ykfm8VGY3kgvKazXgYozzbSpnZvYyiqq+xORaUy8WEQ=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:68:03:eb:93:cd:c0:eb:a7:67:dd:30:55:27:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=a880ab78910dc301e87067803875489a0d40f40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:38:e9:80:b6:d7:28:78:1c:10:43:97:d5:
04:ae:8a:df:02:0f:72:17:3a:a3:bc:b5:0d:e1:c0:
9b:7f:ca:f1:fb:ad:f7:52:31:5d:f1:b8:ab:f9:e2:
db:18:35:af:58:50:a5:34:62:3d:49:4d:ff:f1:48:
d1:1b:cd:a3:fb:76:2a:79:80:0b:bd:24:68:ac:03:
db:af:d9:c8:ae:ed:3b:3a:0e:4d:67:7d:da:6b:18:
3d:d0:d6:d9:02:f0:0b:9f:3d:29:ef:a2:4e:a3:63:
00:13:b7:9b:02:b2:1a:0a:09:bd:4c:09:bd:2c:46:
e4:b0:00:a3:93:22:4f:5f:5c:d6:88:61:49:25:73:
0d:29:c6:11:3a:48:1b:0d:4f:08:66:8d:4a:20:bd:
bd:3a:1d:bc:97:4a:a3:17:12:bb:66:86:a6:df:8e:
dd:d5:d3:22:0e:d8:66:92:e0:d6:c7:cb:4d:a8:74:
21:86:ad:eb:30:1f:43:fe:76:63:c3:b1:7e:96:48:
95:75:37:ac:13:15:b8:4a:91:c6:59:d0:5a:4e:26:
ba:f9:28:e8:6a:ae:d9:0a:36:e6:2c:c5:00:1a:1c:
7a:d8:4e:b3:e7:c1:73:db:29:db:9a:07:1d:d1:9a:
e4:26:a3:a5:21:1a:df:b2:c3:4e:3d:3b:4d:b3:79:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:AB:78:91:0D:C3:01:E8:70:67:80:38:75:48:9A:0D:40:F4:0C
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:99:fd:51:5f:e2:40:f9:64:39:c3:9b:67:eb:7d:75:c4:
e2:c7:98:1a:b6:38:2a:e2:63:e3:57:da:a9:2f:73:84:34:51:
3a:f5:5e:3b:d4:10:0a:3f:34:a8:be:90:b2:e4:e1:b8:ff:7c:
ca:f7:86:d5:9b:6b:b4:07:4e:e1:9b:af:70:30:d4:ac:63:2b:
fc:12:5c:0f:2b:49:cf:c8:55:6f:98:5a:ae:9b:68:36:5b:76:
aa:cd:48:0c:5b:0d:4b:f9:77:6f:a6:5a:4a:58:37:83:25:6f:
f1:69:92:66:5f:0e:95:34:9e:87:bd:76:c5:55:bd:6c:75:2d:
9f:e3:94:7c:79:9d:0d:a5:49:1c:c6:27:cf:59:8e:8f:f3:b2:
7b:76:29:25:39:32:2a:8c:8b:d9:57:50:ac:49:8c:73:71:3a:
ae:76:f8:12:c3:b9:23:58:4b:d1:c5:48:73:f1:8c:f7:19:0f:
34:af:88:5d:08:5a:68:78:a2:24:83:74:a9:4e:7f:29:0c:6a:
58:38:9c:9d:5d:cc:0f:66:c0:55:24:d8:69:df:9f:6b:7e:43:
c7:bb:ab:0d:e0:e3:ac:22:2e:a2:d3:57:c0:ce:b5:69:89:da:
2c:25:c4:19:a7:ce:9b:fb:9a:87:4d:f5:93:6a:7e:78:6a:58:
9e:8d:90:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36mgD65PNwOunZ90wVScuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZGVmZjRiOGZjMzA3NTQ0ZmVjMWZhOTlkYTJhNjg5N2Rm
NDYyYjgwHhcNMjUwNjI4MTkwMTIxWhcNMjUwNjI5MTkwMTIxWjAzMTEwLwYDVQQD
EyhhODgwYWI3ODkxMGRjMzAxZTg3MDY3ODAzODc1NDg5YTBkNDBmNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lo46YC21yh4HBBDl9UErorfAg9y
FzqjvLUN4cCbf8rx+633UjFd8bir+eLbGDWvWFClNGI9SU3/8UjRG82j+3YqeYAL
vSRorAPbr9nIru07Og5NZ33aaxg90NbZAvALnz0p76JOo2MAE7ebArIaCgm9TAm9
LEbksACjkyJPX1zWiGFJJXMNKcYROkgbDU8IZo1KIL29Oh28l0qjFxK7Zoam347d
1dMiDthmkuDWx8tNqHQhhq3rMB9D/nZjw7F+lkiVdTesExW4SpHGWdBaTia6+Sjo
aq7ZCjbmLMUAGhx62E6z58Fz2ynbmgcd0ZrkJqOlIRrfssNOPTtNs3k0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiAq3iRDcMB6HBngDh1SJoNQPQMMB8GA1UdIwQY
MBaAFC3e/0uPwwdUT+wfqZ2ipol99GK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjct
NjYxM2FlYWE2MGRlLzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMzA5YzktMjMwYS00MWUyLWJmMjctNjYxM2FlYWE2MGRl
LzEvTGQ3X1M0X0RCMVJQN0ItcG5hS21pWDMwWXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuWZ/VFf
4kD5ZDnDm2frfXXE4seYGrY4KuJj41faqS9zhDRROvVeO9QQCj80qL6QsuThuP98
yveG1ZtrtAdO4ZuvcDDUrGMr/BJcDytJz8hVb5harptoNlt2qs1IDFsNS/l3b6Za
Slg3gyVv8WmSZl8OlTSeh712xVW9bHUtn+OUfHmdDaVJHMYnz1mOj/Oye3YpJTky
KoyL2VdQrEmMc3E6rnb4EsO5I1hL0cVIc/GM9xkPNK+IXQhaaHiiJIN0qU5/KQxq
WDicnV3MD2bAVSTYad+fa35Dx7urDeDjrCIuotNXwM61aYnaLCXEGafOm/uah031
k2p+eGpYno2QLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:48 2025 by rpki-client