Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: bCu7yNad3bjVJhLVWK+/n1aFESAQx9CM/x0bHV47BPg=
Subject key identifier: 04:6C:47:2A:E2:32:11:C5:DA:55:65:70:E6:74:4B:26:8A:E2:86:48
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 0194BB601278EBA9F5BEF6FA70221656959F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 11D1
Signing time: Fri 31 Jan 2025 08:00:22 +0000
Manifest this update: Fri 31 Jan 2025 08:00:22 +0000
Manifest next update: Sat 01 Feb 2025 08:00:22 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: lTRq0H7SEaXHQ04veu1++GWdG/2veyQ+Tx2h8S3iz2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:12:78:eb:a9:f5:be:f6:fa:70:22:16:56:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Jan 31 08:00:22 2025 GMT
Not After : Feb 1 08:00:22 2025 GMT
Subject: CN=046c472ae23211c5da556570e6744b268ae28648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:f5:43:d0:46:b6:0c:11:37:9f:55:ec:f5:
32:e4:a9:ab:0c:e0:97:b2:76:a5:30:cc:3c:84:d8:
10:b5:7d:d5:bd:72:92:d4:6f:82:76:12:dc:0f:81:
b1:72:5f:c1:48:fe:85:f2:c6:9e:f3:63:eb:50:41:
66:b2:71:91:0b:4d:d0:82:92:68:4c:db:21:91:6c:
8c:01:a6:2c:f9:ac:c4:9b:b4:f4:3f:23:55:2b:7f:
61:b7:5a:5b:fe:3f:e7:06:d9:05:ce:10:45:cd:a7:
2a:fc:f6:b7:a6:10:52:f8:01:68:6c:34:bf:fd:d0:
c4:66:10:d9:74:15:6d:1a:60:8e:f3:bd:df:00:a5:
6c:ef:67:e3:74:d8:87:b5:f1:5a:b4:ec:99:86:be:
b7:7a:72:bf:2d:8a:3c:6d:f9:c7:1a:db:72:11:68:
4f:bd:5e:03:38:63:74:09:b0:3e:16:eb:51:66:9d:
20:70:a2:07:ac:cb:30:de:fc:83:39:72:e2:16:08:
e7:1d:50:8a:75:35:24:22:50:44:0e:c4:71:06:3e:
04:e3:f4:35:49:07:9a:95:e4:af:ab:80:18:ff:80:
a9:95:17:5e:c5:31:eb:21:f6:e8:81:63:3f:bf:21:
85:0f:d9:a4:eb:02:04:3c:1d:76:5e:4f:7f:a7:26:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:47:2A:E2:32:11:C5:DA:55:65:70:E6:74:4B:26:8A:E2:86:48
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:69:01:31:74:9d:ef:a7:82:3b:7d:7e:72:9a:19:ab:cb:3f:
a9:b2:1c:ab:9b:ad:be:0a:57:77:a8:af:e9:c9:b9:1e:ec:ec:
73:d0:bf:bc:22:36:cf:60:fe:ee:a9:95:ac:93:0e:4e:81:b0:
14:b6:ff:85:10:56:79:68:ca:e8:cb:9b:15:82:75:b1:ef:cd:
8d:72:f6:d0:39:06:91:cf:f4:d6:a2:29:ff:7e:8e:35:98:76:
0f:61:57:03:9f:a4:92:be:11:c2:09:e8:7d:86:ad:04:cf:7f:
9b:37:aa:9a:4e:8b:9f:6b:71:40:55:00:7f:4b:01:3d:a6:2f:
82:23:2b:67:c9:da:66:3b:ea:f5:29:94:d7:77:45:47:26:97:
b2:e1:a6:c5:76:94:87:72:de:63:ab:a5:63:90:e3:8b:40:81:
fa:7a:a3:f4:1a:7d:c3:5b:91:f3:97:9a:a3:0f:8d:73:0d:e8:
cb:99:7a:4b:44:95:11:91:b1:82:da:b9:80:ae:61:36:a9:74:
36:3b:d0:f0:cb:12:e4:48:8e:27:b1:0e:cd:99:4b:06:97:5c:
09:3a:aa:b6:f6:72:39:a5:e4:74:21:ac:ae:93:3c:4f:22:93:
ef:0a:c2:11:b9:f0:ba:f7:c1:2e:58:62:75:9c:d0:84:63:88:
98:64:d1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:51 2025 by rpki-client on console-fra.rpki-client.org