Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: mibLsyzCmoc5UaPf5vEZuSjNjbsrb/odU6+iSzZC0qc=
Subject key identifier: AB:9A:27:59:0A:52:84:2A:AC:67:8D:D3:93:54:B7:23:DB:40:99:51
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 01991808934B986AB881CE754EF51FAD09CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 1669
Signing time: Fri 05 Sep 2025 04:00:39 +0000
Manifest this update: Fri 05 Sep 2025 04:00:39 +0000
Manifest next update: Sat 06 Sep 2025 04:00:39 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: 9wAfvCYhzsXgloFMFmr0mfMIkVjPZ2/sDtj4DDhGFEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:93:4b:98:6a:b8:81:ce:75:4e:f5:1f:ad:09:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Sep 5 04:00:39 2025 GMT
Not After : Sep 6 04:00:39 2025 GMT
Subject: CN=ab9a27590a52842aac678dd39354b723db409951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:4e:d0:b8:a6:3f:f3:fc:b6:88:b0:07:df:
fb:0e:e6:5d:86:65:88:e4:42:cb:28:9d:90:5f:f0:
a5:bd:8a:43:c2:6f:80:3f:73:62:97:b9:f2:bd:27:
1c:f9:c6:e2:8c:29:0b:e3:f2:8b:af:f0:fa:77:7d:
95:3f:aa:96:a3:d8:91:7e:59:b8:48:45:57:a6:8e:
48:78:1c:97:d4:63:ff:8e:b0:75:bf:3e:25:0a:fa:
fb:81:d1:70:be:80:d1:61:98:d0:be:7a:50:cc:53:
d2:cf:75:39:65:d2:54:b6:63:62:f2:48:38:ac:dd:
fa:6f:96:ef:27:11:77:85:f6:66:40:fa:72:9b:3f:
73:7b:8f:8c:e4:3b:ab:b7:14:30:d0:8d:ce:7a:04:
d0:72:2c:88:11:29:4f:2f:23:f6:58:5f:14:f9:ba:
fa:51:5f:3c:6c:05:23:ac:8c:2a:23:8a:81:fc:28:
d8:d6:f4:bc:b2:2b:b9:6a:c3:95:2f:56:81:f9:6e:
8c:68:ff:34:d4:dc:79:bc:2c:99:c8:54:1a:7c:eb:
11:d0:ec:0e:c3:22:e4:00:59:b8:f3:18:96:45:cb:
8a:f1:d7:7f:a4:cf:aa:68:5a:a8:6f:b7:93:de:d8:
e6:38:4d:7a:d4:63:10:df:4f:6f:6e:40:a0:ff:59:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9A:27:59:0A:52:84:2A:AC:67:8D:D3:93:54:B7:23:DB:40:99:51
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2d:bf:80:32:be:73:8c:5c:40:9b:6b:6c:52:b9:0f:f5:bc:
f8:60:ea:2b:d5:1e:a3:35:65:ce:6e:4b:79:16:7e:4a:99:ba:
53:25:52:39:2c:be:4e:9d:9e:46:82:fc:5b:05:a9:87:01:13:
0c:cb:c1:4d:98:c5:8a:ae:54:8c:10:9d:1a:84:c3:40:25:0b:
93:d9:40:e3:8a:2f:b7:8a:62:61:43:14:98:72:13:98:fe:d9:
f8:f8:bf:fa:17:78:4d:03:a3:97:28:41:a0:bb:34:1b:a3:8e:
a9:47:82:1f:a1:c3:7f:bb:21:44:95:2b:2c:51:30:ec:91:c4:
eb:1d:f2:d0:ee:92:91:7d:d3:90:7a:68:be:8a:a8:ef:1b:fc:
0a:7e:dd:d6:c1:1a:65:a2:7e:ba:4e:8a:0b:87:e0:0e:04:cf:
5f:54:8a:ee:38:20:e7:0d:27:cf:4c:75:72:2f:84:fc:f2:f0:
37:81:90:59:82:88:e7:bb:5e:39:a2:be:6f:18:c1:92:b3:5a:
b7:5a:4b:f9:09:b2:16:01:7b:96:85:66:cc:c1:e9:f3:12:65:
26:b8:4d:07:4b:f1:d3:b9:07:be:01:92:a3:33:26:a1:ea:76:
2c:f9:ea:bf:8f:26:38:d1:be:86:2a:4a:8c:14:24:3d:dc:44:
59:bd:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:35 2025 by rpki-client