Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: DIjvjVcCTbKMKi6O4Vcd4fLKZ2uUPy9jcSRbKPPI2zY=
Subject key identifier: 71:74:AF:38:4D:A3:7C:DF:19:A5:38:99:F2:BD:F9:79:31:5E:3D:70
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0196AD689063910788BA51E6843A91464A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 017C
Signing time: Thu 08 May 2025 01:00:33 +0000
Manifest this update: Thu 08 May 2025 01:00:33 +0000
Manifest next update: Fri 09 May 2025 01:00:33 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: ccFKjBTSBpfUpmzwBvzyBnKQ73N1U81H1c4TwEEEpXs=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:68:90:63:91:07:88:ba:51:e6:84:3a:91:46:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: May 8 01:00:33 2025 GMT
Not After : May 9 01:00:33 2025 GMT
Subject: CN=7174af384da37cdf19a53899f2bdf979315e3d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fb:45:53:4e:7a:64:7b:4b:16:2a:d9:2e:38:
7b:dd:e0:58:4c:4a:20:e9:7b:94:b7:83:d2:f7:83:
e4:f5:e5:84:84:6b:54:06:5c:3c:ae:a2:fe:c3:cb:
00:8c:53:f4:51:0b:ec:9f:a4:4c:c4:cd:0e:56:a6:
00:19:bf:30:95:19:d5:0a:ee:a7:5e:49:df:cc:ae:
ab:42:55:4a:b0:fb:ff:b2:4a:53:5d:e7:99:c1:b4:
aa:77:09:53:66:d2:f6:2d:e8:f4:17:5b:76:57:6c:
ed:78:01:fd:2c:d7:fc:b4:6d:ce:1e:b0:82:19:65:
18:bc:c9:8f:1b:fd:f5:6e:22:e3:f1:fb:64:c8:3b:
cb:7b:c3:63:4d:d8:ca:75:88:18:c5:16:59:c3:cc:
37:23:68:1e:c6:32:38:ed:a4:77:dd:76:fa:04:d0:
36:23:2c:8f:de:22:59:db:5c:94:45:24:98:93:48:
19:1f:92:ef:9a:25:35:4d:85:4c:18:56:7b:7c:6e:
d2:b5:92:67:a7:2f:24:09:d4:5d:de:a3:14:57:14:
4c:19:12:52:8c:f1:0d:7b:e7:98:35:3f:1a:50:e3:
73:c6:8b:ec:49:d2:aa:1b:32:aa:2d:5f:6e:94:5f:
45:04:95:62:23:f8:c3:fd:71:d1:8a:27:c9:8b:ad:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:AF:38:4D:A3:7C:DF:19:A5:38:99:F2:BD:F9:79:31:5E:3D:70
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:6e:ed:d8:c2:11:cf:03:0a:77:f3:01:cd:6c:38:92:c5:
13:f6:4b:d4:65:e7:52:f3:67:fe:88:9d:f9:cb:01:5f:26:52:
c9:ba:ed:e3:aa:2e:22:d8:c9:d9:af:b0:ae:89:84:fb:4d:37:
db:ab:e2:9a:51:fa:fd:da:f2:32:22:45:c9:5b:1f:c9:29:50:
08:67:f2:fb:21:79:cc:55:1d:c9:3c:12:0c:cc:98:f5:80:20:
93:10:19:a6:39:43:ae:3e:46:cb:2b:4d:da:a8:a4:21:b9:9f:
1e:d4:20:ed:2a:dc:6d:99:35:a9:92:66:96:e3:46:bc:26:b7:
48:c9:7f:a6:a1:e3:73:ce:c1:96:86:d9:15:20:a0:99:84:ea:
79:65:58:aa:f5:0f:20:33:be:e9:48:ba:1b:df:e8:b8:60:e2:
40:ac:69:5c:bc:95:3b:d2:72:20:73:bd:46:0b:5f:18:d4:86:
b7:5b:3b:27:93:e3:df:07:f4:6b:e0:91:46:96:ac:0a:22:74:
d8:61:c7:21:3a:25:08:88:55:71:5f:09:a7:c1:f1:88:54:44:
78:98:8d:c4:9e:bb:d3:53:e5:05:76:1d:5c:07:43:1b:de:f1:
80:a5:e1:78:66:9d:f1:48:b5:9d:72:d0:0f:4f:7c:7b:5c:56:
cb:c8:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:47:45 2025 by rpki-client