Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: ojcuRWDEiISfHMHCRyD8LekRMTcP+P8Gv85K6+5o93s=
Subject key identifier: FA:DE:6A:5F:04:92:4E:4C:5B:2A:D1:BF:38:96:30:16:46:03:7E:0B
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 0194BABB86DB3075174F149B3625BE668296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 104D
Signing time: Fri 31 Jan 2025 05:00:39 +0000
Manifest this update: Fri 31 Jan 2025 05:00:39 +0000
Manifest next update: Sat 01 Feb 2025 05:00:39 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: KQewnromivWl/dedTsHjxHTjVqX8tiMD7oGUj4iCbb4=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:86:db:30:75:17:4f:14:9b:36:25:be:66:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jan 31 05:00:39 2025 GMT
Not After : Feb 1 05:00:39 2025 GMT
Subject: CN=fade6a5f04924e4c5b2ad1bf3896301646037e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:3a:bd:85:75:38:38:56:f0:b9:82:0a:63:
24:65:bc:b8:f8:92:d0:d7:18:9e:1e:24:6f:5d:3e:
73:33:0b:db:98:6d:bd:55:e6:4c:b1:55:44:09:8c:
6d:79:37:14:ef:24:84:ee:89:84:2d:a0:c5:af:a9:
53:31:c7:d4:8e:8a:46:43:9c:b0:9f:f9:07:9a:93:
1d:31:d1:58:d8:e1:4f:53:e9:63:d3:24:71:51:50:
9d:fc:a7:e6:37:2c:d0:6f:51:36:77:ac:45:39:b1:
c2:f1:de:06:4c:7f:e2:89:6e:5a:6b:e8:bb:74:2f:
ae:9c:10:17:70:b5:a8:4b:f8:21:f8:1c:77:ca:b0:
61:13:5c:a0:ef:59:01:e0:1d:6c:82:44:6a:fd:bf:
69:d7:1a:8e:fb:b7:36:50:eb:ec:88:9a:fa:96:e7:
9d:61:86:b6:34:3a:bf:90:b7:8a:5f:27:7b:5f:20:
91:7f:8a:c6:b4:29:9b:b1:ba:56:9b:4f:b2:e7:dc:
39:eb:17:c3:28:8e:86:1c:78:3f:9f:93:6d:21:dc:
fa:9f:7a:80:89:56:43:5e:b5:0d:a4:13:35:30:0c:
c1:c7:3a:fe:14:d3:f7:e6:37:4a:4b:28:d3:66:af:
0a:a0:a5:35:da:df:a3:e7:2b:28:92:b0:a1:5a:84:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:6A:5F:04:92:4E:4C:5B:2A:D1:BF:38:96:30:16:46:03:7E:0B
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:59:05:0b:db:fe:fa:64:16:1a:d9:2f:fb:69:43:ab:fe:
f4:c9:9b:03:f7:a0:78:93:49:fe:76:9b:7f:f7:34:29:0e:9d:
6c:23:81:70:7e:f2:c4:c7:d1:37:68:b5:d3:02:bc:a5:ff:e2:
c9:64:08:d1:92:10:b3:e6:8a:e2:33:7c:91:11:5b:79:4b:86:
0a:11:c2:a8:b1:14:95:97:c2:9f:e3:50:14:52:8c:3b:64:af:
00:20:71:e2:89:0d:bf:d3:7e:0a:ba:85:08:df:c4:7c:84:b5:
ad:58:4a:89:bd:5d:c4:9b:a9:d8:62:c6:f2:52:c7:8b:00:78:
6c:e6:a0:a0:26:8a:bc:c4:fd:e4:3e:38:67:44:96:b4:d4:29:
2b:14:63:60:5e:e2:e9:49:04:4a:7f:4a:67:51:c5:c3:31:77:
1f:88:a1:28:e9:86:10:de:8d:91:9c:b7:11:09:56:79:77:8c:
0b:27:6a:87:a8:f8:4e:18:1e:b2:8b:f5:26:7a:73:5b:d6:38:
ea:84:82:43:02:cd:d2:ee:c4:18:9a:12:e6:3f:b5:52:9d:22:
3c:80:9d:58:f9:56:dc:a2:55:f7:26:1b:1c:d8:7e:62:ce:96:
96:2f:3a:93:da:a1:f2:7b:f0:17:49:80:99:47:9a:32:f9:28:
84:e6:97:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4bbMHUXTxSbNiW+ZoKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2ExN2ZjOGQzOWUwNDNlYTc2OWFmMjhiNTQ4YzlkMzk4
MzFkMjEwHhcNMjUwMTMxMDUwMDM5WhcNMjUwMjAxMDUwMDM5WjAzMTEwLwYDVQQD
EyhmYWRlNmE1ZjA0OTI0ZTRjNWIyYWQxYmYzODk2MzAxNjQ2MDM3ZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwis6vYV1ODhW8LmCCmMkZby4+JLQ
1xieHiRvXT5zMwvbmG29VeZMsVVECYxteTcU7ySE7omELaDFr6lTMcfUjopGQ5yw
n/kHmpMdMdFY2OFPU+lj0yRxUVCd/KfmNyzQb1E2d6xFObHC8d4GTH/iiW5aa+i7
dC+unBAXcLWoS/gh+Bx3yrBhE1yg71kB4B1sgkRq/b9p1xqO+7c2UOvsiJr6lued
YYa2NDq/kLeKXyd7XyCRf4rGtCmbsbpWm0+y59w56xfDKI6GHHg/n5NtIdz6n3qA
iVZDXrUNpBM1MAzBxzr+FNP35jdKSyjTZq8KoKU12t+j5ysokrChWoQNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPreal8Ekk5MWyrRvziWMBZGA34LMB8GA1UdIwQY
MBaAFF3KF/yNOeBD6naa8otUjJ05gx0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgt
NjU2ZGJjMmYyNDM2LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgtNjU2ZGJjMmYyNDM2
LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2JZBQvb
/vpkFhrZL/tpQ6v+9MmbA/egeJNJ/nabf/c0KQ6dbCOBcH7yxMfRN2i10wK8pf/i
yWQI0ZIQs+aK4jN8kRFbeUuGChHCqLEUlZfCn+NQFFKMO2SvACBx4okNv9N+CrqF
CN/EfIS1rVhKib1dxJup2GLG8lLHiwB4bOagoCaKvMT95D44Z0SWtNQpKxRjYF7i
6UkESn9KZ1HFwzF3H4ihKOmGEN6NkZy3EQlWeXeMCydqh6j4Thgesov1JnpzW9Y4
6oSCQwLN0u7EGJoS5j+1Up0iPICdWPlW3KJV9yYbHNh+Ys6Wli86k9qh8nvwF0mA
mUeaMvkohOaXQA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:26 2025 by rpki-client on console-fra.rpki-client.org