Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: aRinHl8K0+i6ll1CougyJbVdREXLzB1JY+oOrT6JAVI=
Subject key identifier: DB:F4:54:3F:4D:72:9B:F8:15:2B:54:E2:BB:A5:5D:C2:88:84:37:0E
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0198D54E14322A5074B9B6958DCEBE792B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: Z/aeMFbxGeMFlICTXkVX1Kvmmj7EWjmyFQBAoCfCgWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:14:32:2a:50:74:b9:b6:95:8d:ce:be:79:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=dbf4543f4d729bf8152b54e2bba55dc28884370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:d4:2d:44:5c:03:23:b8:13:1d:f1:e0:a2:
99:52:5e:ca:5a:b9:bd:f7:14:47:67:3f:5c:3b:00:
20:1d:08:2b:23:46:7d:c4:e8:79:c7:c3:d3:22:63:
a7:5b:d9:9b:12:81:c1:eb:95:6d:df:d6:76:f8:10:
8d:91:28:44:2c:ff:c1:dd:34:7f:19:98:84:32:3e:
e2:8e:0c:0f:b7:bf:9a:27:c6:5a:04:5b:c1:eb:bd:
f0:5d:c5:25:0a:ed:b9:cb:48:9d:2a:c9:ce:c1:aa:
b4:a9:62:dd:9e:46:13:4a:a5:e1:3c:92:47:5b:98:
59:30:9d:d4:e2:49:09:76:3b:05:df:dc:0d:9e:06:
50:05:51:8d:a6:ca:db:84:ab:7c:b7:22:d6:58:3d:
44:f1:d7:60:46:12:01:4d:1c:4f:58:41:28:f6:fb:
d3:74:26:00:16:d1:df:02:b9:8c:7b:62:fd:c9:fa:
94:e1:51:b4:e2:5c:ef:f5:82:90:78:be:5c:96:23:
bc:ab:f7:3a:fb:53:21:61:7d:7f:14:10:2d:8c:ff:
1d:ab:9a:94:a9:f8:94:12:98:4a:46:4f:e6:ba:6c:
3a:17:c8:89:12:cb:86:e0:9d:d1:26:d1:34:7f:76:
66:4b:b1:9f:18:22:e1:5d:f8:14:f6:ef:b0:8a:6e:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:54:3F:4D:72:9B:F8:15:2B:54:E2:BB:A5:5D:C2:88:84:37:0E
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:10:d7:16:70:a3:c8:02:a8:63:b8:65:55:c7:06:c4:72:2b:
4c:90:0f:c8:c1:0d:cc:67:4f:c6:6a:9e:5d:54:98:37:c2:a7:
4d:42:59:79:d7:70:5e:7b:bd:51:ee:6a:45:43:cf:29:cd:1e:
f4:63:8b:e8:92:7d:e7:0a:8c:21:05:19:0a:37:b7:38:46:62:
8f:a8:43:3a:cb:c3:c2:61:da:90:94:15:f5:b8:ac:52:54:03:
02:7f:f2:ce:9b:69:f3:d0:0c:9e:96:84:e5:2e:f4:53:2d:19:
b4:ff:8e:42:54:d4:18:59:ef:d0:6a:04:34:71:3c:4f:17:2c:
af:69:ed:93:75:38:04:11:26:b4:cd:79:fd:49:b8:69:19:7d:
e7:5f:b5:08:8b:87:34:4f:7b:41:49:37:68:4b:20:54:ab:12:
bf:a5:c6:21:ba:20:bf:89:6a:72:b8:f6:47:29:8d:26:78:5b:
f6:cf:73:90:47:12:2a:cc:56:25:f3:16:49:49:51:21:35:05:
6f:2e:91:05:b9:01:17:1c:14:78:4e:f6:c3:6c:78:07:82:b6:
64:f2:64:a2:55:a0:7d:88:00:f1:72:44:58:d1:5a:bc:fd:8b:
4e:d9:60:20:b6:2f:fa:e0:64:f8:32:60:91:bb:0d:9d:ef:14:
6c:4f:52:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:02 2025 by rpki-client