Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: n4mdW30T0MkzOfYsL+SrP7taPcbENT31+f6PW6YqynQ=
Subject key identifier: BC:F7:CB:C5:FC:C6:F5:41:8F:BF:1D:1E:5D:72:EF:D0:D1:7F:FA:81
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019677C3CD2E7A38B20EDC2E0690008D34EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 15:00:42 +0000
Manifest this update: Sun 27 Apr 2025 15:00:42 +0000
Manifest next update: Mon 28 Apr 2025 15:00:42 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: mDmof5nXYzkjmzi4djnLoatGiEJNilRMvbH0ugwoEcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:cd:2e:7a:38:b2:0e:dc:2e:06:90:00:8d:34:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Apr 27 15:00:42 2025 GMT
Not After : Apr 28 15:00:42 2025 GMT
Subject: CN=bcf7cbc5fcc6f5418fbf1d1e5d72efd0d17ffa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:0a:74:49:34:b7:6a:0c:1a:4a:09:06:b2:
e7:18:a9:32:7e:66:91:f1:70:34:90:2a:f0:c5:28:
09:a6:5a:ad:ea:93:31:e4:04:95:61:fb:78:b3:58:
67:cb:67:87:24:d9:46:9d:19:b7:6c:27:56:7e:75:
e7:30:2f:41:f3:42:62:65:31:f3:f4:0d:2e:82:40:
7f:1a:ea:9d:2a:70:50:54:e9:42:73:8a:a1:75:13:
5a:1b:39:fd:6d:01:ca:84:3f:4a:02:ad:52:09:40:
fc:f4:b5:13:42:fa:f0:73:b0:65:87:a2:3f:7f:21:
3f:a6:9d:f9:77:90:4e:a7:cd:f7:07:43:c1:97:2e:
8e:3f:d4:34:44:4f:e1:83:1f:24:5e:f4:80:39:41:
f0:63:ea:e8:8a:eb:5b:4f:0c:b4:40:2d:fa:01:dd:
0f:13:1b:31:57:b0:01:42:0d:71:6f:ba:1f:34:bf:
4c:c4:0d:32:23:e5:46:16:4c:ed:09:7c:19:93:22:
e1:10:1d:e5:58:e2:ab:55:58:51:5f:08:c8:93:ee:
e2:23:63:8c:43:8a:32:10:3f:0a:84:59:cd:58:ef:
fd:b1:96:0d:8f:bb:6a:d8:00:3e:23:f0:8a:7b:0e:
27:8e:a2:e8:78:50:f7:2e:8d:94:f6:96:f4:87:6c:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F7:CB:C5:FC:C6:F5:41:8F:BF:1D:1E:5D:72:EF:D0:D1:7F:FA:81
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:87:3a:a3:88:4d:a1:f2:c5:7d:e4:7b:b8:88:24:4f:a9:6e:
23:f4:a2:61:e0:cc:0c:1b:cf:2f:bf:8b:e9:c0:ac:1e:d2:51:
28:32:58:e6:2a:85:ac:1f:cf:9c:c1:7d:b3:8b:a1:98:b1:e8:
3b:d7:d2:0d:5c:14:57:19:e1:09:43:b6:a5:04:be:fe:8b:bd:
09:b2:85:34:36:44:80:cf:b1:5e:f8:0f:12:5f:71:5c:75:8b:
5b:5e:78:ef:fa:5b:c5:cc:c7:18:c2:92:a4:1f:5c:35:61:da:
ef:7b:5c:5b:7d:52:7b:61:ff:8a:07:1f:20:b5:af:09:19:59:
89:93:c1:fe:f6:d2:ef:d9:a6:6a:4d:9d:82:8b:3b:ba:94:c7:
24:bf:3e:76:a2:4f:4d:4f:7f:58:8c:44:f4:5f:ce:ce:bf:42:
75:1a:29:a1:ea:f2:65:25:d0:18:40:34:e7:83:aa:ed:c8:4d:
7d:e2:df:9a:9a:1d:c2:cf:22:a2:dd:2e:93:0b:2c:2d:d1:ba:
8e:98:74:d6:e7:9f:26:4b:bc:e3:3f:06:5e:7f:cf:16:e4:2b:
8c:26:e6:b2:3d:fc:95:ea:bd:b5:81:4d:5b:71:cc:de:72:66:
e0:54:fb:db:ab:29:18:0c:b4:2c:c4:80:94:f2:29:17:fe:99:
33:9a:70:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w80uejiyDtwuBpAAjTTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4
YjA4YTIwHhcNMjUwNDI3MTUwMDQyWhcNMjUwNDI4MTUwMDQyWjAzMTEwLwYDVQQD
EyhiY2Y3Y2JjNWZjYzZmNTQxOGZiZjFkMWU1ZDcyZWZkMGQxN2ZmYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAwKdEk0t2oMGkoJBrLnGKkyfmaR
8XA0kCrwxSgJplqt6pMx5ASVYft4s1hny2eHJNlGnRm3bCdWfnXnMC9B80JiZTHz
9A0ugkB/GuqdKnBQVOlCc4qhdRNaGzn9bQHKhD9KAq1SCUD89LUTQvrwc7Blh6I/
fyE/pp35d5BOp833B0PBly6OP9Q0RE/hgx8kXvSAOUHwY+roiutbTwy0QC36Ad0P
ExsxV7ABQg1xb7ofNL9MxA0yI+VGFkztCXwZkyLhEB3lWOKrVVhRXwjIk+7iI2OM
Q4oyED8KhFnNWO/9sZYNj7tq2AA+I/CKew4njqLoeFD3Lo2U9pb0h2xRHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLz3y8X8xvVBj78dHl1y79DRf/qBMB8GA1UdIwQY
MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt
NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm
LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIc6o4hN
ofLFfeR7uIgkT6luI/SiYeDMDBvPL7+L6cCsHtJRKDJY5iqFrB/PnMF9s4uhmLHo
O9fSDVwUVxnhCUO2pQS+/ou9CbKFNDZEgM+xXvgPEl9xXHWLW1547/pbxczHGMKS
pB9cNWHa73tcW31Se2H/igcfILWvCRlZiZPB/vbS79mmak2dgos7upTHJL8+dqJP
TU9/WIxE9F/Ozr9CdRopoeryZSXQGEA054Oq7chNfeLfmpodws8iot0ukwssLdG6
jph01uefJku84z8GXn/PFuQrjCbmsj38leq9tYFNW3HM3nJm4FT726spGAy0LMSA
lPIpF/6ZM5pwYw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:10 2025 by rpki-client