Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File: xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier: KBL0vKGC+Mgvx3OsERtF+0OMP8DWsz0CDRS10KuKcQw=
Subject key identifier: FA:CF:D1:3D:A7:7E:05:EB:CB:CF:3D:F4:5C:50:A4:5E:8C:B6:67:42
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer: /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial: 019893A422EEF36CEC518E48FE56ED2198E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number: 1633
Signing time: Sun 10 Aug 2025 11:01:04 +0000
Manifest this update: Sun 10 Aug 2025 11:01:04 +0000
Manifest next update: Mon 11 Aug 2025 11:01:04 +0000
Files and hashes: 1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: 2VknhvrBdopiakOQemIt+LpTWMqM1URUY8s5CDH5OYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:22:ee:f3:6c:ec:51:8e:48:fe:56:ed:21:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Validity
Not Before: Aug 10 11:01:04 2025 GMT
Not After : Aug 11 11:01:04 2025 GMT
Subject: CN=facfd13da77e05ebcbcf3df45c50a45e8cb66742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:31:e9:1b:84:cb:39:c7:3d:e1:5b:c9:d1:d1:
67:bc:e5:a1:eb:dd:12:63:ff:7c:7d:e7:19:8b:0e:
27:fc:79:f3:ac:1f:20:20:6e:50:c6:a4:ce:0b:86:
6c:9f:3a:b1:8c:c9:31:98:d9:e2:ea:f5:de:0a:bd:
0c:2d:a2:e7:ce:f4:76:27:2a:48:5d:cd:01:7f:15:
59:3d:4a:61:49:fa:f1:33:2d:df:a9:c2:36:03:4d:
dd:71:ec:c8:11:f4:9d:9d:8a:71:8a:5c:37:b5:72:
4e:75:78:d1:3b:f7:ee:2d:64:c5:ff:f5:10:c8:56:
41:c8:2f:c6:87:3f:95:fe:0b:a6:53:94:05:49:87:
4e:4c:8b:f5:ad:36:3d:d3:77:48:65:90:6f:1b:8b:
70:2b:92:25:8e:70:2b:a7:f4:62:8b:1e:02:fb:0c:
f1:be:0c:45:2a:2b:51:dd:0c:ae:15:c7:69:bd:16:
84:08:7a:7b:f2:3c:c7:3e:3f:83:b1:3b:fc:a9:14:
7a:db:24:5c:48:6f:20:b5:f9:3b:73:27:62:ea:22:
49:a6:38:a7:a7:93:bd:5b:d9:0b:fa:19:d3:ac:f5:
c6:2e:0b:0f:1e:22:e4:40:3b:a1:dc:6f:47:9f:53:
19:e8:48:ae:37:71:06:64:ec:1f:cd:96:2c:ed:a5:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:D1:3D:A7:7E:05:EB:CB:CF:3D:F4:5C:50:A4:5E:8C:B6:67:42
X509v3 Authority Key Identifier:
keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:32:ce:61:51:1a:64:fd:a0:cf:fb:92:ef:49:59:25:40:c8:
59:f0:78:c0:be:bf:07:3f:33:d8:d5:ae:33:af:19:af:a8:ef:
fc:12:e4:ae:65:e1:9e:bb:ae:b1:f1:b0:bc:3e:88:e4:ab:83:
79:dc:64:62:48:56:aa:45:23:4c:b4:96:9a:da:72:99:50:2a:
06:ba:ee:d8:ae:65:90:7d:2a:18:31:88:c0:15:21:38:d5:c5:
7d:72:f9:e7:74:2f:3f:4c:85:23:3c:77:6c:ca:1a:3f:ac:76:
bc:b9:90:68:63:82:33:6e:bc:6f:ef:08:b3:cd:49:eb:62:20:
83:56:30:9d:da:5f:e6:4d:33:4d:66:79:70:9c:b2:85:5e:be:
7f:da:d6:62:95:f9:ad:e1:33:02:a0:4c:6d:ee:b4:73:7c:8e:
5a:c0:e7:66:7f:74:97:f9:a4:56:a7:88:9e:61:99:a6:e0:7b:
29:e8:25:7f:2c:03:c7:64:e4:7c:bc:c0:20:bf:75:26:b7:77:
8a:47:73:a6:e3:d9:37:15:d1:2a:86:aa:99:57:3c:6e:15:72:
4d:06:88:de:ca:1f:c3:f0:61:5c:2a:4f:d2:d1:df:9b:54:af:
8b:ca:80:e2:0f:bc:ad:c9:ab:54:88:82:75:49:09:9e:33:ac:
55:a7:ae:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTpCLu82zsUY5I/lbtIZjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NTgzZjU4YzcxMTBhZDRjYzYwOWY0ZmZiN2NhYjJmODBj
ODM1ODEwHhcNMjUwODEwMTEwMTA0WhcNMjUwODExMTEwMTA0WjAzMTEwLwYDVQQD
EyhmYWNmZDEzZGE3N2UwNWViY2JjZjNkZjQ1YzUwYTQ1ZThjYjY2NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zHpG4TLOcc94VvJ0dFnvOWh690S
Y/98fecZiw4n/HnzrB8gIG5QxqTOC4ZsnzqxjMkxmNni6vXeCr0MLaLnzvR2JypI
Xc0BfxVZPUphSfrxMy3fqcI2A03dcezIEfSdnYpxilw3tXJOdXjRO/fuLWTF//UQ
yFZByC/Ghz+V/gumU5QFSYdOTIv1rTY903dIZZBvG4twK5IljnArp/Riix4C+wzx
vgxFKitR3QyuFcdpvRaECHp78jzHPj+DsTv8qRR62yRcSG8gtfk7cydi6iJJpjin
p5O9W9kL+hnTrPXGLgsPHiLkQDuh3G9Hn1MZ6EiuN3EGZOwfzZYs7aX2vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrP0T2nfgXry8899FxQpF6MtmdCMB8GA1UdIwQY
MBaAFMZYP1jHEQrUzGCfT/t8qy+AyDWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMt
M2Q1OTNlYmU1MjIwLzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDBjYWUtZWMxMy00NWZiLTlhZmMtM2Q1OTNlYmU1MjIw
LzEveGxnX1dNY1JDdFRNWUo5UC0zeXJMNERJTllFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozLOYVEa
ZP2gz/uS70lZJUDIWfB4wL6/Bz8z2NWuM68Zr6jv/BLkrmXhnruusfGwvD6I5KuD
edxkYkhWqkUjTLSWmtpymVAqBrru2K5lkH0qGDGIwBUhONXFfXL553QvP0yFIzx3
bMoaP6x2vLmQaGOCM268b+8Is81J62Igg1Ywndpf5k0zTWZ5cJyyhV6+f9rWYpX5
reEzAqBMbe60c3yOWsDnZn90l/mkVqeInmGZpuB7KeglfywDx2TkfLzAIL91Jrd3
ikdzpuPZNxXRKoaqmVc8bhVyTQaI3sofw/BhXCpP0tHfm1Svi8qA4g+8rcmrVIiC
dUkJnjOsVaeu6g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:54 2025 by rpki-client