Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: 45aNLpPNQNtkHcUgd3jt9zKwc1XEJu5VT7alej/ZbcU=
Subject key identifier: FE:EA:3A:F7:F5:FB:8B:15:8B:77:F7:28:ED:FD:0D:88:8B:8A:44:EC
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 019A4EF430D9348A91CC0E6334ED38D44A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 14B1
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: Z/B2V2BnNtR8hZ5H7c+WuGc9fYNKnk8q0IbZ/DSR5CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:30:d9:34:8a:91:cc:0e:63:34:ed:38:d4:4a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=feea3af7f5fb8b158b77f728edfd0d888b8a44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:ba:f3:29:ee:24:60:d9:f8:a0:ec:ef:62:
b2:d6:2a:37:bc:a4:3f:c5:59:d3:cb:fa:d8:90:c6:
81:ec:02:42:bc:ef:9d:c6:56:c9:3c:a2:46:56:e2:
6c:2f:f5:1d:68:17:ee:24:dd:b7:db:81:f2:a0:32:
d6:69:bf:f5:6b:cf:e0:de:3b:b3:3b:c5:ba:87:e7:
b2:9e:50:0d:13:09:52:3e:b8:dd:f9:1c:da:26:5f:
6b:29:38:09:d1:b3:a2:dd:ec:ce:ff:94:c0:9b:b5:
1c:16:d9:f8:66:57:cb:fb:5d:a8:1f:09:d0:4b:0e:
32:50:72:83:ed:ce:f6:54:71:43:7a:50:74:ef:7b:
89:b7:56:b6:2e:b6:05:b3:bb:0e:1c:0c:01:0d:ec:
e7:cf:4f:3c:08:65:7f:30:9d:b8:8b:4e:e2:68:9e:
9a:e8:93:a5:cf:66:1c:c9:96:a8:b5:43:b6:c5:0d:
b0:bf:52:8b:02:39:a9:bf:66:da:b2:71:96:3b:48:
bf:e5:73:d9:64:cd:05:95:b9:b0:3c:e7:7e:d0:c0:
e2:2d:e1:1e:70:d5:97:65:0d:ed:52:38:ea:96:ed:
bd:bf:26:76:4e:1c:89:7c:10:5e:ed:9d:90:e0:ed:
35:22:d8:06:6a:3e:9e:15:2e:10:b1:d0:97:c2:1c:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:3A:F7:F5:FB:8B:15:8B:77:F7:28:ED:FD:0D:88:8B:8A:44:EC
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:08:8e:aa:c2:12:07:2f:82:cc:dd:97:0d:d9:74:36:a6:
d1:82:af:37:8c:f6:b4:5a:5d:fd:5a:ae:22:bc:7a:4e:bb:2f:
09:20:c3:b6:f8:ac:69:03:81:36:2b:47:4a:75:44:90:c6:5e:
70:d5:ca:16:0f:64:82:65:4b:cd:1b:c7:35:af:d4:10:df:f0:
fc:f1:6d:85:16:bc:d6:82:ba:e7:a6:dc:53:6f:e7:5f:63:f2:
ee:86:59:18:12:ee:6e:6b:d1:af:9f:b1:c7:34:8d:69:a5:db:
8b:df:f7:4a:66:ea:1b:49:6d:88:85:f7:5a:b9:99:46:5e:bd:
5d:e2:99:62:dd:ac:7e:60:f7:bd:d9:d5:fb:dc:36:c9:4e:14:
10:7b:69:fa:03:03:8f:0e:4c:7b:03:eb:59:57:6c:50:a2:b3:
2a:16:1a:c1:29:ac:17:e8:76:84:8b:59:79:1b:64:a4:65:41:
77:f2:46:ab:ea:26:d9:68:89:04:17:fa:7e:51:b6:9e:c1:fa:
3d:7f:f1:73:5d:16:fa:1f:b9:19:c1:c3:65:86:9d:13:50:dc:
b8:87:ff:67:bc:26:cb:b0:cd:cd:26:09:dc:97:80:99:a7:59:
66:3e:9b:17:fa:79:86:5b:77:a5:5c:05:10:0d:5d:08:4c:7f:
09:5e:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:35 2025 by rpki-client