Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: 8jl8raML57Pw9Fy1PHrz5ay7lI6VEgnSBwHz6Cm8gMg=
Subject key identifier: 4F:8C:46:E7:F8:8D:6E:2F:0C:34:5C:F7:3F:1D:CB:19:D9:67:67:2F
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 0198D4725E48A6BA241B21FE808A10622B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:01 +0000
Manifest this update: Sat 23 Aug 2025 01:02:01 +0000
Manifest next update: Sun 24 Aug 2025 01:02:01 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: vYGE/LkgMFXQXMDHmKVG3+fevjU0+p4/4sb6vyERyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:5e:48:a6:ba:24:1b:21:fe:80:8a:10:62:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Aug 23 01:02:01 2025 GMT
Not After : Aug 24 01:02:01 2025 GMT
Subject: CN=4f8c46e7f88d6e2f0c345cf73f1dcb19d967672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:81:9d:76:0f:73:d8:86:c5:f4:d2:d6:ea:
b4:89:4e:97:fe:cb:15:86:bd:c9:b5:5d:b0:85:70:
29:9f:bd:9b:0e:3f:a9:08:e3:35:19:51:58:3d:9b:
de:56:5b:60:59:ce:1c:91:b4:d8:1a:b4:d9:3b:bc:
24:86:da:19:4f:76:45:59:12:28:91:47:2c:87:3a:
a9:5a:9e:3b:1a:74:86:df:db:d6:ff:c5:c7:3a:ed:
78:3a:6a:bf:0f:92:6f:fe:b1:4a:41:7d:df:d9:9c:
42:55:09:90:77:8f:66:22:06:9e:41:d1:3d:3d:38:
c2:a3:40:d7:60:48:6a:97:f1:85:36:4d:f1:73:f7:
05:9c:0d:c9:fb:c8:ff:e5:a8:f1:fb:a8:9e:4f:f4:
22:ad:68:11:b7:e8:6b:b2:08:a7:96:fa:60:48:13:
76:d7:38:b1:19:20:cf:b1:f4:e5:36:61:c7:73:d8:
fc:12:70:85:5b:e5:1a:3e:e0:6c:0e:cc:62:4c:dd:
b0:8d:e8:9d:2f:3c:16:e1:33:21:e7:3e:e3:bd:74:
6b:87:25:0f:42:d7:35:d7:e5:a3:2e:96:41:b6:8e:
d4:9b:e8:ea:e6:43:00:d6:e4:8d:56:63:6b:e6:8e:
da:b3:21:c4:89:10:f5:c1:14:0c:85:ef:80:ba:20:
3f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:46:E7:F8:8D:6E:2F:0C:34:5C:F7:3F:1D:CB:19:D9:67:67:2F
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8e:fd:f6:cc:2d:f9:66:e3:45:e4:8b:fa:df:6f:89:60:d8:
50:55:73:63:3f:fd:64:a9:23:04:17:11:f2:2b:a7:35:33:e4:
03:72:1f:db:df:78:06:16:fa:ec:e0:cb:a5:cf:49:31:2b:88:
53:c1:b4:bc:14:19:89:f9:39:6f:89:0d:25:0e:bc:68:5a:5d:
af:a0:62:82:6e:fa:27:a7:3b:b6:64:f6:c6:58:4d:3e:64:07:
d9:7c:cc:99:c3:b9:b8:2d:94:45:b9:62:46:7b:54:0a:82:a5:
13:7a:84:2d:c4:92:ea:43:1a:43:c7:ab:3d:78:e2:da:cd:f4:
12:3b:92:ec:71:32:3f:1a:f2:99:fd:ff:ec:e1:4e:60:94:64:
c7:7b:a2:fb:63:b4:5d:b7:fc:74:98:73:f0:f2:81:db:9c:6a:
e4:64:23:9f:65:ca:e1:05:57:c5:aa:b6:c6:17:5a:5e:9c:53:
ed:36:ae:5a:ce:d4:a7:11:3e:e6:00:13:b0:4b:d0:53:10:19:
fa:7d:ba:8a:9d:31:9e:ec:7d:07:b4:8d:2b:b4:59:1d:c6:c8:
f9:65:87:9d:96:ac:1d:97:d1:52:9f:30:f5:3b:c3:29:be:49:
76:93:0b:2a:51:0e:be:0b:d8:7d:7a:c1:8a:e4:fb:06:20:db:
34:72:ea:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcl5IprokGyH+gIoQYistMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4
YjA4YTIwHhcNMjUwODIzMDEwMjAxWhcNMjUwODI0MDEwMjAxWjAzMTEwLwYDVQQD
Eyg0ZjhjNDZlN2Y4OGQ2ZTJmMGMzNDVjZjczZjFkY2IxOWQ5Njc2NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0OBnXYPc9iGxfTS1uq0iU6X/ssV
hr3JtV2whXApn72bDj+pCOM1GVFYPZveVltgWc4ckbTYGrTZO7wkhtoZT3ZFWRIo
kUcshzqpWp47GnSG39vW/8XHOu14Omq/D5Jv/rFKQX3f2ZxCVQmQd49mIgaeQdE9
PTjCo0DXYEhql/GFNk3xc/cFnA3J+8j/5ajx+6ieT/QirWgRt+hrsginlvpgSBN2
1zixGSDPsfTlNmHHc9j8EnCFW+UaPuBsDsxiTN2wjeidLzwW4TMh5z7jvXRrhyUP
Qtc11+WjLpZBto7Um+jq5kMA1uSNVmNr5o7asyHEiRD1wRQMhe+AuiA/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+MRuf4jW4vDDRc9z8dyxnZZ2cvMB8GA1UdIwQY
MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt
NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm
LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4799swt
+WbjReSL+t9viWDYUFVzYz/9ZKkjBBcR8iunNTPkA3If2994Bhb67ODLpc9JMSuI
U8G0vBQZifk5b4kNJQ68aFpdr6Bigm76J6c7tmT2xlhNPmQH2XzMmcO5uC2URbli
RntUCoKlE3qELcSS6kMaQ8erPXji2s30EjuS7HEyPxrymf3/7OFOYJRkx3ui+2O0
Xbf8dJhz8PKB25xq5GQjn2XK4QVXxaq2xhdaXpxT7TauWs7UpxE+5gATsEvQUxAZ
+n26ip0xnux9B7SNK7RZHcbI+WWHnZasHZfRUp8w9TvDKb5JdpMLKlEOvgvYfXrB
iuT7BiDbNHLqnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:13 2025 by rpki-client