Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: luHX/8Vm5HhwiX4RfkCI/bo9UHTyi3ktpEHztTPCGXo=
Subject key identifier: A7:35:8D:08:D4:05:DC:B9:A4:80:2D:E6:C1:FF:96:D8:1A:EE:51:19
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0197B96A668DF906E516A09CE5285D09BB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 15C2
Signing time: Sun 29 Jun 2025 02:00:47 +0000
Manifest this update: Sun 29 Jun 2025 02:00:47 +0000
Manifest next update: Mon 30 Jun 2025 02:00:47 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: 7mrYjvir1e18NNiUnbSSbvkDKapUmiPAVT7OtZPX5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:66:8d:f9:06:e5:16:a0:9c:e5:28:5d:09:bb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jun 29 02:00:47 2025 GMT
Not After : Jun 30 02:00:47 2025 GMT
Subject: CN=a7358d08d405dcb9a4802de6c1ff96d81aee5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:f1:ab:e4:85:8d:b0:1c:ba:00:a6:11:db:
f9:b1:88:39:c9:a9:3e:7b:fa:2e:09:9e:cd:d3:e0:
c4:a1:f7:35:c2:0a:9f:8e:d8:65:79:93:55:0b:aa:
8b:56:ef:9a:ff:29:38:19:84:e9:a6:c2:f5:9c:f2:
2e:b3:dd:43:2f:fd:ec:10:0d:a3:9b:2d:0f:bf:7f:
50:82:9b:b1:37:ea:b7:bd:a3:18:16:52:79:59:90:
80:d8:cf:e7:95:5f:bd:6e:f2:bb:2d:4d:9b:2d:6b:
65:90:09:7e:9f:3a:d2:e5:a2:a6:9d:59:62:af:ab:
95:54:08:b1:68:de:f1:25:7a:8c:14:ee:46:f1:07:
a3:02:6f:ac:9a:cb:1c:88:a6:9a:50:16:3d:cf:25:
72:ad:3d:d3:b2:52:18:35:b5:31:39:a5:8a:88:78:
a2:34:fd:a6:a9:64:0f:38:29:17:66:71:67:53:bc:
43:fb:6f:3a:a3:f8:e3:f6:4d:4b:bf:6a:1d:e1:65:
36:91:80:13:03:7b:71:c2:80:33:2f:19:37:90:a7:
5f:b3:d8:bb:6e:24:55:f2:0d:a1:c0:ef:c1:fe:73:
45:ba:c7:33:9b:29:71:ae:20:ef:d6:d1:63:17:34:
1c:13:22:1a:3e:c7:a2:f5:1b:4a:4c:82:bc:c3:0c:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:8D:08:D4:05:DC:B9:A4:80:2D:E6:C1:FF:96:D8:1A:EE:51:19
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:05:9f:36:b5:8f:dc:92:fe:c1:39:d2:9c:fd:07:d6:9a:97:
f5:f7:a7:5e:f7:78:d0:c5:11:97:64:00:79:00:0d:ca:0d:d5:
d0:ed:0f:61:9e:83:37:5d:c2:86:ab:75:e9:1b:f6:4e:93:11:
5f:eb:24:26:6b:13:5b:38:3c:7d:ed:6f:ff:34:5f:5d:f1:63:
8b:5e:dd:a3:35:e6:21:c3:98:b3:60:b1:a3:e7:01:79:56:c3:
d0:84:a8:56:dd:b6:03:ca:7c:db:82:07:7e:1b:64:6d:eb:f6:
22:b2:f7:3c:ff:02:70:01:11:f1:78:11:47:6b:ba:fc:a3:5a:
c5:12:3f:a6:5e:29:e7:4c:d4:aa:fb:05:30:6d:54:9e:3f:de:
d6:87:28:3a:02:db:d3:77:3a:32:a4:2e:18:c5:31:c7:e8:21:
9b:2a:8d:36:16:f0:7c:ee:49:9f:fa:51:f2:c5:3b:4d:91:31:
23:ac:4b:2c:a9:33:12:7d:5a:8b:18:2e:ac:d5:c2:5b:f6:75:
d5:e4:59:67:18:e8:84:45:52:f6:4e:ee:37:b8:17:76:51:cd:
14:7e:91:fc:0c:90:11:0f:d1:1c:c3:3a:e9:c8:ef:64:0a:7e:
c3:6d:3c:e2:69:1d:fc:26:97:4a:b2:e6:a0:dd:83:1c:b4:e3:
39:d4:9f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5amaN+QblFqCc5ShdCbtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjUwNjI5MDIwMDQ3WhcNMjUwNjMwMDIwMDQ3WjAzMTEwLwYDVQQD
EyhhNzM1OGQwOGQ0MDVkY2I5YTQ4MDJkZTZjMWZmOTZkODFhZWU1MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPbxq+SFjbAcugCmEdv5sYg5yak+
e/ouCZ7N0+DEofc1wgqfjthleZNVC6qLVu+a/yk4GYTppsL1nPIus91DL/3sEA2j
my0Pv39QgpuxN+q3vaMYFlJ5WZCA2M/nlV+9bvK7LU2bLWtlkAl+nzrS5aKmnVli
r6uVVAixaN7xJXqMFO5G8QejAm+smssciKaaUBY9zyVyrT3TslIYNbUxOaWKiHii
NP2mqWQPOCkXZnFnU7xD+286o/jj9k1Lv2od4WU2kYATA3txwoAzLxk3kKdfs9i7
biRV8g2hwO/B/nNFusczmylxriDv1tFjFzQcEyIaPsei9RtKTIK8wwwYewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKc1jQjUBdy5pIAt5sH/ltga7lEZMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgWfNrWP
3JL+wTnSnP0H1pqX9fenXvd40MURl2QAeQANyg3V0O0PYZ6DN13Chqt16Rv2TpMR
X+skJmsTWzg8fe1v/zRfXfFji17dozXmIcOYs2Cxo+cBeVbD0ISoVt22A8p824IH
fhtkbev2IrL3PP8CcAER8XgRR2u6/KNaxRI/pl4p50zUqvsFMG1Unj/e1ocoOgLb
03c6MqQuGMUxx+ghmyqNNhbwfO5Jn/pR8sU7TZExI6xLLKkzEn1aixgurNXCW/Z1
1eRZZxjohEVS9k7uN7gXdlHNFH6R/AyQEQ/RHMM66cjvZAp+w2084mkd/CaXSrLm
oN2DHLTjOdSfJw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:10:49 2025 by rpki-client