Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: oVQFTM97PRBZaD0W312UmM/Zj8RLHgR2ksdh+/ZSwr4=
Subject key identifier: B3:CB:59:C8:EE:34:37:C4:59:1F:2A:04:D6:A3:DB:4F:FB:F8:83:76
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 019769609A1F478DC301BC8C14576FD6F72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 1331
Signing time: Fri 13 Jun 2025 13:00:27 +0000
Manifest this update: Fri 13 Jun 2025 13:00:27 +0000
Manifest next update: Sat 14 Jun 2025 13:00:27 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: B+9Pw+j3BRhl8C+zx3vKXGwPcnhx0gCPMw1UuqY4WLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:9a:1f:47:8d:c3:01:bc:8c:14:57:6f:d6:f7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jun 13 13:00:27 2025 GMT
Not After : Jun 14 13:00:27 2025 GMT
Subject: CN=b3cb59c8ee3437c4591f2a04d6a3db4ffbf88376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:6b:ca:1c:b1:29:86:10:4a:0c:df:d8:5c:
9a:8a:7e:38:53:7e:e0:15:b1:d6:6e:fd:6c:0e:52:
85:5f:c9:f8:f8:e6:84:04:ef:3c:6c:56:b4:94:9d:
ee:3a:0a:fc:be:59:30:21:ce:60:a7:ef:a7:2e:17:
b2:7f:a2:b7:68:7d:70:89:c6:4a:fa:75:3d:dd:d1:
04:f1:40:29:61:31:d7:eb:4f:56:27:c7:09:2d:90:
17:73:89:91:75:2d:8e:8d:97:dd:c7:96:37:40:31:
71:03:d5:4a:6b:d3:22:5a:e7:b7:89:6e:b9:ed:0c:
67:2c:60:31:ca:41:17:dc:48:24:8e:6c:78:5f:fc:
a4:34:9c:74:83:61:ed:e9:a5:26:f3:b9:ba:bd:ff:
dc:d9:7a:90:c7:c1:95:c5:71:5a:c8:46:9a:3f:a6:
1e:7a:50:4e:10:aa:83:30:8f:1c:60:fc:9e:89:44:
bd:f5:39:41:66:ad:07:f0:25:b6:f1:9b:58:31:a2:
70:2e:a9:50:f4:18:23:be:97:4d:36:56:04:af:22:
63:d6:58:66:b4:1b:98:7b:16:f8:f1:45:68:33:ac:
b2:c8:ea:de:fd:25:eb:9e:11:60:72:e1:f7:71:0c:
9a:94:66:72:44:6e:42:00:6e:15:aa:e4:91:cd:d9:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:59:C8:EE:34:37:C4:59:1F:2A:04:D6:A3:DB:4F:FB:F8:83:76
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c7:64:39:cd:39:70:7e:47:fa:a9:90:b9:eb:fa:c8:42:46:
0c:8e:f4:c5:5a:a0:13:0c:7c:7d:ad:7b:c8:a0:74:be:56:26:
84:de:a3:bc:42:99:dd:fc:91:19:14:d6:d5:bc:46:b5:df:0f:
4e:f0:c3:5d:3f:61:12:94:9a:f4:44:d8:fe:d6:83:61:20:b9:
ec:3a:61:9f:88:cb:01:47:3d:e1:c2:83:6a:fb:98:99:46:df:
f7:09:31:06:b2:43:ef:d8:53:55:31:39:c6:a1:60:5f:86:ed:
54:1c:e9:2d:14:90:1d:1c:4d:e8:dd:99:5c:d4:31:8d:22:51:
29:14:83:a5:fe:da:1f:84:6f:2e:d0:9f:90:5f:70:ef:d4:8f:
45:58:f3:e1:ba:59:30:e6:60:6f:36:80:73:5d:b0:b1:7d:af:
86:aa:c4:55:34:c5:d2:2f:50:83:8c:a3:21:80:f7:1d:d9:b2:
2a:c7:bd:7b:17:70:26:41:aa:25:45:e0:fd:80:68:e7:66:5f:
39:30:c8:40:71:8e:51:aa:ed:79:4e:c4:55:b7:6d:86:d0:9a:
cf:c0:6f:46:90:06:df:0a:9c:98:d5:fa:09:fa:d5:27:c1:8d:
b4:3c:83:41:78:f5:5b:e6:ab:39:50:52:56:47:8e:24:fc:75:
90:77:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:49 2025 by rpki-client