Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier: oUaUM0Bx0ZHVTvg+xPIbCo//YDcsmWu9rwoLnxolAr0=
Subject key identifier: 22:D4:E2:BB:BE:02:6F:1B:26:34:D2:9B:F3:75:3A:FF:94:CC:78:8A
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial: 0198D5BBE821C6AB46C590F1C67B705C06C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number: 1584
Signing time: Sat 23 Aug 2025 07:01:58 +0000
Manifest this update: Sat 23 Aug 2025 07:01:58 +0000
Manifest next update: Sun 24 Aug 2025 07:01:58 +0000
Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: WC1CMpt+A0GcDR0CGU6RaluW28PKAqtVn+Ww5EcB1Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e8:21:c6:ab:46:c5:90:f1:c6:7b:70:5c:06:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Validity
Not Before: Aug 23 07:01:58 2025 GMT
Not After : Aug 24 07:01:58 2025 GMT
Subject: CN=22d4e2bbbe026f1b2634d29bf3753aff94cc788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:c6:2b:4d:c8:3a:52:00:c7:aa:90:73:3d:
d9:9a:98:b1:67:c6:5d:dd:3d:60:02:68:1c:19:08:
65:b4:58:58:88:0a:32:60:c4:34:e5:59:97:47:f2:
67:fe:27:1c:ed:70:20:e9:bd:d9:53:56:e6:da:50:
7d:a8:7a:2a:31:24:03:b1:15:b9:b4:0c:56:30:c2:
4f:3f:99:b3:2f:9b:31:66:8e:35:2c:84:b4:75:81:
7e:a0:c3:53:52:c2:bf:2b:55:e2:50:04:51:8f:a3:
68:3f:fe:ea:0f:4f:19:a7:6a:a4:61:35:2a:3b:e7:
ef:c6:b3:2c:82:a6:dd:a3:f9:1f:1b:de:e2:03:c4:
bf:5c:39:f9:85:50:49:a9:5d:d2:70:21:23:d4:2e:
89:d8:fe:43:9b:99:14:ea:cd:a1:e0:05:fd:40:6b:
12:2e:70:34:32:c9:47:d3:bd:a9:2f:70:8c:b5:f1:
8a:6b:55:00:4c:64:af:b2:31:b2:2c:e4:38:3f:99:
1e:d6:00:31:68:99:b5:4a:bf:81:07:91:f1:d5:55:
ad:31:98:31:ba:65:74:e4:02:da:67:29:52:07:c9:
b9:08:81:3e:71:2e:c1:79:b2:f0:49:f8:6c:8e:73:
14:00:fb:4b:3c:be:3b:ff:5c:a0:66:77:7d:80:f1:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:E2:BB:BE:02:6F:1B:26:34:D2:9B:F3:75:3A:FF:94:CC:78:8A
X509v3 Authority Key Identifier:
keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:50:1a:f5:41:8a:a3:8f:f0:3f:29:4a:09:f3:41:b2:64:35:
b2:ff:ae:26:9a:5a:ff:d6:45:09:c6:b8:3d:9d:03:19:37:b5:
2e:bb:fa:3f:61:ae:1c:0a:98:fc:c5:1b:87:d2:96:4c:94:d1:
bf:f5:7c:cb:2b:8a:76:d3:cf:3f:63:46:a9:42:a9:d7:c1:73:
71:db:35:ec:66:03:39:55:4b:cb:62:d6:ee:52:e7:cd:94:e5:
ee:4e:ad:bf:6e:70:a2:6a:ef:0e:cb:8b:43:29:e3:7c:fd:58:
40:61:5f:be:4f:a5:d4:58:58:1b:d7:7c:53:43:e7:62:ca:db:
22:b5:47:0f:4d:a0:e4:98:36:8c:43:ce:df:aa:0b:1d:1b:b3:
31:14:68:1f:24:6d:79:e8:ad:03:0f:d7:f1:6f:44:01:79:9e:
ce:f3:66:30:5c:3d:db:31:2a:ce:36:66:c0:59:85:3b:55:5c:
3d:35:85:29:41:b2:9c:9d:fa:d6:b2:5e:b3:b1:26:0c:50:4e:
60:ec:b5:12:67:09:43:22:24:67:e2:07:6f:d0:87:d1:af:55:
02:e1:aa:10:d6:12:e4:74:b5:ad:d5:8f:1d:b7:7a:ca:e2:8b:
8d:4c:c2:c5:41:80:5d:47:59:f9:6b:63:cc:db:97:77:62:67:
0b:6c:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:11 2025 by rpki-client