
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier: FMmf+7BIKGRGR3cWBO3XLihHFGUAMCM5GRpW9qCKDKQ=
Subject key identifier: 62:E9:8D:04:2D:8A:4B:9E:3B:58:C6:7D:DA:FC:DE:2E:E0:A2:DC:20
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial: 0198733D3D5B5D46A80D576A28B0E34A4305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number: 1551
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: mCdsV5W5jTPQ0jTS3BCfsCbwQ7ySOXwn/KP5uBlkJ20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3d:5b:5d:46:a8:0d:57:6a:28:b0:e3:4a:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=62e98d042d8a4b9e3b58c67ddafcde2ee0a2dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:bc:97:44:43:b1:ef:30:0b:96:1e:00:45:
c9:d3:38:92:f5:f3:ab:99:87:bc:0c:32:59:f7:6e:
b5:15:ed:b1:ff:6d:e3:45:a1:e4:6c:6b:ff:92:8b:
2d:20:8e:bb:9e:cf:10:d3:71:ac:3c:5c:92:00:09:
dc:94:b7:73:1f:8c:db:23:8e:48:d3:c5:43:a5:13:
f5:c7:25:ec:93:60:36:a0:1a:f5:71:e0:91:12:e8:
62:8a:cc:80:bf:55:d1:1f:af:ad:d4:93:94:0e:84:
e0:14:88:b2:d7:46:36:8f:61:fd:6b:a7:ea:a2:08:
3b:23:01:d2:60:94:b4:42:57:4d:94:35:f4:0a:05:
52:63:73:a8:c3:81:e9:b3:dd:a5:30:ae:6a:0c:b0:
fc:7f:d6:c8:75:ae:b3:b6:4b:65:44:7b:d2:6f:03:
0b:c9:5b:35:23:89:b9:5a:66:72:1d:9a:ac:a9:2b:
64:0c:29:2f:bd:e9:02:7d:7f:8c:1c:cd:8d:cd:63:
cf:3b:5c:0c:fd:72:db:4a:48:3d:1e:68:da:1e:c9:
03:74:5d:35:12:d1:a8:52:f6:fc:be:16:b0:d9:84:
be:94:fd:69:93:27:13:28:c2:7b:86:4b:86:ea:49:
5b:64:38:37:50:5f:6e:5d:51:1d:55:0e:4b:1d:3f:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E9:8D:04:2D:8A:4B:9E:3B:58:C6:7D:DA:FC:DE:2E:E0:A2:DC:20
X509v3 Authority Key Identifier:
keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e8:2e:24:8a:64:6c:ec:15:87:05:de:9b:a2:93:20:16:fb:
40:e7:99:9f:79:7d:1f:02:75:c4:08:16:fe:c1:57:90:0b:ef:
8b:be:43:66:93:4b:84:b8:e5:35:3a:dd:3c:71:04:ea:15:a1:
7b:e8:06:e7:1e:a7:4a:77:1c:6f:2b:bd:4b:93:04:b9:ac:f4:
6f:ee:e2:51:b5:f5:11:5c:c2:07:c7:aa:ac:e4:db:e5:3a:87:
d6:bc:7a:28:57:03:57:bd:64:e1:eb:22:c1:3f:85:50:b9:ff:
0d:b4:b1:c9:a6:c9:9d:1e:03:8e:0e:b4:cb:b5:91:a1:ae:c6:
88:af:e0:84:9c:f2:97:2c:9d:80:a2:36:a0:73:89:ee:21:cf:
9d:62:5c:a3:3f:50:cf:e7:99:ee:7f:7e:96:39:5f:c2:83:7d:
79:40:4c:f0:d3:07:89:06:b2:69:3b:59:34:77:e1:c0:e7:43:
ff:0b:c0:99:63:0e:04:87:f2:9d:12:83:35:1f:0a:4f:ae:a6:
80:7b:b7:74:b6:59:74:bc:9b:84:54:65:0b:ed:e9:51:b4:d1:
bb:a0:60:bb:ef:b3:58:c2:c1:e1:27:fc:8c:03:f9:e3:38:1b:
d9:bb:79:89:e6:94:43:e8:ae:97:cf:f8:7c:11:b9:f0:95:7a:
5c:1a:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:38 2025 by rpki-client