Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier: lDyQ49mC+B0Z0lZL8RyXm3ieIVThuWQny5CLpBg50kg=
Subject key identifier: 2B:8E:2B:C0:CD:8B:BF:08:5A:01:57:1A:80:55:59:8B:AA:B2:16:CE
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 019642C36D65B6A360755619FA857A89FA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number: 1118
Signing time: Thu 17 Apr 2025 08:00:25 +0000
Manifest this update: Thu 17 Apr 2025 08:00:25 +0000
Manifest next update: Fri 18 Apr 2025 08:00:25 +0000
Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: oU68lsLiLo9+p7Kl0COwqEIElhpeEH2VvftgSMiJGXg=)
2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c3:6d:65:b6:a3:60:75:56:19:fa:85:7a:89:fa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Apr 17 08:00:25 2025 GMT
Not After : Apr 18 08:00:25 2025 GMT
Subject: CN=2b8e2bc0cd8bbf085a01571a8055598baab216ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:40:6a:06:f6:ea:55:31:ed:5a:5e:3a:f9:
50:a3:99:b6:b1:4b:63:92:3f:bd:84:f8:b6:d4:d5:
c7:17:11:37:29:39:44:7a:58:2a:8f:0b:77:51:46:
4c:13:1b:ee:d0:1e:c3:05:4a:70:cd:cd:33:04:d6:
3d:20:a4:ab:65:03:5c:ae:be:5c:06:2b:1a:db:f7:
a3:ad:e2:3c:e5:b6:e2:3e:40:2a:a6:f3:94:40:2a:
59:23:98:c4:42:b7:ab:85:65:b8:a8:31:99:b3:4b:
6c:2e:69:40:64:fe:10:64:dd:cc:a2:83:fa:71:48:
ec:37:d7:32:e9:87:62:41:d3:bc:be:a2:ba:49:1a:
6f:a5:b3:2b:44:3f:38:be:69:38:3e:99:b3:ed:dd:
2d:c2:c7:83:45:64:81:7f:37:ed:78:fa:0b:38:8f:
2a:56:67:8e:ef:e4:c4:22:24:34:21:d6:87:64:d1:
1b:0b:1c:5c:b2:78:d2:b1:b5:23:4d:fa:70:09:d1:
13:d3:87:dc:1b:0f:59:c6:8c:04:04:2a:0f:58:98:
29:53:f9:c4:30:b2:a3:4a:03:94:92:78:2d:c7:3a:
f2:4f:95:0c:27:68:48:3a:3b:3b:f7:46:0a:6c:2b:
f8:1e:26:82:64:fa:e6:c0:63:0f:39:9d:b8:cf:4c:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:2B:C0:CD:8B:BF:08:5A:01:57:1A:80:55:59:8B:AA:B2:16:CE
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2c:33:e6:20:fd:69:8b:7b:e0:8b:f6:1b:7a:03:70:54:03:
6e:19:d0:3c:ee:c1:1e:f2:f2:17:94:c3:a4:e9:34:9b:b3:f7:
ab:55:db:3d:a6:0f:03:c1:33:ac:a6:3a:53:2b:6e:79:d5:46:
a6:1a:0d:82:15:0d:08:6a:4c:ce:16:e8:a0:61:98:b5:0b:8a:
09:2a:a1:c0:aa:07:f0:ae:b1:36:c4:02:70:15:05:41:4b:35:
db:a9:9f:1b:4a:46:4d:c8:1d:33:86:7f:28:1c:35:c7:d5:70:
4b:4a:16:6d:dd:74:89:d6:af:da:8c:bd:68:b0:a1:75:fc:6e:
91:c6:ca:6d:78:bd:01:cf:4a:34:f0:9d:27:9a:5a:ef:66:d9:
ff:22:55:04:75:f7:f9:f5:9d:a5:8a:94:b5:72:5c:c9:2a:68:
9b:e2:1b:56:4c:1f:04:bb:70:1f:e2:c3:9a:a2:2a:bc:5e:ce:
25:10:9d:b5:41:f6:b7:16:0d:67:46:c4:ce:d0:79:f2:6e:10:
e0:11:39:df:25:21:fb:3e:28:bb:59:15:4b:f6:5a:54:4e:ed:
ed:42:18:d8:21:29:a0:95:25:ad:06:9c:8c:10:c7:f6:c0:9a:
68:c8:b1:e1:6c:00:d3:f9:e1:84:a3:9e:ca:16:6d:c4:de:0a:
49:c8:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:14:12 2025 by rpki-client