Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: Yfz+3hc2oSW54M3fwICwn4C57o1NcxIPgEFLGzk6l0Q=
Subject key identifier: 22:1A:35:F6:56:88:F8:22:53:68:0F:C2:3C:B6:4D:63:AA:98:FF:D2
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0198439AF3445B95657278E67FE14236BC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 158D
Signing time: Fri 25 Jul 2025 22:01:24 +0000
Manifest this update: Fri 25 Jul 2025 22:01:24 +0000
Manifest next update: Sat 26 Jul 2025 22:01:24 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: dl8n2s5SLtZpQZv9eK/YSUotz5WZeSRJr5Y8EfmYrLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:f3:44:5b:95:65:72:78:e6:7f:e1:42:36:bc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Jul 25 22:01:24 2025 GMT
Not After : Jul 26 22:01:24 2025 GMT
Subject: CN=221a35f65688f82253680fc23cb64d63aa98ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:f4:02:c1:7b:7e:05:5f:d1:e9:a7:8f:34:
80:fc:25:a0:80:00:bb:00:b1:07:cb:e9:64:a0:83:
ce:f4:f6:27:ae:48:a8:8a:16:22:b0:9c:6a:73:41:
0e:a0:18:5f:1f:e4:ac:66:8b:a9:03:94:88:b5:08:
09:1c:1a:54:50:58:bd:e1:30:da:14:0b:68:51:03:
26:0f:49:34:6b:bc:6d:ba:34:be:b6:5b:9e:36:83:
96:13:21:e4:14:72:3d:c4:e6:4d:18:bc:0d:23:88:
01:8c:df:b1:41:a8:fd:d2:d3:76:19:e5:7a:4b:dd:
b6:51:d2:15:34:83:d5:5d:01:92:ec:4e:e7:1c:32:
a3:5d:0d:cc:ad:4a:da:44:48:81:cb:d5:57:4b:0f:
10:0a:ef:56:0b:e2:ba:cf:33:e8:2d:c3:6f:e4:cb:
96:6b:e4:b6:c5:89:70:9c:61:d2:8f:c5:08:ca:59:
b9:c3:c4:a9:ff:74:20:9d:fd:f7:66:9d:13:7c:f9:
e2:93:0a:03:ad:19:6d:2e:ee:19:58:0f:32:46:fe:
0c:4e:6c:53:e4:4f:d7:52:bc:ec:97:c5:cc:b0:99:
08:a2:a2:c2:ac:88:a0:19:71:44:88:b4:5f:42:28:
49:b0:37:dc:62:b9:dc:a3:a4:06:59:64:2b:31:8e:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:35:F6:56:88:F8:22:53:68:0F:C2:3C:B6:4D:63:AA:98:FF:D2
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:d7:f5:b1:43:22:e1:f6:4f:ab:34:e2:25:ea:d7:29:98:
9a:5c:4f:92:39:92:54:01:60:be:83:63:8f:41:d4:33:6a:7b:
a3:25:db:20:04:97:95:c2:8e:f3:e3:ad:f2:43:51:3f:05:fb:
2a:ec:26:54:54:21:b9:5a:bd:75:8f:94:58:26:cf:f7:67:da:
aa:c5:26:67:79:f3:38:67:cc:6a:1a:50:e0:84:de:4a:fa:f3:
91:61:7c:8f:dc:5c:62:8c:da:48:c8:4d:d6:69:04:49:fd:6f:
c4:af:41:95:87:92:08:6a:3e:cd:82:26:3a:a0:b2:4b:58:d5:
2b:69:f3:98:af:7a:09:da:50:94:b2:0b:32:58:19:df:19:25:
08:2d:d1:77:e9:60:cc:c5:a4:ed:b6:5a:35:9c:4d:67:ed:a6:
35:e0:a0:1a:81:0d:34:e2:4b:fa:da:c1:38:a1:59:90:3e:f3:
78:38:f6:f1:2e:04:51:7a:90:2c:a0:a2:4d:1f:0a:8e:5b:55:
44:7a:00:9d:c6:8b:7d:fe:b3:df:4d:eb:10:96:b5:d1:0d:28:
2d:ae:16:5d:9c:04:90:f5:bf:64:6f:c4:7e:a3:f0:b2:34:ee:
06:cf:89:22:fb:50:34:02:22:1e:b4:f6:9c:84:92:27:80:6f:
6d:fc:b8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:50:28 2025 by rpki-client