Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: +K4VttgG3XjsvnqcjcMu7qzcx9cEkzlUxgqxzbMENGY=
Subject key identifier: F2:DB:37:60:47:1A:C0:D7:66:3F:4A:E8:51:E0:E8:73:8A:F2:F2:6B
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 0196BB92CE7080652119B888ED17A2C8FB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 12D7
Signing time: Sat 10 May 2025 19:01:22 +0000
Manifest this update: Sat 10 May 2025 19:01:22 +0000
Manifest next update: Sun 11 May 2025 19:01:22 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: Noox716PYoCD4pNR43AwzqquG6M5DU1OwQyciFmz5Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:ce:70:80:65:21:19:b8:88:ed:17:a2:c8:fb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: May 10 19:01:22 2025 GMT
Not After : May 11 19:01:22 2025 GMT
Subject: CN=f2db3760471ac0d7663f4ae851e0e8738af2f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:df:c7:10:ee:63:6d:30:51:69:c8:ed:a7:
d3:ca:39:8b:fa:d7:2a:cd:f2:22:4f:ab:ee:f3:35:
0b:7d:cc:16:09:70:b3:ab:09:99:f5:b3:5e:0d:cd:
58:01:96:13:23:1d:4a:73:31:85:2b:4b:80:f9:d5:
b0:3d:d7:fe:b7:3e:8d:f4:3f:dc:a8:d9:29:2d:4b:
16:6d:e2:53:f8:81:8e:f6:c0:0a:87:53:31:79:3c:
4c:7d:9e:bb:7a:26:9d:46:68:c8:7c:ed:62:6b:d0:
d1:4e:3e:26:f6:d8:2f:5d:a0:d3:64:33:90:b7:07:
6f:9a:27:81:bf:bf:3d:f1:cd:d4:2e:0f:75:64:02:
c1:19:38:64:8a:9e:5f:93:f0:96:0a:ce:53:9b:8f:
17:11:a2:1a:42:a7:a1:92:d9:07:91:1e:99:76:28:
f2:4e:93:ac:3c:5d:fb:02:af:83:ca:bc:f9:03:72:
56:4d:83:51:ff:6e:28:00:a0:03:e8:dd:31:f3:f0:
a3:3a:5b:73:97:6b:58:2a:5a:04:e8:41:67:21:83:
11:c8:d5:8b:90:6a:c8:a8:c0:29:31:ec:43:a0:07:
01:3d:c2:33:ae:e0:17:eb:ce:ce:97:f6:5c:75:c3:
af:34:d1:a5:1c:7e:80:0e:5e:6b:66:5c:e9:8c:4e:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DB:37:60:47:1A:C0:D7:66:3F:4A:E8:51:E0:E8:73:8A:F2:F2:6B
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5a:87:cf:cf:2e:f0:33:2b:1e:df:18:b1:c6:d6:81:65:40:
40:5b:6b:4e:0e:cc:5c:97:d4:4c:f0:6f:a5:b9:60:9a:49:02:
26:99:ce:d7:2e:db:2c:bd:92:a7:a8:35:a4:d2:4e:02:bc:2d:
bb:90:46:14:30:f0:ec:e7:f7:c8:9f:45:12:db:7c:0d:d2:c4:
7c:f6:e3:5e:6e:0a:64:af:f7:31:e1:03:11:5b:73:3d:7a:1d:
0d:8f:0d:98:30:0f:f2:3d:e2:34:6a:80:40:82:2c:6a:83:4c:
f2:7d:03:1f:77:7a:c9:15:28:a9:60:70:96:f4:cb:32:e4:e9:
d0:f8:03:82:80:9f:39:6b:cd:19:d0:bf:7e:d2:a6:59:d5:76:
3a:7c:39:b4:c6:a7:4d:a6:94:d9:43:a5:58:17:37:a1:76:d3:
46:12:d9:23:c8:60:4e:2d:99:fd:73:e4:2e:97:de:60:27:87:
a7:cc:19:d2:dd:8b:52:1e:9d:1f:5f:99:4f:f5:03:e1:7b:e9:
3d:35:85:18:db:2f:5e:96:8b:14:6b:49:d5:4f:47:69:04:e3:
8b:8f:93:69:f9:20:ca:bc:66:63:f1:61:06:a6:82:40:68:fc:
ba:95:26:64:1e:34:89:cd:ef:1b:cb:cb:46:4b:a4:71:6a:67:
24:19:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:09:46 2025 by rpki-client