Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: n1/xbV6YoEu7/IiDZBbB1AlItNZu4lQGj7w/qpODSmk=
Subject key identifier: 55:89:23:80:07:40:9D:DD:FA:50:21:A9:DC:E7:C0:B8:E2:4C:90:92
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0198D7A926AB5AA900E2ED120CF74B812D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 029B
Signing time: Sat 23 Aug 2025 16:00:43 +0000
Manifest this update: Sat 23 Aug 2025 16:00:43 +0000
Manifest next update: Sun 24 Aug 2025 16:00:43 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 00nck3xzfJtK99pDUFQFUX7SEeXfXgFInvEC3yJeKgU=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:26:ab:5a:a9:00:e2:ed:12:0c:f7:4b:81:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: Aug 23 16:00:43 2025 GMT
Not After : Aug 24 16:00:43 2025 GMT
Subject: CN=5589238007409dddfa5021a9dce7c0b8e24c9092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:ca:7f:65:8c:97:54:35:5b:91:ae:c8:28:
59:88:d1:88:86:62:27:b0:aa:07:e4:37:f7:d1:55:
1d:07:ec:7c:9b:e6:d4:73:6b:82:9b:4b:f1:93:dd:
34:be:79:a9:34:a8:fb:1a:38:bb:40:30:fc:b4:d9:
1c:43:e3:7c:78:9d:e0:5d:15:1e:a7:3e:fe:1b:f2:
fb:54:33:5e:f4:f2:46:8a:59:f1:e5:2d:b1:dc:cd:
ef:88:e1:52:f4:a7:53:5c:cd:72:3e:8d:3c:e7:79:
a4:dc:fa:a1:a7:dd:20:34:92:ea:f9:a0:7f:24:0b:
3a:5e:e0:18:62:bc:b5:a0:30:3f:eb:72:fa:28:e5:
2e:fd:42:ec:8c:2b:53:e6:2d:35:fc:a9:fc:af:0c:
21:63:5a:7a:7a:49:0f:a0:30:e0:bc:39:28:61:18:
b7:6b:78:4a:01:ac:c6:24:ae:0b:fb:67:8c:1e:76:
75:90:89:1f:47:98:13:f1:74:12:c5:a6:55:41:1a:
03:99:25:45:ba:4e:50:c9:6b:b6:8f:68:6f:6d:a7:
3c:9a:79:ca:c0:a8:04:4c:4f:dd:7f:5b:ff:cd:49:
fc:be:2d:01:32:29:6b:97:bb:7f:38:32:f6:a2:69:
e0:4e:81:49:c4:14:87:0b:0d:bd:03:20:e4:be:a4:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:89:23:80:07:40:9D:DD:FA:50:21:A9:DC:E7:C0:B8:E2:4C:90:92
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b8:57:5b:0d:4c:f7:94:8c:0a:dc:8d:25:b0:54:fa:09:3f:
98:ee:4c:62:5d:37:c5:55:cc:7b:ac:ad:82:c8:05:39:71:ca:
e0:c5:0a:6e:f5:75:56:83:3c:01:ea:33:5d:ed:5e:41:5e:ec:
48:6b:ab:ac:82:a7:ff:1d:ba:61:cb:49:dd:93:33:b4:ca:15:
18:85:48:5b:eb:b6:f1:52:4d:45:47:4e:e6:99:b0:96:81:06:
ec:cd:5e:be:c6:71:0b:05:66:41:3d:f9:26:d4:86:9d:a5:f5:
81:84:83:9e:11:3c:f1:b4:ad:e4:5d:92:19:44:69:6a:c0:a7:
64:57:28:c5:4a:14:79:9a:3f:fd:3b:05:7d:4b:e7:a7:b1:f8:
25:ce:04:62:7b:37:34:fa:0e:29:98:be:26:48:d6:a7:98:2e:
c2:37:95:90:6f:6a:f8:a0:6e:60:4d:ac:26:8d:77:2c:14:2e:
61:b8:e5:ad:b6:90:e4:db:71:37:c4:e0:fb:f5:c1:19:82:b2:
f5:2c:27:52:9f:9b:cc:13:d1:a3:b5:5c:73:8d:15:3d:0b:2c:
56:05:a6:d8:ed:a4:af:f3:ef:3d:a3:f5:68:38:b3:62:d6:bb:
8d:10:dc:02:a4:f6:d1:89:86:a5:5a:e1:02:30:24:3c:63:19:
7a:78:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:41 2025 by rpki-client