Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: a4d8f2mMCuIMb/GLsdTw3mm1+hq381qUraH4ezzoiSk=
Subject key identifier: 1B:48:11:63:75:55:84:03:A4:72:8D:32:D6:C3:18:52:69:94:A8:27
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 019770AC22B2343709FD7BA15A96927D7DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 1338
Signing time: Sat 14 Jun 2025 23:00:18 +0000
Manifest this update: Sat 14 Jun 2025 23:00:18 +0000
Manifest next update: Sun 15 Jun 2025 23:00:18 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: u9AlImIBUca9w+d12ObgJpaQO6ZwG5CBfG6agfMxVys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:22:b2:34:37:09:fd:7b:a1:5a:96:92:7d:7d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jun 14 23:00:18 2025 GMT
Not After : Jun 15 23:00:18 2025 GMT
Subject: CN=1b48116375558403a4728d32d6c318526994a827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:fa:d4:d8:a5:c3:cc:f8:78:8e:3e:2a:8a:
e9:52:a9:47:c7:3e:da:1c:7f:79:da:93:f8:f6:d3:
ae:eb:85:3e:c5:bc:f1:f3:4b:4b:95:ed:75:c8:81:
85:11:2f:67:05:2c:b8:96:db:f1:87:61:86:1c:d5:
5b:6e:0f:de:7c:52:01:e3:0f:04:e7:2c:d7:dd:fe:
ac:16:49:48:e1:ea:83:40:23:5c:7c:1a:36:e5:1d:
e0:76:0b:9e:38:3e:5b:6a:06:08:d7:ce:f4:58:ee:
15:5a:61:b0:bb:a1:36:41:e2:3c:69:70:0e:81:1e:
f4:6c:be:95:f8:63:b8:7f:96:99:dd:fd:51:6e:43:
20:c7:56:51:da:bd:e6:04:f5:4d:e6:ea:03:ee:b2:
18:07:f3:ff:aa:dd:71:e1:bf:a9:b7:cd:5d:37:d4:
39:96:26:f1:50:62:69:dc:13:9a:a5:78:f0:0c:e7:
d1:82:e5:e2:d4:5f:c9:68:26:3b:59:ec:3b:0b:0a:
43:c6:50:6c:82:37:77:41:93:85:98:0d:12:c7:d7:
27:17:30:73:1f:4c:84:15:3e:7d:e7:af:00:4e:4d:
d7:3d:2b:a3:78:fe:3d:f1:2a:88:14:2e:45:b1:fa:
b2:fd:6d:16:8f:1a:59:62:d6:a2:7d:80:67:87:0f:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:11:63:75:55:84:03:A4:72:8D:32:D6:C3:18:52:69:94:A8:27
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:24:f7:38:36:ef:e6:aa:c0:55:ad:c0:bc:f3:98:a2:95:5e:
9d:d9:fd:a1:af:74:54:74:9d:60:8d:fe:84:f2:a7:59:08:6a:
92:8a:ec:f0:ce:a7:47:8e:d9:31:64:43:ff:14:39:65:98:39:
81:35:30:78:02:17:15:f3:4a:35:92:c9:11:e0:ef:7c:94:a9:
bf:4b:1a:e6:5a:d8:19:b1:7a:df:83:19:69:8c:4c:92:5a:6f:
d8:0e:be:8a:d8:45:55:76:eb:32:95:87:ca:49:6f:ab:28:f6:
02:b6:e2:25:12:b6:fe:a9:b4:7a:d0:02:3f:0f:bb:31:a5:39:
2e:ad:f3:43:06:e0:1c:b8:70:4d:d9:6e:a3:95:56:d3:78:c9:
da:f9:a5:2b:dd:33:25:3f:81:eb:67:ed:b6:c2:2b:1e:ec:5c:
2f:06:7e:9f:e0:3b:57:2c:d4:fc:d0:52:da:78:4c:6d:ca:54:
31:ad:63:f8:fc:5c:a3:cb:e1:9f:fb:2f:4d:d9:0e:d7:7e:19:
61:02:e4:de:60:07:15:91:a9:0b:a3:99:02:d5:8e:cb:5e:fb:
c2:a0:85:b8:f2:c4:42:d9:fa:af:46:a0:80:59:74:0e:14:42:
c6:b1:65:05:30:19:59:e2:a8:0a:26:82:2b:61:37:eb:35:4c:
62:c9:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:22 2025 by rpki-client