Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
File: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft (raw, json)
Hash identifier: qrJ+x6gfKx2b7ic4n2GeEls7lg08YCGPi2P+9TbpUl4=
Subject key identifier: 15:A1:DA:F1:70:99:09:AD:0C:01:2A:E5:12:CD:00:1A:C9:FC:C8:C1
Authority key identifier: B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
Certificate issuer: /CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Certificate serial: 0199FBEA9E1E9590A000318F8BA82AE1858E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
Manifest number: 1486
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: nYyst-VXzn3xSdM3Fb9jRPKd5O0.roa (hash: utz/hKliLWf+w0YBiWTvZl5n+Jt5jKsuYbG8pQFD4oQ=)
2: sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl (hash: D5Gsuvskf+NU25yoa7o03KrrrEBXnnm0pIzbIoQ3p0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9e:1e:95:90:a0:00:31:8f:8b:a8:2a:e1:85:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b312db95dfc3b31395e0ecb5ff26212d798de834
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=15a1daf1709909ad0c012ae512cd001ac9fcc8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:ff:39:3e:34:ab:b5:b0:8f:59:ee:b3:aa:
64:cb:2e:3a:e6:87:13:e3:62:57:72:21:33:68:47:
d5:de:d8:48:79:b6:c7:51:0d:a3:75:cc:3b:90:21:
bc:bf:37:88:65:f8:e2:74:70:be:0e:2f:95:17:33:
0e:09:d4:39:66:92:70:ea:12:37:8b:71:d5:9f:56:
0e:ac:c8:be:c4:ff:d5:bf:0d:f7:8f:3c:b1:31:46:
06:98:b9:5a:fe:78:f1:db:06:7c:13:a9:8c:16:9a:
0c:ef:fa:4f:8c:bd:ed:88:33:90:a7:0e:31:c1:5d:
7b:10:94:66:5b:ae:c3:99:c6:0c:49:79:e8:86:3f:
45:7a:71:72:ac:fd:73:2f:bd:32:75:28:3c:2e:16:
7b:c7:52:1a:e1:84:6c:23:96:23:d2:65:a7:33:44:
68:8d:b1:89:3b:60:a5:f4:6a:45:50:cf:a2:9d:98:
a2:c5:88:e3:a5:76:9e:37:fe:21:dd:d3:d9:28:91:
b6:12:18:68:8d:d8:4f:81:f2:0d:d0:a1:2c:64:06:
29:05:06:8f:69:bb:62:a7:8d:ab:a4:ad:d3:dc:aa:
ea:ea:48:a8:4a:5e:85:22:b6:b5:a5:7a:b8:de:01:
0a:6b:25:35:65:c1:73:f1:30:25:b4:b6:80:2e:df:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:DA:F1:70:99:09:AD:0C:01:2A:E5:12:CD:00:1A:C9:FC:C8:C1
X509v3 Authority Key Identifier:
keyid:B3:12:DB:95:DF:C3:B3:13:95:E0:EC:B5:FF:26:21:2D:79:8D:E8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cbc50e-faef-43ec-bdba-fda470c61e09/1/sxLbld_DsxOV4Oy1_yYhLXmN6DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4a:d1:1c:d1:03:1c:23:6a:d2:3a:76:0a:c9:f7:19:fe:d5:
9d:14:09:b9:36:e9:ff:cc:dd:fc:15:a9:3d:e9:53:0a:63:22:
95:71:27:76:5e:17:f2:a7:4f:b0:52:97:53:39:24:3d:ef:2d:
1a:33:b9:58:12:c2:63:ca:e0:9f:c5:1a:b1:2b:9e:fe:08:65:
5b:7c:cd:68:45:35:48:3d:f2:3e:1c:61:44:4e:5e:7b:21:e3:
c7:68:75:f5:fe:c7:1f:a9:63:4e:9a:ba:0d:2b:32:17:6f:bf:
05:47:ee:0a:2d:18:39:f4:f3:87:5e:b9:2d:3a:49:78:7a:8d:
e8:b0:55:3e:f1:31:71:49:4b:0d:0b:7a:e9:84:92:32:28:32:
cf:80:e9:b3:95:72:fd:96:1b:c8:94:61:7e:0f:66:ec:cd:0c:
00:b1:57:2b:ea:fc:3e:4f:46:1f:48:9d:6c:3e:93:3c:0c:87:
e3:7e:bf:f8:b1:ed:88:7d:e3:d5:19:f9:17:b6:0e:6f:3b:86:
05:94:bc:8e:20:36:11:90:e0:db:9f:aa:49:c3:32:a4:69:59:
95:ea:ee:96:90:89:28:6d:46:64:28:5e:2c:a3:16:45:14:a7:
1d:20:ad:38:4d:d3:8f:9c:72:86:25:90:65:0e:75:c9:74:ab:
8a:d4:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:15 2025 by rpki-client