Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: ioGsnn5+KRk0/2idKdpVmiZCPabCNFlxeXH/Q0CBtcU=
Subject key identifier: C5:E8:68:D3:B7:8E:33:89:1E:C4:14:B7:84:86:55:B3:ED:F8:3C:20
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 0197B77C2E88A5046CA3C5723D4AE0266E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 11D9
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: cJj8HrYDaWEWREWlPZ5p/XCqi1Jpm9spRiY6lb+3BDI=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2e:88:a5:04:6c:a3:c5:72:3d:4a:e0:26:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=c5e868d3b78e33891ec414b7848655b3edf83c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:ae:fa:b4:dc:30:c2:f4:19:22:4c:b0:ee:
5a:13:4e:93:8e:b6:b0:b5:ea:0d:0e:7e:fe:a1:24:
46:e3:2f:b2:6f:b6:a5:4e:fb:2d:9d:e0:18:bc:c0:
cb:83:a5:17:51:5b:ab:58:b1:7c:8f:e4:d3:b7:f9:
3d:30:ce:36:50:0a:9c:13:0d:3c:96:70:dc:5d:5b:
d0:c4:6d:c6:38:7b:21:de:ca:eb:12:52:45:86:b6:
e3:87:02:e2:94:95:8d:e9:25:66:19:98:5c:fc:fa:
a6:e0:8f:d4:e5:f4:05:4e:bf:9e:aa:f4:a1:f2:27:
38:47:d5:3c:e6:36:e9:7b:9a:28:eb:d5:67:b4:12:
16:b6:dc:f2:46:9d:c0:ee:d0:e9:c9:4c:a8:e5:4f:
40:91:ab:d0:b5:bd:c9:4c:5a:0b:94:a6:34:f9:e4:
2a:90:1e:7e:9d:ee:29:b3:cc:74:95:a4:93:a2:a2:
ea:f6:2a:c1:8b:12:72:17:c8:c2:c0:c6:ec:d8:fd:
79:b7:57:85:e2:cd:78:e6:44:d5:99:a5:3a:41:6c:
d2:1d:76:55:10:56:ed:5d:d7:20:1e:17:bd:6a:a4:
2d:7f:58:63:3b:6f:48:92:26:5c:e8:b2:aa:58:d1:
d8:3f:bb:38:d0:b9:93:b0:f8:2c:97:bc:0f:da:80:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:68:D3:B7:8E:33:89:1E:C4:14:B7:84:86:55:B3:ED:F8:3C:20
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:8a:2d:a2:ae:20:25:0e:d0:a9:10:13:d9:32:af:e8:24:
9f:53:34:e4:57:fb:42:95:43:59:59:32:ba:94:23:f9:85:31:
ee:1d:13:00:63:78:83:86:12:b0:51:03:9d:1b:84:24:a7:d8:
b5:e1:93:a6:8b:f5:ca:7a:58:f4:84:e6:47:d4:5a:44:30:29:
33:d4:78:25:bd:f9:9f:24:ab:e7:58:40:e8:fc:2f:3b:84:59:
5d:0d:eb:85:1e:e7:66:94:bb:2d:eb:84:68:ce:7c:9e:95:0d:
6f:64:b7:49:f7:02:06:69:4e:c7:65:54:65:00:fc:a9:31:19:
32:2c:0f:80:de:9b:00:b2:0f:aa:6f:5b:b4:02:7b:ce:9a:ab:
5e:46:fc:1e:6b:39:b4:10:bc:37:87:41:9a:f8:dc:48:cc:3f:
88:4d:52:21:98:93:2a:bc:a7:47:70:dc:ae:c2:91:41:60:76:
d7:6a:4a:ea:65:50:4a:3a:a2:75:c7:45:59:f4:e2:33:e1:a1:
1b:2b:f7:f5:7d:8f:ee:05:47:50:7d:a6:a5:4f:25:99:8c:b4:
8c:21:86:1a:b5:30:0e:78:d9:2e:b1:21:46:63:51:75:51:51:
67:b1:a2:bf:3b:27:da:2b:36:1c:b7:3a:de:57:93:da:49:0d:
48:55:3f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:44 2025 by rpki-client