Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: ozzJfiNJ16ec8TSXzxiF4pNScwVniMwdvMGsC+TyGLU=
Subject key identifier: 02:B5:D9:80:1E:32:59:CB:4C:94:E4:B7:2C:F6:33:10:15:62:80:83
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019A4FD02352F1E83E469CF53973606AD70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: UGoRyBX8RiqUbseG6edoSZfExzuoKbNr9zg8eyFonjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:23:52:f1:e8:3e:46:9c:f5:39:73:60:6a:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=02b5d9801e3259cb4c94e4b72cf6331015628083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:36:c0:38:ae:57:aa:2b:11:e2:ba:c1:09:
1a:a0:34:60:b3:2f:da:4e:22:4d:b2:a3:01:0a:13:
61:4f:ed:b2:0e:08:da:f8:cd:9c:12:f6:bb:63:53:
bd:62:af:a5:72:d5:ec:fe:14:c0:b7:93:eb:45:5b:
a0:49:d8:0d:91:81:c1:84:61:48:ab:fd:b4:8f:84:
28:2c:c6:26:06:ee:75:f5:02:46:5a:6f:b4:4a:9b:
f2:07:6a:6c:02:8a:e9:08:ef:98:34:61:15:b0:eb:
c7:74:d4:93:8d:53:e6:00:cb:f0:74:6c:61:d4:1f:
ae:f1:3b:7b:b7:b0:63:f9:6c:bf:22:d7:21:31:0e:
25:99:e7:09:12:50:46:f0:95:e0:aa:a7:5e:b4:e7:
5f:19:28:10:4c:f3:a0:4e:71:cc:c6:f7:6e:a0:0f:
61:7e:71:43:09:da:fb:fe:86:d0:19:a9:bd:3b:9d:
ea:74:30:2d:78:cf:68:09:be:32:8d:aa:f4:21:d9:
5b:25:b7:76:ed:c1:cc:dc:3f:73:59:4d:41:05:e3:
8e:7e:8a:c1:bb:7b:e9:93:94:ef:ab:2d:33:9b:dd:
4f:9f:5a:71:b6:d9:16:8a:8c:05:a7:e1:c7:f6:af:
07:30:51:63:bd:d1:d9:a3:07:7f:40:99:34:83:7a:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B5:D9:80:1E:32:59:CB:4C:94:E4:B7:2C:F6:33:10:15:62:80:83
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d8:aa:6e:5b:94:0a:a1:be:be:c1:f8:cd:ee:f4:51:ae:4d:
d2:ea:aa:58:18:c7:a2:ee:0d:82:84:80:15:96:2b:28:ad:57:
06:6e:0f:fe:a1:3f:5f:cc:80:df:21:a2:01:3f:06:cf:31:39:
1c:6a:fb:07:d8:23:f0:4b:8f:e7:4b:4e:b9:a8:cd:e2:70:02:
5f:64:57:81:69:1c:83:20:1b:a8:6d:f6:38:e8:26:ec:41:c4:
6c:52:73:89:07:e7:0f:bc:60:6b:94:0e:92:be:b4:7f:9e:87:
bf:93:85:ef:67:a2:76:ec:7d:76:57:46:53:99:59:72:72:7e:
0d:1a:2f:2a:c4:ab:ae:00:65:f1:62:81:29:6f:a6:62:59:a8:
ea:ff:b4:d0:ca:85:9f:03:5a:e6:0a:92:a9:b8:cd:a5:63:65:
60:4b:3f:2e:8a:4c:d0:30:12:96:97:7e:bc:72:69:e5:58:da:
ae:30:cb:3d:95:d8:b3:fd:4f:ce:35:67:5a:e9:a5:6e:1d:bc:
c4:a5:7b:be:14:11:38:5b:b1:4e:66:65:24:8d:7e:cf:ab:fe:
d4:74:5b:56:8b:c6:60:a4:57:e1:45:0b:0e:2c:58:1f:95:7d:
23:30:ea:fd:fb:37:fb:d9:06:0f:b2:9b:02:4c:8e:ff:93:ff:
b0:b3:26:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0CNS8eg+Rpz1OXNgatcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjUxMTA0MTcwMDMxWhcNMjUxMTA1MTcwMDMxWjAzMTEwLwYDVQQD
EygwMmI1ZDk4MDFlMzI1OWNiNGM5NGU0YjcyY2Y2MzMxMDE1NjI4MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kE2wDiuV6orEeK6wQkaoDRgsy/a
TiJNsqMBChNhT+2yDgja+M2cEva7Y1O9Yq+lctXs/hTAt5PrRVugSdgNkYHBhGFI
q/20j4QoLMYmBu519QJGWm+0SpvyB2psAorpCO+YNGEVsOvHdNSTjVPmAMvwdGxh
1B+u8Tt7t7Bj+Wy/ItchMQ4lmecJElBG8JXgqqdetOdfGSgQTPOgTnHMxvduoA9h
fnFDCdr7/obQGam9O53qdDAteM9oCb4yjar0IdlbJbd27cHM3D9zWU1BBeOOforB
u3vpk5Tvqy0zm91Pn1pxttkWiowFp+HH9q8HMFFjvdHZowd/QJk0g3roKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK12YAeMlnLTJTktyz2MxAVYoCDMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNiqbluU
CqG+vsH4ze70Ua5N0uqqWBjHou4NgoSAFZYrKK1XBm4P/qE/X8yA3yGiAT8GzzE5
HGr7B9gj8EuP50tOuajN4nACX2RXgWkcgyAbqG32OOgm7EHEbFJziQfnD7xga5QO
kr60f56Hv5OF72eidux9dldGU5lZcnJ+DRovKsSrrgBl8WKBKW+mYlmo6v+00MqF
nwNa5gqSqbjNpWNlYEs/LopM0DASlpd+vHJp5VjarjDLPZXYs/1PzjVnWumlbh28
xKV7vhQROFuxTmZlJI1+z6v+1HRbVovGYKRX4UULDixYH5V9IzDq/fs3+9kGD7Kb
AkyO/5P/sLMmJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:53 2025 by rpki-client