Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: yaCkH7MGTSEgH6GohFjb79fTLQAVTaGKWolqc9wpyMA=
Subject key identifier: 1C:06:C8:18:BE:EB:01:8D:67:08:7C:17:8B:34:21:0C:0D:66:01:15
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 0199FBEAFC7BC0F9D09E4AEBF14E0DD17786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: vgzWUD00g5YPAGHKeSBGp5kdXwqiYf5T3cuwAin83lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fc:7b:c0:f9:d0:9e:4a:eb:f1:4e:0d:d1:77:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=1c06c818beeb018d67087c178b34210c0d660115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:01:ee:47:d0:4d:29:f0:64:34:72:31:aa:
33:c7:5f:10:8e:b2:a0:b7:e9:31:71:67:9f:8c:bd:
7c:f3:c9:68:4f:c7:87:ce:df:83:25:31:91:c9:dc:
26:bd:ec:13:1c:99:db:1d:10:3a:e2:28:fd:fb:0b:
69:19:79:e5:7a:28:40:6d:69:a3:b1:ec:8c:b6:b7:
83:34:26:43:00:e1:db:8f:a8:e0:05:cd:97:5e:b3:
7e:78:7d:4d:e6:4d:24:7e:d8:8a:5d:42:15:e4:49:
0e:c6:da:3f:4b:7f:67:5d:38:90:8f:56:be:2d:94:
13:d8:66:a0:e5:0d:d9:c5:0b:1c:3b:aa:28:1e:41:
ca:02:fc:d3:02:a3:07:33:d9:cb:0a:7c:f2:a7:79:
aa:f2:ea:01:eb:39:a0:26:16:98:33:f6:a4:8b:05:
1c:64:e9:47:c1:29:b4:2c:d1:ad:db:b3:f2:4e:2b:
5f:f0:1e:c5:40:3e:cf:e4:50:23:62:2d:1e:61:68:
0a:27:c5:06:92:a5:4f:f9:3a:bb:7d:c7:f1:21:4a:
9c:07:e4:e7:f9:cd:b3:ae:ee:d4:e2:07:29:f4:56:
d0:cf:42:dc:33:c1:1b:4a:32:62:21:de:99:4c:24:
97:04:b1:79:33:48:f1:e0:0b:19:ac:6a:66:f4:30:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:06:C8:18:BE:EB:01:8D:67:08:7C:17:8B:34:21:0C:0D:66:01:15
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:83:58:5e:15:ec:a4:09:07:01:46:64:bf:37:c3:c0:58:54:
4d:9e:99:a0:85:c0:7f:27:3c:ef:fd:0f:e5:07:8d:4c:ab:a8:
01:cd:ab:f1:57:06:6c:2c:83:3f:eb:90:b5:e5:98:ae:d7:e1:
2b:a6:b1:c5:d6:23:16:64:0e:d2:d9:7c:ce:38:67:8d:6e:99:
91:9f:e7:73:01:37:8c:28:44:4d:b8:04:3a:1c:2c:06:60:af:
0a:dd:56:2e:7e:76:ee:6e:61:9e:6b:41:f2:64:e3:53:10:ef:
3b:08:6d:45:6f:67:6d:66:ce:7c:99:94:11:34:0c:71:d8:9a:
58:b7:be:c1:e1:d3:69:70:16:93:0c:d6:a3:76:2e:30:4e:44:
a4:e1:90:86:e2:00:dc:ac:d1:8b:a0:60:cb:1a:0c:2c:f6:e5:
75:c6:ce:70:d6:24:f6:c0:37:cd:93:84:1d:55:11:61:ff:48:
8b:cb:42:d0:0a:67:9a:98:c9:c2:4a:af:df:df:7c:d2:06:75:
1a:04:02:60:55:cb:35:bd:cc:ac:60:79:ff:97:49:dc:f7:2b:
8c:c2:6d:fc:09:4f:6e:01:eb:5b:df:98:a6:fd:4b:a2:a3:b9:
88:9c:11:b6:2a:b8:cb:83:8b:45:92:e6:df:56:e7:85:d8:fe:
c9:62:31:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client