Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
File: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft (raw, json)
Hash identifier: MayXHC9P2Nezs7wQHZkwSUuXeN2dXgeC23tqonuXZNs=
Subject key identifier: 4E:8D:66:56:C1:20:A0:3E:2E:0F:44:4C:C3:89:46:68:FE:C0:6A:40
Authority key identifier: 2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
Certificate issuer: /CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Certificate serial: 0196944E017FA1182FF7D4F9A5EB08476983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
Manifest number: 016F
Signing time: Sat 03 May 2025 04:01:02 +0000
Manifest this update: Sat 03 May 2025 04:01:02 +0000
Manifest next update: Sun 04 May 2025 04:01:02 +0000
Files and hashes: 1: Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl (hash: 8AQFuZxH5Gdeyv6RttaV/J9ygiauf5eWx3g5KRez2ek=)
2: cZbiz7B2t2SglVNnSrqI3pPsvYU.roa (hash: LblU9yUa0wTO69eyXK7wxUYG5Ui7ajonenLF1CkeuzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:4e:01:7f:a1:18:2f:f7:d4:f9:a5:eb:08:47:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ddeff4b8fc307544fec1fa99da2a6897df462b8
Validity
Not Before: May 3 04:01:02 2025 GMT
Not After : May 4 04:01:02 2025 GMT
Subject: CN=4e8d6656c120a03e2e0f444cc3894668fec06a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:ca:b7:cf:e4:11:81:c7:72:ce:cd:95:71:
c2:69:57:8c:67:42:92:8a:0a:58:0f:3a:65:de:82:
8f:2a:e6:1f:2c:e2:d8:a7:8e:10:31:cb:42:1f:bc:
8a:b6:de:55:e5:5b:e4:f5:ac:af:63:ef:3d:38:c4:
81:62:95:15:2b:83:f2:ec:1f:67:d4:37:a8:2d:ed:
b4:8b:87:c1:5d:d4:d9:7c:ff:cb:46:ee:c7:a6:b6:
17:98:3f:e1:10:7f:ad:e1:11:8d:21:a8:92:07:14:
71:43:52:59:28:8f:6b:05:f1:84:34:31:2e:7a:e5:
31:f2:7d:af:77:a2:bf:07:43:e8:fd:1c:e8:57:02:
1c:17:ef:b1:df:e0:ef:6b:ce:0a:02:02:9b:29:14:
00:66:3d:ab:d0:6b:22:2a:77:8a:6a:ce:9a:7c:9d:
92:04:00:92:1d:63:9c:5d:26:d5:54:59:af:02:0e:
4e:ec:53:60:72:bd:01:92:49:41:0b:bf:57:2b:e9:
7d:3b:1f:6f:45:a8:d2:a0:32:19:f8:ef:2b:4e:07:
01:9d:bb:75:77:a6:2b:71:a8:64:ab:88:e8:0b:7b:
20:a5:ea:0d:b3:18:e0:ea:92:3f:53:02:c3:22:32:
3c:25:c2:97:34:99:b0:dc:d0:9e:51:5b:3b:09:cc:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:66:56:C1:20:A0:3E:2E:0F:44:4C:C3:89:46:68:FE:C0:6A:40
X509v3 Authority Key Identifier:
keyid:2D:DE:FF:4B:8F:C3:07:54:4F:EC:1F:A9:9D:A2:A6:89:7D:F4:62:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f309c9-230a-41e2-bf27-6613aeaa60de/1/Ld7_S4_DB1RP7B-pnaKmiX30Yrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2c:64:5e:e1:d2:3d:ef:11:13:39:60:4f:ad:cd:10:46:81:
9a:b1:94:f9:9b:20:75:32:2e:13:dc:c4:6a:1c:f2:f3:b1:5d:
2d:bd:b4:b8:3c:87:38:46:09:77:80:ad:0f:a3:72:51:c9:4a:
27:9c:09:b4:45:73:43:88:c1:d0:e2:58:cf:77:1a:d2:f4:6b:
b3:fc:9c:92:9e:0d:e8:18:f2:f1:03:e6:0b:9c:9d:ee:10:ae:
ff:83:76:54:fc:b4:e2:64:3d:d5:c0:9a:ad:64:a8:8e:79:fb:
f0:0c:8b:bb:50:2d:a0:31:a2:10:ab:65:35:9b:d3:20:d5:76:
62:5a:50:8e:e2:66:41:95:0c:2c:42:5a:21:d2:5c:41:87:41:
e6:c7:d8:96:37:72:9c:b1:4f:20:b5:1b:98:5e:dc:55:94:cd:
f6:93:2c:92:99:06:4e:6c:8b:17:1d:ac:e5:12:47:c8:0f:f3:
82:2d:6a:64:f2:1e:1e:9c:09:cc:1e:2d:10:8e:8e:53:01:83:
b2:fd:70:cb:c1:c0:56:94:f1:49:03:52:b0:96:d0:fa:38:3f:
c3:1e:2a:db:8c:3c:4c:6e:79:4d:5b:8e:b2:a7:5e:77:fc:c6:
8a:e9:a7:fc:e3:b0:ba:0f:6f:d9:dc:4a:3a:5a:04:be:4a:a0:
b5:45:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:35:12 2025 by rpki-client