Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: lo1UT5+32SehrQMiiNX63J5XhIGYuISbtMz5xzyzrcM=
Subject key identifier: 38:95:51:8B:07:B8:E2:F2:DB:F8:C4:30:0E:75:51:66:21:2A:11:FB
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 01976D06F34C362D3EA4403F14B03E55FFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 06:01:01 +0000
Manifest this update: Sat 14 Jun 2025 06:01:01 +0000
Manifest next update: Sun 15 Jun 2025 06:01:01 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: hdkBAJvlPTSI4Mf9k20Yu3ugYCcIJJJjwRUJ8T9g3gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:f3:4c:36:2d:3e:a4:40:3f:14:b0:3e:55:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Jun 14 06:01:01 2025 GMT
Not After : Jun 15 06:01:01 2025 GMT
Subject: CN=3895518b07b8e2f2dbf8c4300e755166212a11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d8:bf:7f:d5:89:50:98:aa:ce:02:03:a4:17:
df:bc:f7:60:d9:5e:6e:8d:0b:c7:0b:20:d7:8f:4f:
cb:e1:06:1e:98:14:01:dc:1a:9a:51:42:8c:e3:7a:
3e:0f:c9:e6:74:78:d1:21:a4:ec:f0:e6:0a:8b:91:
3e:67:89:f1:ef:0f:56:ca:fc:14:7c:f4:25:28:42:
13:40:05:db:ab:8d:24:dc:b5:de:b7:33:18:bd:fa:
cb:26:72:32:9e:d4:b8:5a:03:f0:ea:4a:c1:ea:74:
65:e1:f8:2d:20:9a:57:ef:05:cb:d1:59:6a:7a:81:
c2:09:5f:f1:c4:a1:2f:24:3e:d1:bb:fd:89:75:e4:
21:4c:71:22:a0:a2:f8:e9:74:0d:c5:4a:ed:f3:17:
76:91:c9:8f:af:2a:5f:6d:f8:b4:4c:ca:fb:f4:a8:
38:09:10:c6:bc:8c:40:3d:61:bb:56:d5:ec:8c:f2:
3e:ca:93:0a:d0:fa:5c:dd:a7:12:bb:c0:04:50:b3:
05:b8:c5:8b:19:16:8d:9c:a9:84:d3:12:0d:a2:ac:
e2:71:59:94:4a:78:cb:ce:b2:f9:ce:dd:57:db:30:
4c:49:a0:c1:d0:23:62:98:9a:5f:4e:db:b4:c6:07:
aa:7e:f8:ae:8e:1e:0c:b5:88:92:07:f2:ec:d6:8d:
75:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:51:8B:07:B8:E2:F2:DB:F8:C4:30:0E:75:51:66:21:2A:11:FB
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:17:04:fc:25:08:4f:6b:f3:8d:10:ca:97:9a:81:a6:3d:32:
c7:43:d1:6f:1e:9d:0e:b6:23:38:86:35:16:16:6e:00:77:38:
9b:4d:56:c2:26:cf:87:fe:88:9a:00:31:4d:40:b4:c1:55:ab:
7b:2e:04:be:ef:63:38:fe:bb:88:d8:0f:35:6a:98:c4:92:55:
31:a6:e1:d0:6f:28:a7:37:8e:db:d5:fa:99:ae:92:5e:e7:4a:
8d:e8:98:1e:33:4e:cf:8d:02:79:58:e5:7f:06:b1:bc:f1:79:
06:9f:67:50:7b:ab:7a:35:f8:56:e4:58:cc:68:1a:70:69:65:
7d:25:13:90:ef:ef:95:44:80:60:83:55:69:6e:73:6b:78:c6:
7c:31:6a:b1:da:88:c5:ce:f1:6a:bd:95:e8:7a:bf:ca:bd:8d:
ec:3c:50:08:22:ed:66:b8:52:0b:fb:27:18:94:fb:bf:29:a2:
94:a1:ac:22:6e:e1:9d:39:88:28:25:8a:31:70:c8:2c:22:4b:
9e:ce:ac:62:d4:9e:cb:2d:d2:d4:d8:42:9e:49:9e:a4:f2:41:
dc:66:88:ae:d8:4f:27:01:4a:fe:d4:eb:33:eb:91:e4:ce:84:
e4:67:68:3c:d2:6c:82:71:3b:50:f4:6b:d6:c7:e7:ea:87:81:
bd:da:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:06 2025 by rpki-client