
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: OfKq2zWVv7hVLTKCTXMygJeFPd7Ga2HWzSdcFUGRRKk=
Subject key identifier: A0:A8:0F:8D:E3:1B:A3:1B:50:D4:44:B9:02:91:59:E9:C8:B2:37:91
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 01984A412335A1F4E0CC45CDD8068A9A4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 160D
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: FzTbEMk4CnbvJf3WQ6vs/0j/TlBmZfGLy956iPFvf1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:23:35:a1:f4:e0:cc:45:cd:d8:06:8a:9a:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=a0a80f8de31ba31b50d444b9029159e9c8b23791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:f9:88:e7:5e:ca:7e:eb:4f:7c:a8:26:75:
5a:cb:86:a2:86:ed:67:85:33:f4:5c:33:52:10:80:
04:be:5d:45:e1:d4:96:af:11:07:41:b2:27:ce:fe:
b1:45:87:0c:d3:fe:76:68:2d:64:b1:07:c8:ab:55:
04:ff:57:6f:b9:5a:09:2e:ee:1b:40:5e:04:90:91:
ff:e2:3c:cf:c6:ee:61:8b:43:2a:31:ee:84:b0:a0:
b0:10:a1:81:7f:f2:95:72:94:19:7f:28:81:4e:bb:
23:a7:86:ea:a8:81:91:da:4d:20:80:ac:4c:af:e3:
9e:49:37:73:07:db:f8:8e:e6:13:1e:c1:d4:c8:0b:
50:72:8e:7a:97:e0:47:f5:0f:1f:8d:f3:92:30:cb:
00:19:14:a1:40:52:1d:43:e2:5c:64:8c:40:91:1c:
9c:8f:90:ac:9b:ed:97:2e:d3:45:a9:a3:55:5d:d2:
0e:8c:ad:f0:dd:9f:c7:76:d6:fc:f4:4c:ed:c3:27:
d8:f5:11:37:bd:6b:61:7c:1e:5d:30:db:13:83:a0:
f4:a3:cb:15:5f:7d:38:cf:3a:78:12:dd:38:34:a6:
d6:cb:7e:98:61:8a:15:86:48:63:26:db:e3:7c:2b:
af:cb:ab:8b:bf:26:73:b6:29:97:cd:9f:3e:f4:d5:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:0F:8D:E3:1B:A3:1B:50:D4:44:B9:02:91:59:E9:C8:B2:37:91
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2a:5c:8c:e8:3b:fd:6a:8b:6b:a1:e3:c7:fc:c7:43:8f:6a:
4e:f1:83:7d:7c:97:2e:c7:8b:6a:61:a1:1f:9f:eb:a8:41:16:
6f:60:ff:32:5c:2d:3c:5f:8c:87:3f:4c:41:ca:90:41:cc:7f:
8e:59:a8:e1:9f:ac:f8:cb:27:df:52:d4:ee:d7:fa:a1:92:e5:
37:f8:a8:bc:0b:30:f7:47:f4:a5:15:36:e2:dd:3c:a7:ae:9a:
74:da:44:84:db:87:4d:bf:6a:d0:4c:60:d8:66:a9:55:ea:c4:
23:5c:fe:31:60:cc:3b:d1:86:66:80:03:c3:5a:30:38:3f:0b:
5c:7e:97:7f:92:d8:23:5a:7a:7e:76:58:d8:bd:ca:22:5a:21:
25:96:42:6e:84:14:83:12:8f:5e:02:c8:98:5b:2b:02:8e:6d:
c6:f3:74:2d:c9:b2:4e:0b:fd:55:86:5b:9a:f4:1d:5a:6f:e5:
36:84:e5:ba:6f:4e:d0:d4:04:cc:63:d1:20:93:b2:5a:a9:b5:
6c:46:6b:f8:ef:29:71:b6:76:d4:eb:50:7c:06:3a:04:c7:02:
ee:59:52:85:f3:12:92:ab:69:a0:c7:fc:ed:96:b4:ad:5f:c2:
c5:71:84:4e:33:08:df:43:81:db:c8:d1:98:2d:1c:48:9b:2d:
c7:5a:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:27 2025 by rpki-client