Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: sGoBHT3kp/JJIY0YwaA0RImSMu/NhGkNkcFP/FFqK08=
Subject key identifier: DC:0F:AB:05:97:9A:87:48:2D:DB:F6:33:02:6D:01:70:67:20:3E:A8
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 0198D6606044C01B4FB7F2AC342E2DFF1A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 050D
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: i1NmamZAzNFMKHB5/o+FdyLTJjyVO8W56D0tj96nck4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:60:44:c0:1b:4f:b7:f2:ac:34:2e:2d:ff:1a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=dc0fab05979a87482ddbf633026d017067203ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:b5:29:a0:46:eb:55:1b:e6:7e:d7:ab:80:
bc:fb:e8:47:2a:9e:b1:28:d8:a0:d0:64:24:2f:c7:
39:db:eb:cc:c4:be:17:b7:6f:36:52:5a:7a:c3:03:
c0:f3:bb:53:65:90:a7:18:3b:f1:a8:2c:0e:70:48:
64:d5:1a:6d:ab:9a:7d:0b:d7:59:db:b9:c8:1b:7f:
54:20:69:9d:86:fb:06:ff:c3:94:2f:79:35:72:85:
ee:fd:a6:4d:4a:fc:4d:94:41:bc:ec:73:bb:52:f3:
ec:8f:dc:34:58:61:69:ff:49:10:d6:ed:e9:73:dd:
02:5d:6f:b2:41:b1:6a:22:59:33:b9:af:52:6a:27:
9a:6f:a8:1a:29:d4:e6:26:6d:e9:61:f3:62:6c:c7:
a9:d3:b2:bb:f4:ad:d4:62:a3:3c:9e:98:34:eb:19:
84:ff:ad:1d:f7:78:f2:d5:9f:25:49:69:14:ae:cd:
85:af:6e:8a:49:96:b4:e1:8b:fa:35:2c:03:7a:8b:
10:6c:67:1f:cd:5d:10:52:1e:0a:8d:49:67:e3:25:
78:61:e8:e6:c8:c6:e6:34:85:c8:cc:aa:cc:71:fe:
f8:2d:29:7e:0e:97:7c:70:5c:bb:cb:4e:c0:7d:2c:
2e:d2:79:3d:39:11:f9:f7:e7:32:45:cc:86:93:5b:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0F:AB:05:97:9A:87:48:2D:DB:F6:33:02:6D:01:70:67:20:3E:A8
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:02:ad:e4:9d:59:53:a5:cf:07:e3:f9:d1:a0:97:a6:40:50:
af:8a:7d:3a:4e:e6:a5:34:fc:3c:6f:4f:30:3f:a2:11:09:e6:
ca:4d:d9:44:dc:8d:08:8b:25:5a:46:8b:04:8b:12:1c:f0:f6:
d1:5e:dd:fb:2e:c5:b1:97:04:61:a6:8d:f8:e7:72:28:fe:50:
21:c3:1c:d7:65:65:cc:96:75:b8:aa:de:c5:39:a6:d5:ce:bd:
fa:13:4b:0a:9d:97:8c:df:52:18:9c:81:c3:5f:d6:a2:5e:78:
6f:86:56:7d:d7:a9:32:39:5f:ac:f2:05:ce:d9:02:6a:23:3a:
c9:31:5a:ef:14:d8:6d:e9:fc:8a:33:7a:ed:80:f7:1b:6d:8f:
5e:25:29:84:cf:68:ba:dc:d1:64:b6:e6:88:e2:bd:35:2a:58:
ad:bc:9e:3a:ae:82:94:0b:19:7b:9a:47:aa:79:28:65:7a:88:
9f:64:6d:cb:c7:8a:16:36:61:bb:c2:34:dd:27:b8:47:48:34:
46:4c:0a:8b:e2:15:d5:13:c3:6a:26:0f:cb:71:a7:66:d5:21:
12:e2:d6:e0:42:47:6a:e6:24:21:d8:7b:05:4d:98:c3:ad:c1:
d3:4e:4e:a5:25:c8:5b:ba:e4:18:e4:06:54:f8:de:5f:10:40:
14:91:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:04 2025 by rpki-client