Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: ttS90Lnq05M+fn+PyP3IVPQhfF3gXYf8YEgjlK+nWdg=
Subject key identifier: DA:BA:5E:C6:10:7F:99:70:70:31:75:64:F1:BF:31:4E:C6:50:3F:70
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 0199FEB51E82816FD620A67E3E83EF18CE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 1307
Signing time: Sun 19 Oct 2025 23:01:46 +0000
Manifest this update: Sun 19 Oct 2025 23:01:46 +0000
Manifest next update: Mon 20 Oct 2025 23:01:46 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: qW7DgqEB1QiUURdZQySPgWQDUhi9NRWijdP9+tUGHbA=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1e:82:81:6f:d6:20:a6:7e:3e:83:ef:18:ce:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Oct 19 23:01:46 2025 GMT
Not After : Oct 20 23:01:46 2025 GMT
Subject: CN=daba5ec6107f997070317564f1bf314ec6503f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:9e:44:49:ec:d5:3f:31:d5:f7:70:60:f9:
49:7f:97:10:d9:6a:2c:f3:ed:d2:87:c8:19:21:98:
52:fc:fd:5f:dc:09:21:8e:ae:09:98:52:b0:f4:12:
96:c4:a7:20:92:5c:a4:80:89:91:d6:e2:01:60:57:
c5:d5:51:af:05:f4:6a:d4:9f:a7:cd:5c:84:93:08:
b8:52:bc:a7:90:94:1b:3b:2a:52:1d:84:71:0f:31:
ea:61:14:3d:7b:02:5e:3e:ff:86:8a:ed:2e:f2:29:
82:2b:a2:1f:6a:96:54:7b:2f:34:a0:d4:62:b0:37:
ef:3e:f1:35:a6:0c:66:58:9a:b1:38:57:dd:a0:a6:
f3:26:46:7d:2b:37:23:38:a1:85:c4:1f:bb:db:46:
0c:92:20:33:34:19:d3:c6:3c:1b:22:3d:a6:98:40:
3e:55:40:8f:f0:57:ed:ef:b8:84:0e:7f:9f:d6:e1:
32:42:7d:97:95:d2:96:6b:28:1c:fe:ac:ef:64:54:
d5:9e:f1:93:98:68:bb:98:cd:2d:e7:96:ce:82:de:
30:2e:44:a3:ec:ca:74:92:12:ee:41:aa:0f:81:65:
12:95:a6:a9:37:46:dd:1c:ea:b8:e5:19:81:5b:ba:
a3:dd:63:61:5b:75:6e:92:d7:40:51:8c:7d:51:94:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:5E:C6:10:7F:99:70:70:31:75:64:F1:BF:31:4E:C6:50:3F:70
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:7f:ae:42:bc:43:fa:80:6a:49:f1:da:a2:7c:7d:d4:95:
66:8c:9b:09:a8:8a:35:f0:71:5c:5a:36:fd:6f:76:97:78:3b:
64:b0:56:90:d9:84:46:92:5f:c0:34:4b:7e:61:ba:82:7b:da:
87:ed:6c:48:ed:9f:3e:cd:de:a7:74:d9:17:3f:04:e1:04:4b:
2e:2b:d3:d2:87:9f:54:08:70:81:98:0d:67:b4:8e:e0:03:2b:
97:c8:45:1f:17:96:c4:b5:fb:ac:f9:bc:eb:c0:60:dd:05:f7:
76:00:c3:6d:09:ed:aa:7a:91:9c:23:d3:12:ed:1a:8a:68:b9:
81:cd:02:72:fc:9d:81:7f:fc:63:d6:e4:6e:a0:6f:22:aa:ce:
5b:7b:ea:4b:e5:5a:7a:3c:55:25:ae:48:eb:04:3d:db:43:f9:
b5:ec:59:cf:f6:69:84:ce:9d:4e:ad:db:e3:f4:94:a1:50:df:
3f:33:1d:02:58:87:3d:30:54:13:f6:bf:fe:e2:32:f2:6e:f3:
84:13:8a:ce:df:87:af:c6:73:7d:23:d4:46:07:92:bb:63:07:
2d:a1:c7:e7:a2:52:9e:ee:d0:cc:d1:55:25:8f:7a:f6:37:a1:
26:5d:f9:4c:bd:f0:9d:da:c0:b1:43:a2:9d:7b:2e:4e:cd:4e:
a9:8e:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:56 2025 by rpki-client