Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: ccPsmhRInbNOg/sVWw6OAWOVFGLDGUZ9YNHuuHHLeeM=
Subject key identifier: AC:44:F0:E7:60:7B:48:56:41:F7:D0:EA:91:8C:E6:43:1F:E2:79:B0
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 019A71B7E4EE3EE5984DEBBBD247DD66025A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: T6RKDGZRqHFdWhlsOkzqBarx+xfl+Q8ijHLryUPEY9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e4:ee:3e:e5:98:4d:eb:bb:d2:47:dd:66:02:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=ac44f0e7607b485641f7d0ea918ce6431fe279b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:b6:31:f2:0c:84:c7:02:5d:34:87:3b:4d:
02:07:4a:6f:bb:20:57:cc:3b:4c:d5:f7:0c:33:01:
5c:eb:4f:c5:32:86:f5:71:2b:93:d0:c4:94:ad:e0:
52:40:85:30:ec:f2:d9:12:f9:28:dd:b8:dc:74:0f:
78:8f:cd:3e:40:be:4d:a1:77:c1:9a:2f:6a:c6:64:
a2:5c:e8:62:79:29:f5:69:43:ee:e5:4f:df:1c:98:
4d:ab:69:42:19:b8:d8:4b:db:64:ba:36:a0:89:f0:
71:29:7f:83:4c:1c:43:c4:83:9a:dd:07:bf:f9:7f:
ff:63:1e:2f:36:b2:4f:4e:ac:43:87:b5:25:e6:91:
15:b2:ad:76:54:9d:83:39:ba:60:9e:86:c3:f5:01:
a0:b0:ad:5a:6f:6c:7e:26:1a:79:44:b4:fa:df:40:
a6:80:bf:9e:35:a7:13:6f:92:ab:59:8d:a3:37:06:
19:ab:f0:4a:12:8c:b1:c8:df:f9:e0:02:50:6e:cd:
eb:49:05:fd:26:ec:05:a0:c5:3a:f2:7c:41:9f:90:
e0:f9:0f:27:66:27:35:0f:5b:15:52:a9:3b:be:67:
fe:98:b5:31:bd:c8:f0:21:e9:39:48:1f:1f:a0:7a:
6d:82:db:84:f6:8e:70:de:93:0f:1d:ba:36:37:20:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:F0:E7:60:7B:48:56:41:F7:D0:EA:91:8C:E6:43:1F:E2:79:B0
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:f1:34:2f:21:4c:f6:6a:06:19:79:1a:d2:6e:d5:bf:a0:
3f:27:54:55:79:ee:b5:1d:0c:bf:ab:df:6e:45:2f:39:fe:a1:
3a:74:de:54:58:56:9f:96:45:1c:c7:19:54:dc:fc:65:ca:11:
d9:2b:d8:4b:d0:b1:d3:3a:38:31:14:9d:c8:a7:8d:45:a7:f7:
0d:af:d7:8e:72:99:94:7e:22:ac:a9:45:e3:93:28:35:7b:15:
35:91:84:03:80:b5:20:af:ec:54:7a:63:49:30:d4:7c:57:a1:
8a:b6:a7:c3:ca:2c:29:86:ec:1b:ea:39:4f:8a:d4:68:8b:09:
c6:16:e6:3f:c5:c7:75:5b:52:d6:96:76:b6:13:41:59:c8:3e:
9b:f2:26:59:0b:c8:f7:d4:c8:85:05:e0:0f:c0:8f:f4:12:40:
0f:7a:9b:a3:07:92:e4:c3:53:37:9b:08:d9:ca:45:0d:cd:df:
95:93:d3:d3:9f:ed:af:03:45:2d:3c:b6:a2:ee:c1:0a:94:d1:
50:5f:71:d4:c0:73:1b:e9:0b:93:91:75:09:32:d0:ef:0f:a7:
2b:0e:7d:7d:17:8d:3a:a9:be:3c:05:cc:81:ad:2f:dd:aa:41:
61:63:d7:15:cb:11:25:b4:89:6d:34:e9:a9:5c:57:ba:dd:30:
11:e6:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:26:59 2025 by rpki-client