Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: fYJwU4WYpb5Ff2gbOEbscwRy9xWiZRcwUBe9LI4s0y0=
Subject key identifier: 95:65:4C:38:0F:8F:13:36:49:A8:67:CA:EC:3F:D6:B1:AA:3C:51:1F
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019889216BE20DBEC7B7B02CD765C5795F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 10:02:05 +0000
Manifest this update: Fri 08 Aug 2025 10:02:05 +0000
Manifest next update: Sat 09 Aug 2025 10:02:05 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: XaQG2yQh8teuls1o5l0M6gJh8Moc6LWPL5/KooK1PlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:6b:e2:0d:be:c7:b7:b0:2c:d7:65:c5:79:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Aug 8 10:02:05 2025 GMT
Not After : Aug 9 10:02:05 2025 GMT
Subject: CN=95654c380f8f133649a867caec3fd6b1aa3c511f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:b1:22:fa:98:29:61:6e:d1:20:2d:07:b1:
9e:67:40:77:49:5a:55:2c:3d:72:1f:4d:5d:6d:7d:
16:06:21:e6:b5:90:4d:d3:7d:07:d3:42:65:67:0e:
81:78:23:99:9b:18:fa:2a:9b:51:98:91:86:29:41:
d3:7b:7f:b0:71:ac:1b:0c:21:d4:98:64:02:1a:3c:
9c:95:ae:23:83:ea:18:d0:34:f0:cf:ea:56:8e:99:
aa:3f:8a:60:6a:bf:88:6d:64:55:24:21:fd:a7:1c:
28:2d:f5:3e:7c:20:a7:29:61:05:25:0c:d5:2e:90:
6f:77:ec:0c:e4:8d:b8:bc:86:39:e7:53:7e:28:d3:
3c:52:2e:30:ef:53:fc:1f:39:b7:b7:86:b5:f3:6e:
0e:cd:92:ac:41:da:9e:c1:74:3a:d4:b2:dd:b3:32:
b0:1a:ac:41:dd:45:50:cc:e1:29:83:4d:ac:a1:d7:
c5:62:ae:b8:77:d0:db:2d:f6:99:4c:31:c2:72:47:
9e:cf:cc:5f:18:ac:72:74:09:1b:b3:42:2c:02:cf:
1e:cf:4d:b4:90:02:e3:07:6d:81:3e:13:08:e1:da:
37:62:17:2f:15:4b:7d:01:18:92:48:07:75:86:86:
e8:7f:f4:77:e6:66:48:a6:65:44:dc:1e:ac:f9:76:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:4C:38:0F:8F:13:36:49:A8:67:CA:EC:3F:D6:B1:AA:3C:51:1F
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:3a:84:e3:30:8e:bf:56:ee:7f:b0:b4:5f:be:86:ec:10:
5f:a4:91:d0:39:6c:e3:68:c3:72:8e:18:3b:28:e2:67:13:9a:
d6:39:6a:e7:91:dd:9f:35:18:fc:7a:51:a9:0f:a2:14:d2:c9:
53:ee:76:88:47:88:f6:03:cd:4e:ee:80:c4:1a:cc:f2:5e:ba:
09:c5:d9:63:9b:5a:b7:47:6f:37:cf:93:cb:05:60:ac:88:1e:
57:bb:35:68:0d:8f:f9:32:09:8c:bc:a0:ed:be:21:03:b8:d6:
a2:34:b7:2e:68:15:6d:86:2d:df:c3:9c:70:42:da:c9:e1:b4:
cb:17:09:41:0d:be:0a:cc:25:6d:42:46:1a:e3:76:b2:f3:54:
1e:f7:61:3b:32:8b:22:a3:d4:16:d4:ad:96:98:75:88:82:1c:
8b:a6:16:7c:7d:d0:37:ce:7f:5d:a3:2a:fb:53:79:ef:a9:80:
30:60:0b:56:e5:df:08:34:40:81:20:a5:52:62:65:61:86:c2:
ae:89:27:50:d0:a8:b1:b5:87:62:aa:24:cf:ed:50:e3:17:fa:
ae:2f:b9:96:33:27:f6:a9:32:4f:94:6f:0b:bc:6b:36:7c:bf:
8c:f7:12:42:75:78:dc:9b:60:31:5d:94:d9:13:f3:eb:44:3d:
8e:d3:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:17 2025 by rpki-client