Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: 97vJS8gZhrRoUV9AMS6LvJgGXMl93+/DgHu1JrHFgbQ=
Subject key identifier: E4:41:1B:A8:04:E7:09:44:CE:F4:D4:C1:1E:F8:6D:8D:2A:B0:D7:87
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019749686A45324295323FDC2F895A818C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1588
Signing time: Sat 07 Jun 2025 08:01:08 +0000
Manifest this update: Sat 07 Jun 2025 08:01:08 +0000
Manifest next update: Sun 08 Jun 2025 08:01:08 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: ePj9yJpmN3OnP7uIwBxP6qaUZiZW7wAUjUMT1XzhK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6a:45:32:42:95:32:3f:dc:2f:89:5a:81:8c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Jun 7 08:01:08 2025 GMT
Not After : Jun 8 08:01:08 2025 GMT
Subject: CN=e4411ba804e70944cef4d4c11ef86d8d2ab0d787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:f1:42:d0:e1:7e:7c:f9:52:9c:79:d5:b2:
36:b0:5e:69:62:74:96:73:45:f2:7a:e8:93:f2:8f:
d5:ad:d9:ad:5b:e0:dc:6b:31:d8:be:cc:c2:6f:d1:
43:52:19:91:4f:41:6e:83:62:d3:ba:ed:c3:ba:35:
f6:f4:c5:d8:0a:aa:25:3e:cd:0c:34:71:ee:94:a2:
f9:ba:2e:2f:ca:9a:a7:16:66:32:06:af:46:d2:a2:
9a:82:b8:2d:7b:46:33:b4:cf:92:8d:b5:8c:7f:d9:
d7:a2:c5:b4:85:c7:d3:e4:ea:ae:d5:39:ce:82:21:
30:01:cf:3f:e4:13:d7:f6:2b:c7:83:b8:0d:6c:ca:
7a:d8:83:39:b7:50:f3:26:4d:d6:0d:be:0f:4a:b8:
1b:55:14:ae:9a:91:f5:f9:bd:4c:c5:0b:c7:df:b9:
8a:1f:d6:21:08:6f:82:3d:a5:c3:02:38:0a:e8:85:
4b:77:4e:65:70:e2:d8:8e:6f:69:25:6a:d6:70:14:
c3:d5:fd:a6:ad:f3:fc:60:d5:55:fe:0f:d3:91:62:
00:8a:23:af:3a:1a:61:33:3f:d0:c8:e1:7d:50:48:
c2:97:af:75:33:d5:dd:4b:1e:4f:45:ec:09:21:3a:
20:62:e3:cb:4c:ca:65:f5:d2:c8:dd:dc:a7:ad:d9:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:1B:A8:04:E7:09:44:CE:F4:D4:C1:1E:F8:6D:8D:2A:B0:D7:87
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:3a:f7:fc:24:9c:3c:5b:0e:02:6f:18:0f:28:fc:c3:51:
fc:83:d7:25:ef:91:51:b6:70:c4:52:e0:b0:77:58:2d:02:c4:
fd:2a:00:11:30:54:1a:9f:72:1d:af:14:51:d5:a5:e9:a6:12:
1b:21:ff:ce:3b:4e:5f:be:a8:ed:f6:e6:0c:da:c0:5e:72:21:
b9:80:a8:f9:45:c1:fd:e7:7a:2e:8c:bb:e8:d5:ee:7e:61:35:
5e:3b:af:69:59:4d:09:ba:96:b7:9a:e8:6a:47:56:2f:96:1f:
d4:ae:c2:37:79:ca:9a:58:cd:13:81:8c:86:52:f9:3f:d4:90:
b5:63:64:c9:06:ad:4f:a4:fb:1e:78:b2:21:a4:9b:42:2c:5e:
2e:d0:c4:cc:6d:de:2e:d7:2b:8f:17:c7:39:1f:b0:c0:3d:f9:
87:15:02:3f:18:3d:62:e6:b9:88:90:1f:70:00:30:df:62:54:
a4:a3:a1:8e:fe:30:6f:ab:1f:32:94:49:74:a7:fa:68:e2:33:
90:7d:6f:f9:90:11:49:da:48:fa:94:33:8c:31:e7:42:2f:46:
ad:a6:36:4a:5d:67:13:60:6e:98:ec:53:8f:03:c7:86:81:7c:
95:ab:a5:78:fa:89:83:69:09:44:39:24:59:32:81:8b:7b:a8:
c0:55:1a:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaGpFMkKVMj/cL4lagYwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjUwNjA3MDgwMTA4WhcNMjUwNjA4MDgwMTA4WjAzMTEwLwYDVQQD
EyhlNDQxMWJhODA0ZTcwOTQ0Y2VmNGQ0YzExZWY4NmQ4ZDJhYjBkNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cDxQtDhfnz5Upx51bI2sF5pYnSW
c0XyeuiT8o/VrdmtW+DcazHYvszCb9FDUhmRT0Fug2LTuu3DujX29MXYCqolPs0M
NHHulKL5ui4vypqnFmYyBq9G0qKagrgte0YztM+SjbWMf9nXosW0hcfT5Oqu1TnO
giEwAc8/5BPX9ivHg7gNbMp62IM5t1DzJk3WDb4PSrgbVRSumpH1+b1MxQvH37mK
H9YhCG+CPaXDAjgK6IVLd05lcOLYjm9pJWrWcBTD1f2mrfP8YNVV/g/TkWIAiiOv
OhphMz/QyOF9UEjCl691M9XdSx5PRewJITogYuPLTMpl9dLI3dynrdlbQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORBG6gE5wlEzvTUwR74bY0qsNeHMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT469/wk
nDxbDgJvGA8o/MNR/IPXJe+RUbZwxFLgsHdYLQLE/SoAETBUGp9yHa8UUdWl6aYS
GyH/zjtOX76o7fbmDNrAXnIhuYCo+UXB/ed6Loy76NXufmE1XjuvaVlNCbqWt5ro
akdWL5Yf1K7CN3nKmljNE4GMhlL5P9SQtWNkyQatT6T7HniyIaSbQixeLtDEzG3e
LtcrjxfHOR+wwD35hxUCPxg9Yua5iJAfcAAw32JUpKOhjv4wb6sfMpRJdKf6aOIz
kH1v+ZARSdpI+pQzjDHnQi9GraY2Sl1nE2BumOxTjwPHhoF8laulePqJg2kJRDkk
WTKBi3uowFUa3g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:02 2025 by rpki-client