Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: TuwJHN9w1EBmZVigtIv3Bpqn/JNW2yE6C+/TVKELH9M=
Subject key identifier: 0E:6A:ED:72:16:6C:AA:41:A3:59:F8:37:DA:71:65:83:77:B7:B5:CE
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 019935DCA3B0824E708BF46F435CB5FD964F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 129F
Signing time: Wed 10 Sep 2025 23:01:16 +0000
Manifest this update: Wed 10 Sep 2025 23:01:16 +0000
Manifest next update: Thu 11 Sep 2025 23:01:16 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: +q+t6yWOu6ALSICMqyKVgfv08K6O4WLIBRZ0+/VboLM=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:a3:b0:82:4e:70:8b:f4:6f:43:5c:b5:fd:96:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Sep 10 23:01:16 2025 GMT
Not After : Sep 11 23:01:16 2025 GMT
Subject: CN=0e6aed72166caa41a359f837da71658377b7b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:69:57:b9:46:13:40:45:10:ab:e0:56:5f:
58:7b:a7:c6:23:fd:38:70:7d:0c:ce:41:49:e3:28:
c0:2e:d6:ba:df:7f:4d:95:26:9a:b9:16:6e:88:64:
ba:bc:20:45:10:5e:46:af:e6:7c:35:04:40:63:1a:
55:39:4c:be:1c:76:7b:6e:11:24:c5:58:b7:d0:9a:
a3:61:99:81:36:6c:fa:3c:f0:a3:07:ec:df:8d:80:
33:58:b8:ac:3e:70:5b:c5:e7:ef:1f:f4:24:93:1f:
67:83:1a:f9:54:15:62:59:f8:4f:ae:5e:68:24:e0:
e5:a9:98:9a:c2:12:6b:0c:cc:8c:f9:03:40:8a:47:
40:d6:cf:76:aa:46:b7:2d:1c:96:32:90:ec:25:0e:
b1:d1:53:92:0e:3e:53:7c:85:de:7f:9f:c2:3e:2d:
fe:ea:6e:b3:60:07:d7:18:41:c8:19:fd:39:a2:b5:
50:6f:63:2a:31:54:a5:92:36:36:f8:70:f2:c7:f2:
25:20:2f:e7:2e:b2:ad:7b:2d:3d:35:5c:09:37:41:
f9:64:11:3f:58:b5:00:c4:90:b4:e1:76:6b:e6:19:
a4:28:fb:70:d0:4a:bc:41:3c:63:33:c6:ce:bf:4d:
1c:8f:cc:d9:d1:b8:9a:ef:10:73:4e:b6:00:4f:5f:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6A:ED:72:16:6C:AA:41:A3:59:F8:37:DA:71:65:83:77:B7:B5:CE
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:68:de:32:5f:9b:64:08:73:a0:e8:db:c2:82:0c:48:3d:a5:
13:6f:6b:87:3c:04:46:27:d0:12:40:89:6e:73:cd:d5:c8:57:
f1:80:5a:67:02:aa:46:7f:bb:ae:98:f9:27:f8:50:33:53:55:
79:5d:6f:e5:3c:c4:0c:f1:b4:3e:ea:10:bb:54:fd:65:71:f0:
73:7e:f6:80:5a:f2:7b:5d:66:b6:9e:29:32:e8:2c:80:1a:77:
ee:50:52:d9:7a:0d:f5:25:be:80:29:86:17:c1:54:71:34:a1:
18:6f:cb:f7:be:42:e8:52:ec:aa:74:54:1a:70:b2:8e:5a:e2:
8e:f7:20:cf:84:8d:96:1c:66:17:5d:a4:27:35:22:48:a6:9e:
e7:00:5a:52:ce:55:aa:d9:c0:ad:03:64:df:69:09:87:34:8c:
e3:5e:33:b8:aa:00:d3:c7:02:32:26:dd:88:51:15:42:66:c6:
f1:94:10:cb:c5:3c:50:9c:6f:9f:e3:0f:c6:e6:42:69:71:40:
9e:bb:81:d8:d8:a6:b9:b3:fd:4e:b2:80:8e:0e:77:0a:82:73:
19:17:93:06:f0:97:f0:15:6f:d6:0c:c5:75:6b:5f:e8:de:27:
a3:e7:aa:e9:e0:b9:4c:ab:19:c9:52:61:1b:e2:57:c2:0c:1c:
8a:f5:7d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk13KOwgk5wi/RvQ1y1/ZZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkY2ExN2ZjOGQzOWUwNDNlYTc2OWFmMjhiNTQ4YzlkMzk4
MzFkMjEwHhcNMjUwOTEwMjMwMTE2WhcNMjUwOTExMjMwMTE2WjAzMTEwLwYDVQQD
EygwZTZhZWQ3MjE2NmNhYTQxYTM1OWY4MzdkYTcxNjU4Mzc3YjdiNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0utpV7lGE0BFEKvgVl9Ye6fGI/04
cH0MzkFJ4yjALta6339NlSaauRZuiGS6vCBFEF5Gr+Z8NQRAYxpVOUy+HHZ7bhEk
xVi30JqjYZmBNmz6PPCjB+zfjYAzWLisPnBbxefvH/Qkkx9ngxr5VBViWfhPrl5o
JODlqZiawhJrDMyM+QNAikdA1s92qka3LRyWMpDsJQ6x0VOSDj5TfIXef5/CPi3+
6m6zYAfXGEHIGf05orVQb2MqMVSlkjY2+HDyx/IlIC/nLrKtey09NVwJN0H5ZBE/
WLUAxJC04XZr5hmkKPtw0Eq8QTxjM8bOv00cj8zZ0bia7xBzTrYAT1+HIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5q7XIWbKpBo1n4N9pxZYN3t7XOMB8GA1UdIwQY
MBaAFF3KF/yNOeBD6naa8otUjJ05gx0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgt
NjU2ZGJjMmYyNDM2LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgtNjU2ZGJjMmYyNDM2
LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemjeMl+b
ZAhzoOjbwoIMSD2lE29rhzwERifQEkCJbnPN1chX8YBaZwKqRn+7rpj5J/hQM1NV
eV1v5TzEDPG0PuoQu1T9ZXHwc372gFrye11mtp4pMugsgBp37lBS2XoN9SW+gCmG
F8FUcTShGG/L975C6FLsqnRUGnCyjlrijvcgz4SNlhxmF12kJzUiSKae5wBaUs5V
qtnArQNk32kJhzSM414zuKoA08cCMibdiFEVQmbG8ZQQy8U8UJxvn+MPxuZCaXFA
nruB2NimubP9TrKAjg53CoJzGReTBvCX8BVv1gzFdWtf6N4no+eq6eC5TKsZyVJh
G+JXwgwcivV90A==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:31:32 2025 by rpki-client