Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: MN6Y2ADFLmS09gxunW1LUSwfvF+J6sVpA/oewse7Kqo=
Subject key identifier: 71:3D:E4:90:EA:FB:0E:A7:3C:64:53:DE:35:EF:4A:F5:4B:D6:39:90
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 0196C126166ACE381F63600ED82F152C1C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 21:00:20 +0000
Manifest this update: Sun 11 May 2025 21:00:20 +0000
Manifest next update: Mon 12 May 2025 21:00:20 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: Q2Wd4W8D/13bk84OyuSsmtw+G3wUZDtFcgEGrD/OQOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:16:6a:ce:38:1f:63:60:0e:d8:2f:15:2c:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: May 11 21:00:20 2025 GMT
Not After : May 12 21:00:20 2025 GMT
Subject: CN=713de490eafb0ea73c6453de35ef4af54bd63990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:c7:e9:c7:96:b4:91:a9:4e:04:c3:95:cf:
a3:d8:f3:39:35:19:5b:98:ab:f6:35:66:f3:a0:e2:
21:f6:ee:2f:8b:0e:43:0c:61:a4:a0:88:59:26:63:
88:82:dd:64:3a:40:7d:c6:e5:7c:d3:3e:f7:91:0c:
a3:68:b0:f9:17:e6:69:80:fb:23:5a:2c:17:c7:49:
86:97:4d:e1:07:5a:e1:70:31:c8:c7:2d:85:c9:8d:
ff:6a:fb:6f:98:c2:7f:9f:c7:9f:6e:f5:05:6d:bb:
0c:6e:21:46:ae:85:85:e2:2a:ea:c9:75:a1:c9:7d:
f4:e8:1c:03:d4:cb:1d:7e:13:99:6a:da:22:ea:3a:
21:78:94:6e:ac:12:a0:ad:d7:ec:b3:f9:38:48:32:
c9:a5:65:ef:af:9f:3e:20:9e:26:7b:da:f3:51:b3:
d0:d7:e1:8d:0c:ed:9b:4a:7c:ac:7b:77:fc:8b:3e:
54:f1:95:d9:a2:01:a8:c9:a4:70:a2:14:a8:7d:e3:
9e:61:bd:58:2a:89:98:8a:0a:a5:3b:ef:23:51:c5:
2e:c6:16:19:a7:e2:9a:3d:d2:8c:19:44:73:1b:8a:
87:2a:68:11:a0:dd:a1:42:35:05:40:dd:12:cc:7e:
65:5f:63:b7:ee:2f:cb:d2:ea:8c:14:e8:a2:eb:35:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:E4:90:EA:FB:0E:A7:3C:64:53:DE:35:EF:4A:F5:4B:D6:39:90
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:ac:09:9c:cb:d8:5d:31:fe:3a:5b:ed:d0:ae:0a:59:59:
15:39:09:49:31:1f:e5:15:9b:2e:58:46:6e:ef:53:97:6e:11:
14:22:ce:eb:0e:41:ed:ce:13:88:06:60:55:45:d1:0e:d9:0f:
13:55:30:7c:56:6d:f9:e4:d0:55:44:cb:48:e6:ae:d4:18:75:
db:5d:c6:96:e1:de:fc:6f:15:f5:bc:3b:89:af:97:36:38:10:
d0:6c:5b:79:92:d4:ba:4c:41:13:63:9a:74:a6:ca:7a:66:ec:
67:50:4a:5b:e8:cc:f2:e7:52:68:d8:f5:7d:36:df:5d:d0:e8:
26:ec:62:c4:6f:b6:96:1d:1e:eb:85:35:77:40:f3:94:13:e1:
4d:ff:b9:9a:e1:d2:51:8b:68:59:8c:01:84:6a:82:cb:5a:15:
48:a8:63:e6:17:ab:4b:a6:61:0d:f6:89:50:74:55:a9:be:c6:
b0:62:e2:ea:71:02:29:54:31:f3:93:ad:73:8e:7a:b1:5c:81:
97:6f:a0:1d:6a:6c:53:54:3c:e0:0c:06:78:34:b0:1d:ac:14:
4b:3c:43:b3:88:26:ee:52:7e:ee:d7:29:89:ca:d9:e1:27:65:
f1:fe:de:eb:5f:e3:80:11:4a:c6:0f:45:97:a3:ee:35:c3:57:
76:0c:06:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:28:33 2025 by rpki-client