Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: vvAexQOZxn1CKjPdQtwzqcrdfOOblcdG/o+zWv3crr8=
Subject key identifier: AE:16:00:50:C2:21:9E:90:EE:DE:8F:FF:90:54:97:1B:3D:CC:A5:AB
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019653123AE5EF2C7159B126E928EF462C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 12:00:25 +0000
Manifest this update: Sun 20 Apr 2025 12:00:25 +0000
Manifest next update: Mon 21 Apr 2025 12:00:25 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: A9oW2dMunmGrRK1wWCFrUMNpFNNEKWaS7iWHoJugfBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:3a:e5:ef:2c:71:59:b1:26:e9:28:ef:46:2c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Apr 20 12:00:25 2025 GMT
Not After : Apr 21 12:00:25 2025 GMT
Subject: CN=ae160050c2219e90eede8fff9054971b3dcca5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:5c:30:25:02:6a:cf:75:c4:ad:b0:11:2a:
4d:ff:f5:50:cc:b6:3b:0b:06:54:3b:0d:4a:42:dd:
86:3c:09:2e:52:ab:6e:75:93:17:a8:7e:7c:f9:dc:
76:68:fe:a2:fe:f5:b4:27:e1:dc:c6:78:1a:6f:76:
7b:72:c4:da:98:9f:4c:3a:92:04:2f:bf:4a:f1:dd:
35:05:d2:aa:81:ba:1d:7a:0f:47:42:d0:d8:ed:8d:
ac:82:f4:a5:6e:2c:c1:b4:23:46:a1:83:f1:96:05:
4e:e1:c4:d5:b6:8f:1a:df:6e:fb:25:03:5d:dd:82:
53:95:d2:21:04:85:68:1b:21:18:3c:1c:3f:db:3a:
11:74:0d:d3:86:85:3a:be:a1:3d:cc:32:00:64:85:
18:9f:44:07:1c:80:ea:f9:45:82:53:f6:2e:41:cb:
bc:42:bf:41:fd:ec:8a:a1:69:46:81:48:84:ab:54:
cd:cf:37:ec:64:5f:06:19:d9:b9:52:57:38:80:57:
c9:41:31:ba:44:e9:d7:b4:48:d4:2a:ef:f7:47:35:
bf:74:17:e4:c3:12:71:40:56:c1:9c:f8:6d:36:37:
38:9c:5f:64:7c:d0:96:88:13:9f:c8:3d:67:a1:30:
54:52:d2:49:31:dc:ef:71:d2:3a:b2:91:e9:f0:e0:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:16:00:50:C2:21:9E:90:EE:DE:8F:FF:90:54:97:1B:3D:CC:A5:AB
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9b:f9:c6:59:9d:da:25:04:a5:d9:83:16:fd:1f:ec:d0:6e:
33:6f:88:3d:4f:5e:c7:c5:a0:7f:03:26:09:4f:2e:5b:c0:09:
ea:09:f5:1f:e9:63:ed:9f:57:b1:74:f2:ae:ea:90:da:7a:32:
e7:46:e5:a6:b2:9b:bf:f8:d3:f2:ef:c8:18:71:d2:1f:0f:1d:
37:84:11:b0:ee:f3:f2:27:fd:19:b2:02:68:5d:cc:ec:c0:38:
1d:3b:3b:55:f3:f2:21:1a:2b:0e:7f:c1:22:82:37:7e:84:e6:
37:60:8c:6d:6a:8c:6c:75:40:44:bb:18:8d:a1:49:c8:bf:84:
fb:ba:a4:ec:38:da:66:fe:d4:c1:a8:84:e9:70:cf:c6:5a:12:
14:a2:80:f8:a4:b7:e1:cd:53:96:dd:c9:9e:15:ec:f0:93:67:
c1:62:85:3a:cb:53:bd:80:9f:1f:d3:9a:a6:b9:e2:a8:7e:7e:
dd:43:bb:cd:57:a2:40:9f:4a:98:5d:fa:c1:e8:0f:2c:5c:11:
df:bc:f0:89:89:78:fc:72:f1:dd:4a:ad:98:dd:93:71:c3:36:
37:9f:d1:eb:c5:d4:f3:fd:0c:c5:67:81:c0:3b:c9:d1:bb:f6:
e9:cc:64:cd:60:d2:0f:75:e7:6b:ee:06:aa:67:69:48:e8:3a:
47:f7:0d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:22 2025 by rpki-client