Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: jHxoC+c/Ib0cNxrTHqjBQM38Ddwp0cRHFO1quFVDGf8=
Subject key identifier: 48:4A:8E:B4:E7:5D:21:18:BF:C5:BC:2C:FD:D5:00:2E:66:D8:0E:08
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 0197481E83BEB6F64822D29A8FD279C7952A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 1323
Signing time: Sat 07 Jun 2025 02:00:48 +0000
Manifest this update: Sat 07 Jun 2025 02:00:48 +0000
Manifest next update: Sun 08 Jun 2025 02:00:48 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: WC0mK2I3Dh+/p5s746UIYnYsv2Q11k8HJjOnfy/wR5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:83:be:b6:f6:48:22:d2:9a:8f:d2:79:c7:95:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jun 7 02:00:48 2025 GMT
Not After : Jun 8 02:00:48 2025 GMT
Subject: CN=484a8eb4e75d2118bfc5bc2cfdd5002e66d80e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e2:2e:13:0d:56:8c:59:bd:d0:e1:64:29:15:
0a:89:1e:74:01:23:71:f1:03:69:f7:76:cd:94:5e:
0d:de:aa:be:68:ea:7a:c8:23:20:cd:ac:9d:e9:ba:
f4:bc:ae:ab:45:41:86:56:be:a6:f9:8f:0d:58:73:
4c:0f:28:de:68:e4:e2:36:db:fa:a9:d8:77:ba:1e:
00:80:e9:ba:8d:3e:c0:89:9e:9b:96:68:e5:8c:82:
ef:07:1d:22:83:65:a6:44:16:a0:0f:84:a3:93:35:
82:ad:05:62:78:46:2e:8a:a4:51:56:87:df:03:cf:
05:e7:60:a2:02:42:8f:d3:bb:1e:af:12:29:56:0d:
64:89:a8:75:8c:03:75:40:e3:9a:a8:33:e3:90:4d:
02:c3:e9:34:39:7d:a6:b1:0d:14:cd:04:f0:a6:f0:
8a:fe:6a:d6:1a:f7:5c:93:64:35:3d:f7:37:2b:f3:
94:55:85:e6:d0:af:93:1d:b4:e7:92:0d:12:62:64:
ae:17:ac:f8:44:0b:d3:cd:f8:c9:de:46:da:c9:01:
2a:47:42:b3:1a:48:b4:32:57:cd:56:ac:24:ee:ff:
04:c0:52:5d:bf:4e:4e:ff:89:c6:c2:fe:61:a7:e5:
e3:db:dd:a5:da:1d:f1:82:61:c5:43:cf:a2:30:bc:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4A:8E:B4:E7:5D:21:18:BF:C5:BC:2C:FD:D5:00:2E:66:D8:0E:08
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:76:f7:21:74:b3:20:35:90:d1:3b:28:4d:8e:86:fd:42:e2:
76:5c:82:a3:91:01:7d:09:35:fc:e6:fa:70:d0:07:d9:af:ed:
3f:ab:f8:86:95:37:4e:25:a9:32:42:58:10:9f:d5:c7:f1:c9:
b7:71:a0:0f:27:90:31:05:85:2b:f1:0e:bc:f3:62:09:11:04:
92:b5:16:22:d9:19:a2:af:5c:0c:fc:a3:08:b2:d6:cc:b0:19:
d5:8c:79:9f:31:2e:c9:a0:64:56:0a:cc:14:96:48:a4:a0:64:
08:8e:81:e0:c4:30:5b:43:10:7b:77:13:9b:5d:04:8c:53:87:
0b:74:81:0a:b9:ff:0d:47:62:9b:49:86:1e:95:ed:8d:4d:89:
c1:da:3f:60:5b:5d:42:66:57:bb:88:4c:24:4c:5e:cf:23:3d:
33:b1:bc:d9:ab:ee:36:62:cc:05:76:bf:85:ba:04:0c:90:6b:
f1:74:33:80:a8:21:f6:ca:1e:c2:c4:97:35:e1:3b:41:14:2e:
90:66:41:f1:28:0b:2c:65:9c:0d:c9:66:95:b1:a8:8c:c7:be:
f9:25:cd:ca:be:43:5c:57:e6:6a:90:48:c7:b9:06:4c:75:fb:
79:13:84:0f:0b:31:38:3e:05:57:9e:11:0b:83:c9:f0:fd:08:
39:ce:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:23 2025 by rpki-client