Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: +hKK0YD+AmK2Mz19uYieivRd280ekXQ3VLopjFnIbDo=
Subject key identifier: 2B:D0:41:97:62:FD:05:7F:77:55:D6:B2:84:BD:D3:1D:C5:91:37:11
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 0196C4271A61D6FE293F66683F11A86BC485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1543
Signing time: Mon 12 May 2025 11:00:19 +0000
Manifest this update: Mon 12 May 2025 11:00:19 +0000
Manifest next update: Tue 13 May 2025 11:00:19 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: NeT84TGtZs4fCAApb8/7Nrbna6YRXyHna/nXOMv5pEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:1a:61:d6:fe:29:3f:66:68:3f:11:a8:6b:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: May 12 11:00:19 2025 GMT
Not After : May 13 11:00:19 2025 GMT
Subject: CN=2bd0419762fd057f7755d6b284bdd31dc5913711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:f1:55:70:7d:93:ce:5b:f7:0f:86:ed:08:
d1:9a:e4:a2:93:03:29:d1:f0:8f:7f:b1:1c:49:de:
c3:13:27:74:46:87:2f:9a:16:64:85:e6:65:08:f0:
c6:b6:14:53:42:a7:c7:59:04:12:2e:bd:2b:e7:13:
f0:f0:a1:69:2d:d7:af:91:62:de:62:e0:d5:09:fe:
f3:40:0f:54:10:ce:23:74:e5:43:26:fe:0e:47:37:
26:c5:36:58:dd:0c:01:41:e8:6e:97:34:17:98:74:
b2:92:e9:e8:b6:0a:81:64:a2:74:c2:2e:07:ed:8f:
50:de:1a:ae:8b:75:94:cf:65:6a:66:2e:84:71:0b:
ef:58:9d:f7:b2:cd:c4:90:7e:70:b6:02:88:b6:9c:
9e:8d:ac:32:6d:05:53:e3:59:f9:e3:12:c7:78:22:
e0:69:d0:0e:d1:36:1e:e8:1e:c4:c4:9d:a9:48:d0:
f0:af:3a:0f:e4:41:dd:ec:02:fb:33:ea:f8:67:cc:
3e:ec:e5:37:cc:45:cb:9c:47:97:9c:87:08:ef:27:
e2:70:57:09:1a:ac:e9:aa:67:dd:b8:ac:46:27:08:
d7:7b:9b:2a:9f:c8:d9:79:42:b9:eb:8d:39:fb:89:
0b:6b:c9:09:c1:8b:4b:7d:ce:03:fc:80:d9:7a:a2:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D0:41:97:62:FD:05:7F:77:55:D6:B2:84:BD:D3:1D:C5:91:37:11
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:20:fc:41:b6:84:19:46:1d:b7:32:2a:b8:5e:3b:8b:1c:14:
df:08:3c:42:b6:52:6b:23:c3:30:6b:df:17:ef:9a:1c:6f:11:
b4:b8:7c:fc:34:c3:42:ba:1a:51:94:da:de:75:89:c5:8a:52:
80:96:ab:2b:50:20:40:f2:4d:21:0a:8d:6c:a7:21:ab:ce:1a:
77:6c:6c:74:9f:fe:17:60:dd:4c:b8:5d:97:e2:a2:27:23:11:
e1:ef:f8:bf:c5:dc:da:44:29:cf:31:4d:8a:e8:13:9c:5b:2d:
56:39:d7:ac:48:70:74:23:ba:6f:a3:c2:db:a0:d1:9a:3d:9e:
83:32:07:38:28:d3:8e:c2:d9:69:21:0d:6b:3c:8e:53:87:ea:
c4:cc:34:6b:21:98:5d:b2:a8:b9:57:db:8a:f5:13:70:20:74:
f2:db:69:07:fc:ee:bf:e3:ac:81:34:ea:86:78:3b:47:d7:77:
10:19:c0:d7:1e:48:36:d4:3b:ea:00:b2:a1:13:6b:4c:6d:c1:
53:24:0e:8b:ab:be:e7:e1:55:4e:79:4a:ce:f5:3c:6d:62:db:
56:bc:21:fc:88:ee:a8:28:e0:67:2a:a1:a5:62:1e:79:c6:f9:
68:c8:0e:fd:2d:07:4e:f8:bf:bc:84:7e:fb:b6:51:c5:16:4e:
b1:c6:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:04:17 2025 by rpki-client