Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: Pw33Bzw86scGvDzBUCmLnfkDMRNoBUQ9WxZC33lAP5M=
Subject key identifier: A9:85:CD:41:3F:44:D1:23:08:A1:FF:EF:C8:F9:89:F1:E7:8B:3C:D5
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019A4EF50A7070C85384CF7C23E83B90FCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: jbWcDT9SRilwfx0nCrD5WNsc7IXscsr8yeoTmFnE80s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0a:70:70:c8:53:84:cf:7c:23:e8:3b:90:fc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=a985cd413f44d12308a1ffefc8f989f1e78b3cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:27:38:fc:a8:8e:4f:12:86:6c:c9:e8:0f:
13:b9:6e:d9:82:01:9f:10:d6:43:17:e3:bf:5a:40:
75:f0:60:2e:7c:03:b4:2d:da:09:95:75:45:47:eb:
e6:56:50:9e:8a:82:b8:58:f3:4d:24:08:ab:85:75:
6b:92:cb:74:d8:bf:1b:a3:69:91:c9:ee:c8:25:4d:
a6:0d:bf:d5:c8:92:bc:00:d4:65:36:d7:1d:50:a3:
3b:69:29:53:4a:69:9c:37:8c:b2:5a:45:28:ac:54:
c9:a4:fb:fb:46:94:9d:e5:a2:5b:30:28:df:6e:88:
9e:52:86:04:bb:10:f1:41:ea:54:61:23:ae:28:48:
83:e4:66:cc:63:bf:35:29:ce:f7:0b:ec:b7:5f:59:
6f:53:8d:e2:49:12:19:14:8b:08:2b:12:90:f3:61:
0c:04:14:fa:63:cd:83:7f:0e:99:9d:06:65:45:0b:
1f:bc:ad:be:9e:80:dc:33:e9:bc:1f:9d:b6:59:7e:
42:95:44:85:f9:a9:5d:a6:71:71:7e:65:c7:0f:bf:
7a:30:8d:7d:3e:16:5d:6f:1b:72:8b:9b:2b:1d:e2:
79:6d:a6:a4:40:d1:07:30:f1:6f:2b:4b:f4:2f:e7:
3f:cd:e4:91:e1:cd:b4:e3:e4:75:3d:d5:a1:c2:ef:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:CD:41:3F:44:D1:23:08:A1:FF:EF:C8:F9:89:F1:E7:8B:3C:D5
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:85:b3:63:13:e5:8e:b6:c0:bf:eb:f0:31:6c:b8:be:01:
6a:4b:ee:f0:36:c4:58:6f:ee:a1:81:f4:30:9c:1a:f6:f5:2a:
5b:18:fe:f6:ed:0e:6e:bd:7e:6f:b2:87:1f:01:60:e4:fc:ad:
c1:db:72:df:9c:cf:53:33:97:b2:df:28:1f:dd:78:e5:79:a4:
7b:69:6f:a1:35:d4:c3:2f:b7:64:41:10:21:8c:a1:1b:9c:25:
1e:92:cf:05:09:f5:2b:01:d5:1e:8c:c7:0f:2d:b7:7b:a9:41:
30:de:1b:6f:1a:c8:15:da:4d:7c:e2:eb:a2:8d:2b:40:df:8f:
4e:e4:e2:17:0b:cf:4f:5b:4c:6f:0a:dc:b9:fa:25:9f:fe:62:
39:1e:ae:fd:91:cf:58:1d:b9:49:62:53:f7:bb:d2:34:e3:de:
4e:f4:2f:4a:9b:02:36:99:95:c5:55:d9:fd:59:b3:f6:7b:5b:
89:c5:0f:fd:0e:55:d9:6a:15:32:63:ae:58:ed:6d:eb:62:50:
5f:ee:53:20:c5:55:f4:9f:ad:75:46:aa:32:5b:c2:d6:ff:f2:
de:b7:25:24:8a:62:a7:13:3c:34:55:59:62:49:1f:2d:5d:40:
a0:fd:4a:2f:2a:f8:8f:a8:74:23:2e:66:e2:05:b5:d9:bd:73:
00:9d:29:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:24 2025 by rpki-client