Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier: hC2HcN829LBXfGOXf2nRhpmP4GQB4RdlSf+wjCp5QOU=
Subject key identifier: 0E:D0:C2:A7:D1:08:F0:33:1E:A9:64:F1:B2:85:C5:D0:7E:8A:7F:87
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial: 0199FD33F2511F771799396D3DC0A65C2C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number: 161D
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: wcezgaS1frymztDVirwPlcoZ5Xy0+XRqjpJ+C3UKg4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f2:51:1f:77:17:99:39:6d:3d:c0:a6:5c:2c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=0ed0c2a7d108f0331ea964f1b285c5d07e8a7f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:c4:f0:fc:c8:18:38:9f:f7:95:73:78:75:
f8:a2:49:4f:90:8c:46:cf:9f:5d:74:8f:a9:d1:20:
3a:92:06:49:51:98:64:0c:39:a1:24:a3:a5:3f:dc:
ba:ef:35:47:ae:1c:85:2e:e7:a0:23:84:df:4f:b6:
9d:6e:4b:12:2f:13:d5:f2:cc:2d:a5:60:2a:16:fa:
47:1b:99:f3:33:b1:b4:ce:60:6a:cb:18:89:76:4a:
0d:63:41:d0:cb:95:51:2a:ac:3f:81:14:95:4b:1c:
9c:e0:0b:e5:df:5f:b2:ec:a7:63:aa:98:7f:44:b2:
16:d4:86:19:e2:87:d9:15:24:ef:52:30:61:ee:77:
87:f7:15:eb:6f:c3:7b:3e:9f:3c:da:04:69:e0:1f:
45:a5:29:62:5d:9c:50:4f:00:f4:b5:55:a9:9d:36:
20:4c:17:3d:95:35:c1:6c:33:c3:ea:0f:ab:25:c3:
5d:d3:df:6e:92:ef:e9:51:a5:da:1c:cc:0d:40:6f:
23:8b:35:3d:39:27:b8:d7:66:58:5d:72:17:c8:10:
d6:3d:d6:73:9b:c5:ca:e6:59:18:ea:35:5f:12:3d:
a3:33:70:bb:b9:d6:a4:ab:ee:75:e4:8c:21:a3:56:
a9:c6:19:52:49:d3:22:23:be:28:df:9f:01:29:f0:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:C2:A7:D1:08:F0:33:1E:A9:64:F1:B2:85:C5:D0:7E:8A:7F:87
X509v3 Authority Key Identifier:
keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:ad:36:42:59:2c:1c:92:be:5c:76:e7:cf:ab:55:5f:f2:
eb:89:74:04:17:12:87:09:cb:01:73:c6:87:71:be:7e:a4:20:
e7:17:5d:84:c9:04:c4:f0:40:94:29:7c:02:14:6e:99:d0:3b:
5e:9c:72:9b:f0:97:5b:98:9c:96:e5:db:f8:27:49:80:49:63:
43:c8:35:a0:4a:ba:61:92:5b:98:ae:c1:6b:2a:19:eb:38:bc:
03:6c:fd:45:a4:72:e6:7d:8b:db:a9:a8:ff:be:40:2d:1f:bc:
56:25:f2:b5:c8:5e:2e:08:f2:34:f8:90:6d:ca:cd:b7:44:d9:
b3:70:ea:24:fe:8a:21:f0:b0:d3:bc:48:20:17:46:b2:4b:84:
f6:88:e8:a2:dd:84:9e:34:93:26:cb:5b:59:bf:a0:bd:2f:86:
61:df:8a:ed:17:28:03:fa:0e:57:2e:a9:f9:b3:7c:b1:d1:4d:
10:55:48:a4:bc:b1:3e:7f:16:57:e9:30:8f:be:27:2f:8c:24:
df:30:5c:d8:12:b7:32:46:35:f9:dd:80:af:ab:70:ec:7d:26:
f2:b4:e8:1f:e2:8e:86:f7:42:ad:da:ce:09:b8:85:80:3d:4f:
6e:3d:e8:d2:90:2b:97:da:3c:f4:de:2e:c0:ea:fc:e7:bb:3f:
cc:15:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:43 2025 by rpki-client