Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: lMZr17lokkzppnpQM8fH0ezFv26mTK3bMr49XHUcP5k=
Subject key identifier: 58:FA:28:F9:A1:0D:11:F7:C0:A7:0C:BC:41:5E:F5:5F:C3:75:01:EE
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 0199FDD9E86C05B44CC38B1E7DFDCAC452F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 05A6
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: x2ZHQj9dLCxU6q16WhMhsfHqkIpDCOgcHtDysZi+XVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e8:6c:05:b4:4c:c3:8b:1e:7d:fd:ca:c4:52:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=58fa28f9a10d11f7c0a70cbc415ef55fc37501ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:a2:d7:37:bf:b8:23:f0:ea:36:66:15:1f:
62:8f:b8:8c:50:1e:78:66:be:6b:a2:9d:37:45:0d:
24:cf:0e:34:35:59:ae:34:ec:82:da:ed:82:1a:1b:
b9:cc:a7:f7:9f:cd:bf:32:6a:b9:a4:bc:0f:69:e2:
b6:ad:d6:55:a3:52:e5:bb:ef:01:f8:d2:cc:57:b5:
55:5e:f2:b1:ff:5c:a9:ee:44:60:fa:5b:ae:2a:06:
c9:3a:53:69:c4:11:e9:38:e8:b6:09:71:b7:67:fc:
99:a3:49:00:d6:8f:41:0a:84:7d:d2:ac:47:de:60:
2d:4a:5b:17:bb:d4:7b:34:2a:3d:d6:e8:54:35:60:
3f:15:59:62:d8:8b:3c:ef:9f:79:6f:7e:68:e1:e8:
74:9a:5a:2d:f8:53:4e:b8:e9:a6:35:55:48:b4:23:
63:4b:b4:be:60:89:97:da:4d:cf:44:00:61:07:91:
de:e4:70:0a:1e:03:e5:c4:74:ca:ca:1f:4f:62:dc:
ec:bb:c6:d1:73:9c:5a:06:a0:ff:09:b4:25:ea:d0:
0b:b6:d4:2f:30:1b:df:ce:bd:ac:07:ca:83:27:2f:
65:60:ac:95:2f:b1:da:0b:ef:e3:2f:6e:8a:f8:5a:
40:ae:05:68:0c:c5:8a:df:32:83:cd:f7:2c:71:85:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:28:F9:A1:0D:11:F7:C0:A7:0C:BC:41:5E:F5:5F:C3:75:01:EE
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cd:aa:85:61:5a:da:b3:1b:7d:85:87:33:6a:98:35:47:27:
26:c5:f9:56:e9:69:ac:aa:7a:bc:a5:c5:b1:d7:74:94:f6:a4:
66:80:6a:be:da:b8:a1:9d:90:53:86:f1:42:65:98:36:cd:46:
4b:1b:a3:d9:a3:d1:8c:1a:8a:61:30:a8:e7:82:69:c0:ea:9a:
d0:6d:fd:70:4e:c5:a7:9a:25:3a:9b:25:87:c6:97:d8:f2:d2:
ce:95:48:58:de:8a:43:2b:ed:77:46:22:f0:b3:fd:bf:dc:8e:
2c:b8:14:cc:4e:17:a9:b3:ba:1c:24:3e:54:70:4c:f5:91:47:
2a:00:b6:c3:47:e7:ae:78:4f:3a:bb:49:aa:3a:cc:08:8e:a8:
a0:b7:08:09:b3:3a:a6:a9:64:8b:11:1d:22:92:e8:c1:83:30:
b7:ad:f5:06:2c:9b:cc:8d:7b:55:88:60:8b:31:36:14:b3:9b:
aa:c1:71:c8:31:75:97:62:c9:49:14:61:16:2a:3e:6b:11:b0:
4f:79:05:98:3b:b7:f3:1e:a1:b3:d8:28:4b:24:76:e9:f9:42:
d1:fd:d1:84:97:f2:80:56:f6:46:51:16:46:a7:f8:94:e5:23:
cc:cc:a6:e0:57:7d:f8:54:8e:55:80:a9:00:ff:13:a1:31:22:
b5:dc:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:19 2025 by rpki-client