Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: Jpio0teMwawpIBaDt2sOCMfxxWm25XGgvfQqhpDoSTA=
Subject key identifier: BA:BE:02:D6:2D:69:80:CA:C7:6A:16:96:0C:8C:BC:34:CA:03:35:57
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 01967D8EC2FDFDA3E0AD6A1BBBA7E8F5EE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 18:00:30 +0000
Manifest this update: Mon 28 Apr 2025 18:00:30 +0000
Manifest next update: Tue 29 Apr 2025 18:00:30 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: CWfREbPe8UAgyt47qiQ9wEYOiBfl/kvxQVidl0h8x+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:c2:fd:fd:a3:e0:ad:6a:1b:bb:a7:e8:f5:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Apr 28 18:00:30 2025 GMT
Not After : Apr 29 18:00:30 2025 GMT
Subject: CN=babe02d62d6980cac76a16960c8cbc34ca033557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:50:91:96:eb:18:07:29:32:63:01:1a:3f:
18:1f:29:59:41:e6:74:f7:e4:da:aa:50:45:8b:d3:
63:9c:a1:d2:09:d2:ee:9b:7a:d2:8d:1b:f5:29:7c:
f1:27:63:16:52:e0:07:9b:06:32:e1:f8:3c:2d:0d:
3b:32:be:e4:a7:e7:ea:08:ba:58:58:57:e9:9c:80:
f7:19:d7:34:22:fd:3f:3b:48:7f:1d:1a:8a:96:ac:
48:69:c0:79:91:dd:14:e7:f1:92:df:02:18:fd:e0:
9b:3a:f7:50:5e:81:f6:07:b0:5c:5e:b6:85:ad:60:
d2:af:87:03:85:e7:ed:cc:c7:f0:f0:b1:ff:93:42:
87:b2:76:6f:cf:d0:17:d7:83:a9:c3:07:5f:ec:39:
91:e3:99:a8:a6:20:30:6f:3a:c7:c7:32:02:53:c3:
62:d2:cc:87:7c:c3:a4:e9:b9:09:84:fb:cc:a2:79:
d5:08:f0:84:d2:fa:87:f6:f4:c5:68:e2:93:56:54:
62:ea:bb:dd:02:9b:64:14:de:b1:8b:9c:bc:24:ba:
26:b5:57:8e:5a:2e:d9:a0:2b:8e:ce:77:d8:74:47:
35:f3:80:16:34:8b:37:bb:b9:b4:08:68:15:6f:f7:
cb:96:f3:db:bc:a2:99:2c:ea:61:06:44:0e:da:a1:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:02:D6:2D:69:80:CA:C7:6A:16:96:0C:8C:BC:34:CA:03:35:57
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:05:d5:a7:f0:e8:be:b9:85:a5:97:f6:9d:52:46:1d:a8:
ec:29:9d:96:3f:8f:ad:36:27:55:a1:cf:79:e6:cc:fd:c1:1c:
6d:e7:ec:8d:11:3a:c2:23:c6:c8:12:84:b3:ea:41:94:09:a4:
17:9a:9d:87:a1:57:7a:6e:a1:75:32:11:51:19:f9:cc:d2:53:
9d:6c:4a:d7:dd:ad:0c:8e:66:17:a3:91:06:e7:1d:fb:e8:5c:
c4:bd:cd:a7:61:4b:fb:bc:c4:43:58:83:de:14:42:77:7a:85:
f4:58:ad:01:79:86:13:c5:7a:9c:04:67:69:1e:da:a6:54:ed:
13:4d:fe:35:d7:1e:b8:91:c1:bc:0a:ef:f3:1a:f7:c9:67:96:
c2:ed:f7:4c:8d:78:af:63:56:b8:3f:7b:ec:44:9f:9f:c1:c3:
b8:09:7b:3b:85:00:ee:be:aa:ae:19:32:a8:e0:f5:a9:09:c1:
d7:cc:6c:34:7a:0c:bb:3b:09:12:f3:de:19:19:4e:8c:cd:9d:
f0:0a:33:49:37:2f:96:9a:2c:41:a1:4b:9d:cc:2a:23:2d:62:
1e:b8:ef:6c:ff:d9:88:8c:48:6e:c6:95:c5:20:61:58:a8:ac:
e3:f2:d6:b0:a7:62:1d:5e:a5:3d:c6:b3:f1:05:cd:ef:5e:21:
d0:20:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:33:18 2025 by rpki-client