Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: 57ZzNwfqLOdPafF/VN6vgF+Wb2qd0c+zIMyx7j7n4ig=
Subject key identifier: B2:53:37:1E:EA:37:AB:F2:47:3F:3F:FF:E8:C0:8C:89:FE:51:2E:31
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019A23653D26BD9B0091972B900BF0C944E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1702
Signing time: Mon 27 Oct 2025 02:00:28 +0000
Manifest this update: Mon 27 Oct 2025 02:00:28 +0000
Manifest next update: Tue 28 Oct 2025 02:00:28 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: YJaWCZCz9PvIu+sgGIQdZMVjsvqwZeOW/qP6+rlhg5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:3d:26:bd:9b:00:91:97:2b:90:0b:f0:c9:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Oct 27 02:00:28 2025 GMT
Not After : Oct 28 02:00:28 2025 GMT
Subject: CN=b253371eea37abf2473f3fffe8c08c89fe512e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:08:a4:68:d8:f8:0f:6b:8b:1a:0a:29:2b:
4a:76:10:89:0c:d5:76:44:35:df:a0:db:39:31:b5:
92:cb:e5:78:bc:1a:76:f1:72:26:34:83:e7:11:f2:
f3:e2:89:73:9b:f9:70:ce:69:02:18:4b:0c:ce:71:
b1:6d:0d:17:1f:23:6a:2f:d3:61:2a:1d:0a:5e:9f:
c4:c9:ba:88:73:f8:9c:fc:26:e6:5d:55:02:55:25:
9d:94:e4:e0:dd:db:fa:46:3f:ea:6b:75:34:49:05:
5d:dc:72:65:f7:f7:a7:44:ab:21:61:0e:24:d9:e5:
75:29:bb:df:66:e0:bd:d3:5d:46:2c:6b:49:d4:7e:
07:01:6b:7d:e6:7a:97:5a:32:ca:b4:1f:02:99:99:
97:ad:91:89:fa:c6:ce:13:8e:78:b7:bd:48:ee:12:
57:30:ce:21:f6:d3:c0:8b:b9:d1:78:7e:2a:2c:f1:
fe:69:91:dc:48:89:85:b4:2e:5c:c6:0e:90:c5:3a:
92:c0:a0:6b:1f:7d:f0:1a:82:e8:db:2d:df:f1:04:
99:7d:42:be:28:d8:70:15:8e:a6:0e:f0:5d:37:80:
23:31:0b:d4:bc:ab:43:22:37:07:38:ff:52:8a:3b:
d3:6a:c7:ff:f1:62:ba:7e:93:4b:a3:6f:e9:52:0e:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:37:1E:EA:37:AB:F2:47:3F:3F:FF:E8:C0:8C:89:FE:51:2E:31
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:fd:75:0d:8a:5e:0d:de:9a:7f:9a:04:6b:e4:23:9f:d0:
49:7b:63:53:83:a5:9d:c8:d2:bb:aa:60:ad:a2:ad:84:d0:b5:
21:a9:17:71:a9:6e:a4:c3:e0:a0:69:e0:e2:bd:9f:85:d5:e8:
e5:ce:37:56:d7:c6:75:1f:43:ef:02:a4:57:65:6d:9a:c7:6a:
80:7d:69:7e:42:ea:f1:c2:31:7f:a5:58:2c:82:8c:ef:c6:9b:
0a:37:de:51:06:fb:16:18:ef:03:a0:d5:06:2a:eb:3f:72:32:
fb:bf:49:ce:b7:b4:29:5e:85:2d:37:e7:e3:ca:f7:46:2e:a4:
45:33:98:e5:1a:bc:16:02:e7:f1:3f:17:a6:e0:8e:d9:fa:f2:
96:ea:aa:29:7d:87:dc:f8:f1:f7:b6:b9:3a:b7:67:90:0a:d9:
8e:d6:81:ec:2b:62:b2:b0:28:fe:33:4a:5b:8f:41:02:a5:fe:
e2:25:d7:17:04:4c:59:00:62:d4:66:ba:8f:67:fa:95:78:24:
45:72:0a:0c:3b:bb:e6:7d:5a:12:54:15:fe:7a:94:f8:76:9e:
cd:12:e1:e0:6f:bf:17:79:76:7c:0e:ee:10:51:99:81:86:4a:
79:07:10:68:70:bc:f8:01:6b:d7:f7:4b:b3:47:28:06:d6:15:
ed:53:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:27 2025 by rpki-client