Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: oCbhHpUyQzyBvDrrNZBTN3t2wCJlqOg8AHuQRfwoB1k=
Subject key identifier: 4E:4D:0D:6D:DB:BB:81:3D:8C:84:1F:AF:EE:9C:BB:2A:44:55:52:67
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 0197B6A22DD0BBBA16B34D3F69DA295860EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: XWCjytiosxdpg0+o5TsfbUKCpI9zUNZfBjWeJD69LWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2d:d0:bb:ba:16:b3:4d:3f:69:da:29:58:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=4e4d0d6ddbbb813d8c841fafee9cbb2a44555267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:1b:f1:49:4e:77:7a:7c:e4:4b:05:14:ea:
ae:0d:e9:d5:98:20:44:75:76:4c:9d:51:4c:5c:6d:
ae:85:e8:b7:25:b3:44:ae:eb:43:18:26:7d:e4:2e:
a3:07:47:4d:30:55:c9:e7:91:ac:26:29:31:58:b1:
98:c3:da:48:b7:35:6b:d5:eb:c3:84:e0:96:6d:28:
87:ff:e0:68:22:5f:10:25:c8:f1:cf:1c:5b:13:0f:
63:9b:47:d4:44:77:9b:70:be:74:92:6b:d1:d8:b4:
29:11:6c:02:ed:a2:ed:ac:90:b4:71:80:d5:88:8e:
63:e4:d8:c1:a7:5c:56:a6:d9:20:0e:7a:dd:c3:e1:
45:90:ad:8a:16:6f:be:46:2f:c4:2d:1e:c3:63:0e:
7e:48:b2:e0:cb:2f:7a:29:bb:f6:bd:3f:6d:d1:7f:
a3:ce:e8:1d:d8:a6:5a:55:18:15:f2:3c:98:6f:ea:
bc:9b:c0:b9:fb:be:03:97:89:60:58:92:4d:87:64:
5c:41:b8:1d:77:7c:94:df:87:e4:5d:2b:7f:65:94:
29:40:c5:d9:3f:47:9d:38:8a:1e:f8:a3:32:35:34:
3c:43:bf:41:4a:f4:d4:44:81:ba:5e:3c:d1:16:99:
7b:4a:94:84:80:61:b0:a9:44:74:56:74:0d:30:c4:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4D:0D:6D:DB:BB:81:3D:8C:84:1F:AF:EE:9C:BB:2A:44:55:52:67
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c3:a5:87:de:85:ec:79:0d:03:4a:a5:de:e7:06:03:75:70:
b9:a6:4f:f8:c3:b9:c5:5a:04:64:f0:89:9b:ca:69:c5:15:83:
18:b4:50:57:bc:8a:33:68:a1:90:4d:54:5f:20:c7:00:5b:2d:
8b:61:18:74:c7:40:60:02:bd:f6:3f:06:12:17:00:a3:9b:72:
dd:c1:9d:7f:63:66:cf:57:44:37:a1:a5:51:8e:64:8b:93:6e:
92:0f:78:22:ac:e4:64:0c:9e:e7:54:b6:2c:42:6d:a3:19:e2:
f8:84:cf:ef:4a:7c:29:e3:b8:56:c8:c2:82:c5:6f:ea:b7:56:
bf:29:91:de:74:3d:a8:e3:99:8b:06:e3:a8:20:a6:b5:e1:d4:
ce:2b:a7:c4:9a:36:81:16:9d:01:d2:6f:de:87:e9:7a:aa:77:
4d:3b:49:4f:2a:fc:73:cb:0a:3b:44:3a:1e:ec:f0:77:28:26:
fe:df:85:37:76:dd:d6:7c:04:16:67:87:97:f6:d1:10:e6:c0:
c2:e9:20:d7:d0:9f:4d:7c:90:4e:50:93:eb:7e:6e:98:76:d6:
10:a7:0a:50:d9:db:c1:5d:e0:ed:1b:b4:80:3c:67:41:f2:22:
5a:79:f4:1e:d0:d3:1a:11:99:cd:99:e7:df:5b:c3:a7:4c:4b:
db:48:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:46 2025 by rpki-client