Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json)
Hash identifier: qbl7lL8SqAUzR/J8J9kJ0ixNdZOocF9j/v9DLnjTaCY=
Subject key identifier: 27:5D:58:BD:30:46:E8:11:FD:78:72:6B:DA:85:C6:6A:20:93:1F:F6
Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Certificate serial: 0198D4043BCD8CBDA60C053CF48703B057A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
Manifest number: 13F0
Signing time: Fri 22 Aug 2025 23:01:43 +0000
Manifest this update: Fri 22 Aug 2025 23:01:43 +0000
Manifest next update: Sat 23 Aug 2025 23:01:43 +0000
Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=)
2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: J1jOl0QjfndtzC/kij1uOppcMwyKQ1zCrMg4qwl0QsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3b:cd:8c:bd:a6:0c:05:3c:f4:87:03:b0:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b
Validity
Not Before: Aug 22 23:01:43 2025 GMT
Not After : Aug 23 23:01:43 2025 GMT
Subject: CN=275d58bd3046e811fd78726bda85c66a20931ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:4f:58:81:2a:2d:df:81:a5:2b:0d:52:98:
53:db:02:fd:c7:d9:0e:9b:67:2a:bb:c5:7a:e3:8e:
91:ce:42:49:ec:0b:5b:29:e4:9c:e2:16:ca:1d:89:
57:35:b2:27:d2:fe:4b:0a:b0:81:2b:2b:fb:ba:8d:
ad:dd:15:18:6f:41:ad:1b:f2:a1:20:df:e9:83:89:
9b:97:9e:26:42:15:75:a3:23:43:c8:38:1a:d3:ff:
bf:77:68:00:8e:06:60:59:0a:a3:55:aa:12:bb:b3:
06:b3:d2:90:ec:ad:58:95:bc:b6:e2:18:ed:58:bb:
b1:2d:d3:b6:b5:d3:6b:5f:86:62:16:1a:2f:e2:5a:
3a:12:ea:6b:21:e9:2c:8c:1a:86:a5:10:a5:d4:e0:
e5:8c:79:ba:04:ed:e5:2d:d4:e9:fa:43:2c:d0:b6:
4b:d9:ff:bc:85:2d:2a:da:83:96:49:28:84:e4:1d:
66:69:c7:38:1a:39:d2:31:4a:79:b9:77:fa:d4:cf:
af:cf:c9:ea:98:e0:44:58:06:1f:a3:2d:da:32:f5:
e5:86:a7:ee:7f:dd:80:4f:d8:62:46:59:dc:42:1a:
28:48:79:96:9d:e4:56:16:72:be:6a:05:0e:08:1d:
fa:df:f8:89:ff:28:67:dd:82:02:c3:07:c5:8b:45:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:58:BD:30:46:E8:11:FD:78:72:6B:DA:85:C6:6A:20:93:1F:F6
X509v3 Authority Key Identifier:
keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c5:52:a3:2f:1f:6a:51:8c:e4:52:bc:5e:e8:7a:44:28:9b:
8e:ad:52:44:a4:e0:83:cb:c8:3c:46:d8:d5:9f:a9:58:10:c0:
e8:7a:b0:6d:d7:99:e5:c4:88:d2:8e:45:5c:4b:ef:65:df:7c:
e4:5d:62:22:1a:b6:f2:51:f4:02:ae:a4:b6:41:f9:ee:3f:1c:
20:1c:24:34:84:44:98:45:fc:85:ce:17:af:23:8c:98:a8:49:
bf:be:29:1b:e5:ad:4f:50:9c:5c:f7:05:34:a4:c4:1a:5e:59:
f1:ce:1d:31:09:d1:89:d1:a8:45:aa:33:bc:47:4b:19:62:1b:
eb:aa:2b:eb:eb:a7:9b:ec:3e:4c:3c:69:3c:8a:a7:b2:27:a7:
25:1f:a3:2e:eb:65:4a:f8:e4:1b:16:b2:28:ec:30:85:87:61:
9c:0e:5b:10:4a:b7:1c:f8:16:37:9d:b7:da:90:08:78:56:9d:
13:fa:0e:95:0d:2b:22:16:e2:87:46:9c:b1:9f:c9:31:9e:53:
69:8c:b3:83:62:5c:ee:bb:13:4e:0a:e8:b7:15:58:f3:19:7f:
74:9d:f3:d5:bd:2d:f5:45:d4:60:a6:ca:dd:7a:5d:1b:78:57:
ef:f9:42:f2:63:a8:8a:84:a5:de:07:c3:8b:ed:f8:cb:c7:ab:
1c:e8:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:56 2025 by rpki-client