
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: f7xAQaG3Zga9ybrU885v5VJ6h6uRl2X/PMOTi8itcBs=
Subject key identifier: 30:2B:69:31:B9:18:07:9C:0B:00:02:0E:BD:21:BC:1A:64:29:66:EE
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 01984852EE90C13B439BFFDAF298AC42220D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 1224
Signing time: Sat 26 Jul 2025 20:00:51 +0000
Manifest this update: Sat 26 Jul 2025 20:00:51 +0000
Manifest next update: Sun 27 Jul 2025 20:00:51 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: Psxeb6zPSbp783RZZdhDvZBJQSTpxmRpjes+8tKkE5g=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ee:90:c1:3b:43:9b:ff:da:f2:98:ac:42:22:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jul 26 20:00:51 2025 GMT
Not After : Jul 27 20:00:51 2025 GMT
Subject: CN=302b6931b918079c0b00020ebd21bc1a642966ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:d0:74:dc:90:ea:f8:61:ef:b4:7d:2c:93:
87:79:98:b3:6f:94:66:a3:44:2b:67:e4:af:37:cd:
34:5e:bf:15:aa:c7:dc:ad:14:9c:8d:67:53:43:42:
2f:fe:28:32:7e:d0:4b:ef:fc:b1:79:df:ab:ce:3b:
70:c4:0f:6d:bc:51:81:d2:8c:c7:ab:14:28:62:35:
10:56:4a:4b:53:f1:11:62:81:11:7c:9a:84:fd:97:
4d:f5:f0:1a:4d:8f:c8:50:eb:4c:42:34:82:62:e8:
45:a9:a7:02:22:a5:f4:66:5f:63:76:9a:cf:7a:e2:
9c:d7:6e:2d:e1:e6:52:86:a7:6f:b7:46:eb:95:bd:
e3:f2:35:c3:b8:5f:6c:88:97:71:e7:2a:57:db:09:
b8:44:cd:49:52:84:ce:fa:9a:6d:b7:d1:c5:de:ca:
23:5c:b8:33:b7:09:2e:f7:ba:22:60:f0:55:ca:bc:
28:e3:68:14:b3:43:1a:29:a8:66:9d:5e:03:83:44:
33:9b:ab:ac:33:8b:ec:39:27:55:11:a2:55:a2:8d:
76:78:7f:32:14:84:3c:03:49:61:71:8d:91:89:62:
64:48:93:bc:55:3e:99:58:d1:00:4d:f5:d4:7a:d6:
a5:96:5d:59:e6:51:13:15:5a:f3:a7:ab:9f:52:04:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:69:31:B9:18:07:9C:0B:00:02:0E:BD:21:BC:1A:64:29:66:EE
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:df:fc:3e:96:a6:b6:84:e1:a1:fe:93:1f:f3:d2:f5:90:
e3:bd:88:33:55:a8:66:f4:3b:63:d5:28:7a:77:4a:25:00:6a:
28:57:55:92:d6:d9:33:6e:c9:fc:10:0a:93:fe:51:eb:3a:86:
4d:8a:39:f2:b0:64:51:2f:ac:e1:bb:de:da:f9:b2:14:62:c9:
a6:2c:e1:4c:ad:dd:86:35:ea:ba:4a:78:39:75:c6:30:a2:d4:
8a:3e:a4:91:8a:95:82:74:64:3b:d9:dc:0c:42:da:4a:b8:5f:
fd:62:9e:f9:f3:ca:4c:a4:28:fb:9f:8d:36:30:82:5c:5c:cf:
e7:f3:7f:26:70:79:4d:bd:93:5c:b4:41:1a:e6:91:77:d3:f4:
f2:6b:e1:ae:51:a3:79:7a:ce:d8:c2:68:90:7b:be:c9:9a:8e:
5d:5f:79:6f:80:74:d0:59:22:1b:8c:e9:c3:c4:70:39:9e:17:
a0:7b:d5:69:41:68:a4:22:ad:d4:1a:87:39:d9:94:b3:ba:d4:
24:d9:56:30:92:0f:94:54:3e:f0:02:dd:fd:a4:7a:c0:ba:12:
7b:94:29:63:e4:29:02:ec:2d:d2:b6:a2:95:a6:f4:56:d1:50:
e6:30:c8:87:9f:af:2d:20:4a:d0:ef:94:96:67:ef:f4:07:94:
e4:af:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:24 2025 by rpki-client