Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: rcsPqWGOnRl8Mrv3BBYyU5KWmtxPhAwvSGdQHirCJ60=
Subject key identifier: 84:CA:91:3B:D4:A4:65:D8:58:38:0C:7A:CA:66:BC:90:1B:8F:89:AB
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 0197B88F3F6DF76E209220D626BC744A7E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 135A
Signing time: Sat 28 Jun 2025 22:01:24 +0000
Manifest this update: Sat 28 Jun 2025 22:01:24 +0000
Manifest next update: Sun 29 Jun 2025 22:01:24 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: AdmAOTllAg8+Ky/mMpUn2qJ5vqoLnijwxCzy+u5YHhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:3f:6d:f7:6e:20:92:20:d6:26:bc:74:4a:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Jun 28 22:01:24 2025 GMT
Not After : Jun 29 22:01:24 2025 GMT
Subject: CN=84ca913bd4a465d858380c7aca66bc901b8f89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:bc:5d:44:36:b6:f2:f8:be:b2:84:d8:f9:
4f:c2:70:ed:26:b1:57:59:1a:4f:81:9f:6b:08:b6:
15:00:23:c6:e0:71:fc:ff:43:b3:9c:40:21:4d:35:
f0:82:f6:8b:01:0f:9b:08:3a:8d:d5:b4:b4:87:97:
1d:99:be:54:2c:b3:0d:f6:73:e2:04:ad:9b:81:05:
88:8f:46:16:0c:a8:63:72:5c:27:21:82:7a:23:1f:
0c:ca:26:3c:51:06:d6:da:23:63:13:17:e7:a0:6e:
3c:d8:3b:b0:c7:bc:d4:eb:77:f5:9a:67:f9:d5:37:
8a:f8:05:c3:11:fb:8a:e6:ac:05:e1:c5:e7:da:c5:
25:ec:8d:b4:d2:94:c3:2f:13:dc:f3:6d:d3:43:75:
fb:28:a3:fb:73:38:85:2b:e5:02:d4:53:25:54:ab:
c4:c9:62:66:1d:3e:a6:d2:8d:62:8b:b7:c7:d5:6a:
89:e1:ff:88:a5:7d:e3:56:e4:89:82:f2:bb:fc:a9:
79:3a:5f:31:07:1d:97:b8:97:78:d0:82:3d:06:0e:
fb:19:37:2c:c1:a3:a5:a2:12:23:a0:3b:5f:9b:bd:
36:85:35:0d:69:87:ac:ef:1e:80:09:a4:66:88:b8:
78:33:7f:29:b7:41:2b:11:0b:b8:98:1c:d8:bc:24:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:91:3B:D4:A4:65:D8:58:38:0C:7A:CA:66:BC:90:1B:8F:89:AB
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:3a:04:43:a8:e9:d9:d7:20:e1:f7:35:a8:8d:d3:e7:85:
15:a2:22:70:06:5c:53:82:a4:96:d7:2c:62:70:e4:88:f0:34:
97:d9:fc:7b:d4:af:82:85:29:81:cd:87:46:73:2c:4e:e7:99:
dc:1e:d8:b6:2a:e4:ae:0a:a1:30:3b:f2:54:47:78:ff:af:a4:
cd:54:d8:d0:dc:77:88:ea:81:80:dc:cd:8a:64:13:24:cc:e0:
01:f4:c1:cc:a1:5a:b6:28:f2:b0:0b:f0:32:93:11:9e:cf:8f:
f3:bf:e5:14:94:9d:8e:bb:a2:fb:b7:e4:98:dd:ef:ce:dc:eb:
b9:2e:8e:3c:74:e2:0c:8b:03:b4:42:cf:63:6e:31:8f:8c:06:
ee:70:33:06:d9:ae:6f:59:14:b9:e3:0e:37:b3:89:19:35:90:
a3:66:57:45:89:0c:1c:e7:f6:b9:22:96:9b:1e:bf:d9:7e:4e:
57:a3:1a:a6:bb:e8:a2:14:07:db:80:55:31:4c:e0:9a:58:0d:
85:4d:c2:49:4a:7d:75:dc:ef:c2:e7:ab:ea:f1:cc:45:b3:fe:
d2:77:e3:77:e6:01:8b:52:b5:c6:a7:3f:38:df:34:c3:eb:64:
76:07:6e:64:cc:38:95:6b:ef:76:f0:6c:4b:6b:93:3c:39:78:
54:da:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:31 2025 by rpki-client