Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
File: LONOJrtlYwuGk29JaTU-18hplcg.mft (raw, json)
Hash identifier: KQd+E9Jc7iuL4hi/bXmSEr3DkpphKas1kyYb15pT5/w=
Subject key identifier: 05:AA:9D:EF:B8:57:A5:2E:98:5B:28:9B:2F:53:82:A0:B8:93:91:48
Authority key identifier: 2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
Certificate issuer: /CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Certificate serial: 0197B5FC5F710A2F7CF6A51A8D25762B6B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
Manifest number: 14EF
Signing time: Sat 28 Jun 2025 10:01:44 +0000
Manifest this update: Sat 28 Jun 2025 10:01:44 +0000
Manifest next update: Sun 29 Jun 2025 10:01:44 +0000
Files and hashes: 1: LONOJrtlYwuGk29JaTU-18hplcg.crl (hash: vsBEKm7y1qxwk0m20QekxGhFsaf6V/eXqWYsgwqyhY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:5f:71:0a:2f:7c:f6:a5:1a:8d:25:76:2b:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ce34e26bb65630b86936f4969353ed7c86995c8
Validity
Not Before: Jun 28 10:01:44 2025 GMT
Not After : Jun 29 10:01:44 2025 GMT
Subject: CN=05aa9defb857a52e985b289b2f5382a0b8939148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:b9:62:d0:b9:1a:18:de:05:ff:27:cd:e5:
d8:48:6c:b8:2a:8c:f7:e6:30:18:10:c0:97:1b:02:
29:14:03:6e:fb:96:ae:74:23:bd:6e:ae:4a:5f:5d:
c5:c7:c7:94:81:f9:f0:a6:71:03:8f:03:4f:0f:8d:
1f:e1:bb:0e:8f:98:7e:2d:71:39:2c:57:39:51:38:
21:ad:7e:5d:c4:4d:21:8a:4b:b8:ef:b6:5d:38:71:
6b:54:f1:c2:ad:14:2d:27:80:ee:40:03:75:3a:a9:
53:a4:b6:38:a6:ac:ee:8f:4e:25:74:b5:ac:ee:cb:
37:cf:6b:ba:d6:3e:91:c7:84:04:39:e2:b2:e7:a6:
d5:07:e8:1c:fc:a6:05:6b:58:81:03:df:79:09:a3:
95:7c:07:fd:e7:58:23:bf:d5:e5:13:43:c6:55:38:
17:d1:5c:cd:6b:eb:4f:7d:2e:c1:6d:c3:8a:2d:87:
74:9a:93:37:04:43:ac:22:b7:77:b9:66:b1:b6:e8:
ae:a4:0f:ce:1b:f1:ac:28:14:7f:5b:96:44:48:a2:
82:17:09:23:fc:79:93:db:8c:ae:b2:63:8b:44:96:
70:64:0d:d2:94:95:20:c0:a5:ef:05:ac:9a:d5:e8:
6e:23:23:f6:e9:99:4a:72:0a:27:05:0d:f5:1a:69:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:9D:EF:B8:57:A5:2E:98:5B:28:9B:2F:53:82:A0:B8:93:91:48
X509v3 Authority Key Identifier:
keyid:2C:E3:4E:26:BB:65:63:0B:86:93:6F:49:69:35:3E:D7:C8:69:95:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LONOJrtlYwuGk29JaTU-18hplcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1e0180-db3a-46a5-b31b-b599723fc053/1/LONOJrtlYwuGk29JaTU-18hplcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f6:d6:18:ad:76:e5:4d:ac:de:07:2f:2b:85:82:ef:a7:59:
0e:56:d9:f8:bb:4c:5f:61:cc:bd:1e:de:bf:49:b3:d3:b5:f1:
2a:e8:b2:5b:97:05:d2:62:7c:84:d4:99:96:56:ae:71:65:39:
e5:53:d8:3f:41:0a:fe:20:14:0f:46:10:3d:13:6e:10:cd:b2:
6b:0d:da:51:c0:ac:e6:d9:a1:44:2f:f0:fa:bd:9a:df:d5:2e:
c4:9f:4a:f7:c4:83:39:30:a5:a2:18:f1:f8:1d:c5:d5:c4:9a:
86:2e:16:4b:12:c5:ee:d2:bf:c5:fa:b8:f3:7b:6d:b0:09:da:
35:93:e4:22:a8:a5:71:7a:55:d3:fd:82:51:45:66:39:56:14:
46:28:d1:2e:02:c9:08:8d:c4:a8:1b:66:ab:71:30:03:e6:6c:
08:0f:bc:82:7f:23:8d:1d:de:ab:0e:6a:76:19:4d:8b:46:86:
92:40:c1:01:9e:d9:d6:e2:c2:0a:42:06:7d:32:6d:1b:56:81:
5a:e4:86:de:ad:27:a1:77:5e:d4:42:f0:41:d9:49:32:b4:50:
9e:8a:3a:6d:89:2b:72:9f:4d:87:d2:21:68:21:02:f3:41:65:
84:75:2f:b8:ec:7c:e7:fc:0c:a0:9a:db:b2:c7:4f:3b:26:36:
23:74:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:21 2025 by rpki-client