Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: zCnZy+WdOmPTpNd0Yvq6Khf0YEX14fQ946smlXHycdc=
Subject key identifier: 70:C9:8E:A7:25:84:E7:34:DD:27:51:75:05:46:8E:B5:7D:5C:58:DC
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 019A25F8423A4FBCB19EB095D6709D1F37CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 149F
Signing time: Mon 27 Oct 2025 14:00:18 +0000
Manifest this update: Mon 27 Oct 2025 14:00:18 +0000
Manifest next update: Tue 28 Oct 2025 14:00:18 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: ZUUp2tEroxIh/FuL69XhdIU7DhGJTxQAy225oPFTebo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:42:3a:4f:bc:b1:9e:b0:95:d6:70:9d:1f:37:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Oct 27 14:00:18 2025 GMT
Not After : Oct 28 14:00:18 2025 GMT
Subject: CN=70c98ea72584e734dd27517505468eb57d5c58dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:d5:3a:c7:a3:a2:15:5a:10:14:09:22:6a:
cd:d7:17:63:3e:06:4a:61:24:a6:2e:6c:e0:93:06:
b2:53:d7:9a:ef:b0:c9:60:da:a9:d2:3f:1e:15:fa:
23:59:2d:e5:a4:37:fc:d8:50:e9:f1:3d:50:5f:e4:
e6:bc:20:f5:f1:c2:26:83:6b:1f:70:da:7d:5f:6f:
02:67:46:13:8b:12:79:1b:0a:f6:73:37:83:8c:52:
cb:ae:02:a1:93:be:48:38:33:6a:c1:34:8a:39:5f:
9d:41:5f:10:b1:35:26:a2:ec:0b:41:4f:74:0f:1b:
bb:a6:d4:2d:1a:c5:e8:90:92:46:f3:ff:7b:5b:0a:
99:d9:e8:30:59:04:8f:25:ae:45:94:96:c2:15:bc:
dd:88:75:cd:29:f0:bb:82:28:a6:f1:11:9c:99:24:
84:bf:9b:1d:dd:40:f6:cc:0d:6e:6d:b1:4a:d4:82:
58:78:3a:65:c9:63:36:13:24:7f:0a:1a:d4:23:a2:
8d:a3:36:88:46:48:6f:c5:dd:d0:d0:62:51:8e:8f:
95:8a:04:10:48:be:e9:a3:aa:a5:47:6c:69:ca:38:
9e:e1:54:39:f0:d2:2a:9c:65:ec:88:e1:b3:56:98:
81:e4:f9:f3:56:0d:9f:fb:59:a4:cf:71:f9:9d:5f:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:8E:A7:25:84:E7:34:DD:27:51:75:05:46:8E:B5:7D:5C:58:DC
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f9:9c:9d:60:83:b7:39:c0:f8:1d:0d:28:89:69:d8:53:74:
cb:9d:22:b6:03:b7:24:f2:11:3c:f4:7d:ea:34:8d:c5:cb:6d:
d9:41:33:99:ec:45:57:05:7d:77:18:76:0d:e9:d1:f0:32:3b:
31:47:ee:49:ce:25:1b:43:71:e0:56:6c:44:77:da:fb:84:d3:
a2:12:75:41:f5:2a:5e:5b:8b:4a:82:be:7c:15:c8:5a:90:6c:
00:4c:5b:08:c1:53:e9:6b:33:64:77:85:a3:4f:a4:50:f6:9b:
2d:22:bc:07:44:ef:7f:7f:10:b3:65:5d:34:cc:38:7c:20:18:
71:a7:86:69:7e:e7:04:ce:aa:75:91:43:f0:94:25:9e:f6:e8:
4f:ea:df:43:ae:57:05:b3:59:a4:da:c8:12:1f:8c:66:e5:01:
3f:fd:ca:8f:26:7a:42:57:71:f7:61:f5:5d:d1:b7:39:af:72:
99:c1:d7:f1:c5:b1:80:dd:7b:01:8b:a6:97:63:15:e5:28:6a:
12:81:39:cb:8e:63:a4:6b:7c:5a:f7:0d:fb:a2:4d:61:1e:9e:
83:39:cd:5d:3b:57:21:ce:0b:b1:67:5f:3f:c6:1c:4b:bc:6c:
74:5b:9e:ff:90:39:b6:3c:ee:92:4f:8c:5b:9c:c6:a0:e9:37:
a4:b2:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:51 2025 by rpki-client