Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: asDmzNus0dpm1JdVh/z+SHhehevwYv+3JIbOL+KoSd0=
Subject key identifier: 0F:F7:31:49:E5:1B:79:D3:D6:6C:0E:FB:3F:A1:25:3C:EB:8B:B8:F6
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 01974C31C7979E37BF305F6002B60565C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 21:00:20 +0000
Manifest this update: Sat 07 Jun 2025 21:00:20 +0000
Manifest next update: Sun 08 Jun 2025 21:00:20 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: kRZrpTZT1ZX43ilR3NePk6ciqwebVBHRK6genbzi1K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:c7:97:9e:37:bf:30:5f:60:02:b6:05:65:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Jun 7 21:00:20 2025 GMT
Not After : Jun 8 21:00:20 2025 GMT
Subject: CN=0ff73149e51b79d3d66c0efb3fa1253ceb8bb8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:d2:e9:79:54:9a:88:2e:98:58:6b:16:c1:
e7:26:81:51:1d:f9:bc:20:c5:93:11:27:38:00:9f:
33:97:25:56:4c:2e:29:ab:cd:62:c2:96:3f:de:a6:
45:d3:20:66:0b:d9:aa:15:05:3a:dd:fb:07:a2:0a:
38:13:26:fb:ad:13:0a:39:cf:2b:22:6a:11:f8:91:
e5:7e:a0:99:89:d4:44:ab:c6:98:fc:18:33:eb:32:
72:94:e7:e4:a3:e5:31:d3:53:fb:86:7b:73:38:9a:
99:f4:75:72:ee:9f:69:22:54:70:67:95:02:22:8e:
31:90:35:71:8b:26:75:39:39:fa:0e:31:d6:2b:6e:
08:be:c8:01:7d:29:4d:ed:16:e4:bb:0a:e9:35:1c:
94:82:da:14:21:00:53:f1:b4:9c:92:7b:82:c6:3a:
fa:d5:83:fa:a4:9f:83:2a:0a:3e:c2:d3:8f:f8:8b:
e5:7b:79:39:99:8d:fa:1d:94:f2:77:27:d3:52:6d:
39:cc:86:21:8b:6c:e0:87:89:e5:13:5e:0f:9d:e7:
05:35:e3:c9:b4:85:ac:0b:23:be:14:c1:35:df:cc:
01:b2:b8:1c:32:6a:2f:b5:00:dc:c8:a8:7b:68:f5:
18:56:d3:c6:57:6c:d7:ee:59:4a:7d:ac:17:72:bc:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:31:49:E5:1B:79:D3:D6:6C:0E:FB:3F:A1:25:3C:EB:8B:B8:F6
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:1f:8d:26:f3:05:12:63:bd:27:48:b6:19:16:07:b7:4c:ae:
e4:8c:02:1c:32:ec:a6:b0:5e:04:27:17:c1:bb:f2:58:fb:65:
8f:12:e8:b3:1b:a0:9a:56:8a:25:0b:b9:ec:20:26:61:a6:4b:
89:4f:4b:21:bc:62:fc:9a:89:2b:78:55:9f:7a:33:8f:71:d4:
a4:2d:a2:5e:b6:df:94:9c:87:bc:67:e3:9e:f2:7b:f7:a2:de:
c3:b0:c5:ed:b3:63:89:41:5d:38:77:d1:56:f6:a6:aa:33:54:
c1:27:b6:49:88:6e:78:6a:fe:0c:c0:f5:b9:5e:f0:ad:4f:f7:
81:67:2c:3c:ad:44:da:07:98:95:fe:9d:22:44:b8:b8:39:9b:
8e:32:52:9f:6b:24:c3:93:ec:0c:d0:41:6f:e5:ff:e9:ec:9b:
7a:5e:26:a2:f7:d0:d2:44:dc:11:b5:34:50:6d:47:d4:90:fb:
c5:28:5d:46:d8:ce:1e:c5:ea:c9:cf:a4:be:fb:36:96:bb:2e:
75:03:12:57:45:de:66:9f:0f:a7:d1:e4:fc:7b:5f:06:51:fa:
91:8c:9d:87:07:80:f4:e5:d9:a7:c2:e1:77:11:de:6a:86:84:
02:7b:dc:5f:ba:d5:a5:03:fb:4f:b6:7d:cd:0e:fa:90:cd:05:
23:6e:c6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMceXnje/MF9gArYFZcDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4
YjA4YTIwHhcNMjUwNjA3MjEwMDIwWhcNMjUwNjA4MjEwMDIwWjAzMTEwLwYDVQQD
EygwZmY3MzE0OWU1MWI3OWQzZDY2YzBlZmIzZmExMjUzY2ViOGJiOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj7S6XlUmogumFhrFsHnJoFRHfm8
IMWTESc4AJ8zlyVWTC4pq81iwpY/3qZF0yBmC9mqFQU63fsHogo4Eyb7rRMKOc8r
ImoR+JHlfqCZidREq8aY/Bgz6zJylOfko+Ux01P7hntzOJqZ9HVy7p9pIlRwZ5UC
Io4xkDVxiyZ1OTn6DjHWK24IvsgBfSlN7RbkuwrpNRyUgtoUIQBT8bScknuCxjr6
1YP6pJ+DKgo+wtOP+Ivle3k5mY36HZTydyfTUm05zIYhi2zgh4nlE14PnecFNePJ
tIWsCyO+FME138wBsrgcMmovtQDcyKh7aPUYVtPGV2zX7llKfawXcry0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/3MUnlG3nT1mwO+z+hJTzri7j2MB8GA1UdIwQY
MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt
NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm
LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1h+NJvMF
EmO9J0i2GRYHt0yu5IwCHDLsprBeBCcXwbvyWPtljxLosxugmlaKJQu57CAmYaZL
iU9LIbxi/JqJK3hVn3ozj3HUpC2iXrbflJyHvGfjnvJ796Lew7DF7bNjiUFdOHfR
VvamqjNUwSe2SYhueGr+DMD1uV7wrU/3gWcsPK1E2geYlf6dIkS4uDmbjjJSn2sk
w5PsDNBBb+X/6eybel4movfQ0kTcEbU0UG1H1JD7xShdRtjOHsXqyc+kvvs2lrsu
dQMSV0XeZp8Pp9Hk/HtfBlH6kYydhweA9OXZp8LhdxHeaoaEAnvcX7rVpQP7T7Z9
zQ76kM0FI27GmA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:15:39 2025 by rpki-client