Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: vKhE5ppMRCfjy04pxUPMEYeCLPwEiO9xyeyqBP/WL+o=
Subject key identifier: 09:B3:59:BD:DD:A4:65:10:FC:34:99:2C:0A:84:64:97:EB:E5:47:30
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0199FAD810F97EAD4CD6CD14E406D6EE4472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 05:01:27 +0000
Manifest this update: Sun 19 Oct 2025 05:01:27 +0000
Manifest next update: Mon 20 Oct 2025 05:01:27 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: IOdy6pRSlko3nvSOxrPry12PPpaV0V3SoO9v4/nUWcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:10:f9:7e:ad:4c:d6:cd:14:e4:06:d6:ee:44:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 19 05:01:27 2025 GMT
Not After : Oct 20 05:01:27 2025 GMT
Subject: CN=09b359bddda46510fc34992c0a846497ebe54730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:a4:b6:57:7e:b1:21:e5:48:60:0d:2c:bc:
f9:1d:e0:71:22:56:1e:7e:bc:98:f1:ea:78:d0:b1:
80:b3:30:30:e9:4e:23:4d:d5:ec:a7:d7:04:09:f7:
52:91:e6:23:5d:d5:73:54:80:4c:3a:77:59:43:4e:
06:36:c5:b5:c9:12:e0:6e:2b:08:e3:c4:22:c3:1c:
02:ee:b3:7e:f0:b4:e5:a2:7e:e2:b7:a8:7e:49:09:
59:cd:5e:81:3c:be:dc:b7:ca:cf:1c:f7:ea:80:c8:
5d:5c:36:4e:5c:7d:bc:6e:6b:48:53:c8:7f:de:b3:
c1:be:3e:9a:e1:b6:1a:64:e8:dc:93:67:a8:fb:77:
19:fc:4f:74:74:3d:0f:b7:14:6c:42:a1:ec:9c:08:
fd:35:46:f3:6f:3c:41:ce:f9:82:6a:b7:4d:3a:d4:
df:bb:77:77:ff:04:ed:0b:4f:84:eb:98:31:0c:59:
0d:03:22:bb:d2:33:82:65:6f:a7:01:38:6d:cd:ee:
64:8d:ec:95:a9:ce:67:a6:19:21:2c:64:b7:00:74:
6f:ae:bc:29:7c:f7:04:2b:7d:42:2a:ad:f8:f0:5b:
ee:60:5c:b8:03:56:08:be:bf:7e:da:e3:0d:67:fc:
b9:b2:30:27:bc:91:bf:69:71:12:9d:a0:72:26:90:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:59:BD:DD:A4:65:10:FC:34:99:2C:0A:84:64:97:EB:E5:47:30
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:84:77:6d:77:43:8b:fa:5b:11:e9:34:e5:bc:31:20:c7:22:
19:87:cc:47:23:cb:99:97:8c:f3:e3:7b:22:34:b2:ef:93:24:
d3:bb:be:f1:6c:96:57:76:8d:c6:9d:0f:b1:d2:36:eb:2b:a6:
04:c5:6b:68:07:47:f4:88:23:f6:13:c5:98:10:66:d7:4d:c2:
0c:95:e4:77:e6:62:88:4b:02:51:e7:f6:a7:75:76:2f:29:81:
02:dd:6e:30:ee:ef:ea:a0:4e:0e:8f:25:ea:a5:7b:ee:35:1c:
9e:d9:45:30:24:15:8b:40:0c:99:48:9d:27:7d:69:e9:5a:eb:
5e:0e:bc:f2:1d:99:44:c5:3b:6b:c5:12:86:b8:50:1c:a2:9e:
91:b6:7b:d0:df:f4:14:c8:2f:e9:40:ba:64:64:77:47:18:44:
d2:d2:3b:bb:8b:fc:ba:01:36:e4:27:e8:be:55:ef:90:e5:f1:
43:77:3e:68:72:dd:49:c9:a5:43:24:af:23:d4:c2:8f:a4:2e:
4f:82:6d:e2:c7:c5:3e:c8:c8:2f:31:4e:7b:74:15:6a:e7:28:
b3:3b:06:aa:f8:15:28:99:6c:4a:32:8a:42:d1:c9:89:4c:f9:
43:60:cb:e2:e8:d7:e7:83:a8:fe:0e:28:a0:68:e7:cf:36:45:
d0:75:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:55 2025 by rpki-client