Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: S0Ehnshm9XDzeRMdiOnlnnjNZxwRpI/9RkaV9VwhsUc=
Subject key identifier: BE:33:2B:EB:F3:FF:5F:24:F5:52:DF:17:7B:40:43:8E:4F:5E:94:A2
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 0196BA7F39B86039B6B6ACE540AF8C368C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 1156
Signing time: Sat 10 May 2025 14:00:22 +0000
Manifest this update: Sat 10 May 2025 14:00:22 +0000
Manifest next update: Sun 11 May 2025 14:00:22 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: VkkvSVtobiTUERJT3nlb/Rw1Mw0/P+acZfKvWVcbxqc=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:39:b8:60:39:b6:b6:ac:e5:40:af:8c:36:8c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: May 10 14:00:22 2025 GMT
Not After : May 11 14:00:22 2025 GMT
Subject: CN=be332bebf3ff5f24f552df177b40438e4f5e94a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:99:5e:69:d9:dd:30:6a:ea:ee:51:1f:96:
b6:eb:03:d0:90:df:eb:4a:de:a9:da:f8:b1:e8:22:
c6:bb:7c:91:77:7d:17:ad:b1:08:6c:46:4b:f8:0d:
67:ab:59:4f:3d:b7:15:3c:ae:a7:b5:43:5c:58:af:
02:18:80:22:43:5d:33:86:b1:4a:49:c6:0b:7f:1d:
48:01:4b:8e:ac:70:b6:e2:a3:e6:28:c1:f8:2f:77:
c3:53:d1:44:85:cf:29:76:34:6d:1a:6c:c2:b6:0a:
b1:67:b3:b8:91:80:6d:ad:6d:ea:df:83:3c:da:bd:
76:c4:e6:8b:9f:f7:df:0e:9a:f3:19:a1:74:02:60:
d4:9f:54:6b:32:32:83:8b:c2:44:2d:e7:3d:03:0b:
6c:30:26:95:2d:ad:7b:34:3d:44:f8:6d:d0:a0:24:
12:8f:1f:57:d7:11:26:00:bd:82:33:c2:e2:d2:ed:
6f:e1:2f:35:04:ad:32:cc:c0:f8:60:1b:1a:22:d2:
fa:e1:05:09:a6:1f:b3:ef:19:88:68:ff:92:b2:4b:
47:53:e0:61:e2:63:a8:41:ce:56:6f:ba:fa:3a:25:
f6:fc:2e:4e:f9:3e:4a:35:36:1e:34:9e:9b:8b:97:
1e:e5:de:0b:ac:f5:19:07:29:a9:0d:79:80:a7:b3:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:2B:EB:F3:FF:5F:24:F5:52:DF:17:7B:40:43:8E:4F:5E:94:A2
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:db:df:a5:d7:0e:70:b0:09:6d:dc:98:5e:81:4b:b2:89:
01:87:74:14:95:50:98:26:22:a7:27:d5:9e:30:74:eb:0b:77:
4f:69:66:ac:36:b2:9c:65:bb:65:fe:97:31:2e:c8:b8:7c:e3:
96:e5:55:fa:7c:f3:38:01:b9:33:60:4d:e5:04:a1:5b:9d:02:
ac:fc:bd:4b:97:b7:ab:a0:b9:d4:de:4d:94:ac:17:f7:e9:47:
85:a8:25:39:a7:27:ac:76:b7:ee:62:1a:66:8a:f1:5d:9b:db:
62:8f:18:60:fc:c2:c3:b8:63:84:95:c8:4d:ae:67:34:53:b5:
e5:61:c8:76:d4:ec:36:63:fd:fe:6b:af:74:93:55:10:e6:fd:
ea:c5:69:cb:0c:25:50:f7:0f:ec:8f:7b:97:c9:77:ff:4f:59:
f3:3a:f7:88:ac:88:20:8b:96:97:fb:82:39:65:52:b2:15:5c:
5f:f9:12:ec:41:83:59:66:c0:8c:7e:6e:0b:4c:0c:8d:a7:22:
fc:97:57:a8:60:3b:0c:bc:74:c3:b6:31:c6:b1:5a:35:dc:00:
ad:9a:67:af:e6:2e:b4:e7:d6:80:25:47:fa:59:99:53:f7:75:
a4:4a:25:a8:f5:3f:dd:ee:7b:18:11:06:bc:da:4c:44:45:72:
75:54:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:23:54 2025 by rpki-client