Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: tXbC3LH2JD71eZp6r/bTzF+s4xmtRFigKrn2oAN6Bfc=
Subject key identifier: FF:B5:DB:B3:29:DA:A5:D9:EC:B9:74:34:A3:36:A9:8B:62:7E:90:72
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0199FB45BC5E813322F40FAFBB9876C735E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 0332
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: sw4DMOTH6B0v47GZ0hjtayvDnuZmNslW67frCTQ3Inw=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bc:5e:81:33:22:f4:0f:af:bb:98:76:c7:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=ffb5dbb329daa5d9ecb97434a336a98b627e9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:98:bd:d7:f5:a1:a2:cf:34:38:81:34:ab:
c9:c3:3e:8f:77:34:bb:81:cc:5e:c5:75:f6:cb:61:
c9:2b:23:71:dc:42:15:87:a5:f3:6a:25:de:ff:64:
eb:ca:f8:af:99:29:7a:f6:6f:5c:9b:5c:95:8a:8e:
19:01:5d:72:e4:ea:eb:1f:95:a4:b7:da:5e:f6:ed:
a3:bf:e8:b1:70:1d:b4:15:31:77:ad:37:85:f3:d0:
10:aa:74:bf:0c:d2:90:ca:32:f2:82:07:52:e3:5e:
a5:06:ca:9d:37:3e:8c:72:8c:e9:40:54:b3:8f:66:
e0:4d:92:bd:f8:71:20:f6:d3:ab:e5:ae:e1:26:5a:
b9:5a:81:b1:81:46:f5:1c:8d:b7:f7:b6:16:55:b0:
bd:44:07:76:1d:8c:45:30:1d:a0:28:2f:be:bf:a7:
77:d2:4f:00:f8:85:d6:06:38:42:b2:4c:1a:fc:ee:
94:86:94:b4:7f:91:03:3a:2b:a7:43:08:78:b0:d3:
e3:96:c1:9d:cd:a1:3a:44:27:02:1a:cb:2e:c8:1c:
4e:1f:3b:bc:ee:a6:fe:25:34:a3:de:9e:31:a8:1a:
7a:55:fb:b9:29:02:be:65:2e:e8:51:07:95:fd:a3:
29:07:e3:43:7c:c4:21:cf:c9:06:73:e5:b5:6b:df:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:DB:B3:29:DA:A5:D9:EC:B9:74:34:A3:36:A9:8B:62:7E:90:72
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:51:42:cf:fd:a4:74:11:40:62:72:ff:af:7d:7d:b4:08:26:
18:ff:3f:31:79:11:f0:cb:99:c9:21:d0:9c:56:cb:b4:60:a0:
ed:6e:fe:74:60:c4:82:74:40:f5:4b:9a:3d:b9:20:e6:c1:8d:
f1:fe:09:c1:e2:01:68:1b:72:5e:bf:c7:bc:a7:e8:7c:93:e0:
4f:4b:63:97:bb:ea:af:4c:f3:19:c6:88:f7:73:13:99:f4:2b:
6a:35:fc:6f:2e:1c:74:2b:a1:38:be:91:2d:cf:7e:f7:0f:c9:
f8:ae:cc:41:8c:b3:55:06:3d:48:59:d4:2a:8e:5d:46:ad:85:
df:4c:b2:89:a3:09:fb:2a:5a:ed:db:a5:a0:f3:80:93:07:d7:
50:79:97:76:80:16:1d:d4:33:12:61:86:a1:45:ee:0f:23:4a:
0b:a4:22:34:52:48:fe:dd:04:d6:8d:1f:37:73:4b:73:51:69:
5a:6f:a9:82:a2:e5:5b:b4:23:5d:28:f7:9a:e5:02:98:d3:11:
c4:d9:0e:aa:66:a0:f4:0e:eb:ed:f7:d3:e6:f2:4b:ba:c1:f0:
20:a3:2c:20:19:99:1e:16:37:dc:82:90:ad:3c:58:92:81:0d:
8b:4e:04:d3:79:4c:6c:9d:8c:de:3e:b5:c9:70:4d:82:77:9d:
7d:1e:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:26 2025 by rpki-client