Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: u4zLfpFqyfYZZeA+M9jxoDgxRiLumqmh+kip9+wD+oI=
Subject key identifier: 6A:44:04:04:41:F6:9C:86:B6:E3:C7:43:CB:A1:5E:0B:59:3C:BB:04
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 0196AFFB74D9F5A9D2182DE18D5E6B831DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 03F0
Signing time: Thu 08 May 2025 13:00:14 +0000
Manifest this update: Thu 08 May 2025 13:00:14 +0000
Manifest next update: Fri 09 May 2025 13:00:14 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: C4eqZaQWTP6rLLNNTgH8dAmELDTfR+p451mPVWyo2RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:74:d9:f5:a9:d2:18:2d:e1:8d:5e:6b:83:1d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: May 8 13:00:14 2025 GMT
Not After : May 9 13:00:14 2025 GMT
Subject: CN=6a44040441f69c86b6e3c743cba15e0b593cbb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:fb:73:f7:52:a6:e6:ff:99:49:19:ad:e1:
43:38:56:58:d5:1f:13:94:ef:24:25:0e:6e:91:c7:
ea:0f:74:63:5d:32:d2:68:97:a1:da:c2:22:c1:ae:
2e:8d:43:03:14:8e:4a:f6:1c:6d:8c:a5:81:f3:2e:
48:f5:50:f8:80:7e:5f:fc:95:51:0b:90:20:ce:ad:
1b:6a:b9:d6:f5:1e:64:2c:2e:b2:b0:95:2e:dc:99:
90:99:c2:ac:6a:b5:3f:14:68:56:a1:52:16:37:1f:
ed:49:75:51:d3:0e:88:96:63:a8:7f:e6:89:a4:0d:
30:b6:05:e6:9f:12:9a:cb:69:8a:f7:0f:f2:29:50:
df:bc:71:a6:86:66:be:e5:65:b8:61:77:db:17:9a:
00:63:1b:e9:0e:97:40:3b:22:7e:34:8a:85:2b:cb:
01:30:c2:2a:69:bf:08:7d:f1:db:a9:8d:86:7d:53:
51:24:2a:c4:74:98:cf:96:33:3f:2a:9c:50:cd:05:
56:8a:23:86:72:c3:c3:5f:c4:58:cb:e1:5a:cf:d3:
27:1d:cb:a1:a5:44:2e:49:c7:38:48:b8:cb:67:16:
60:2d:ce:68:e5:5e:82:c7:a0:b4:13:3f:95:a0:ff:
91:32:4a:a8:e5:e0:3b:39:b7:6b:2a:7c:b2:c2:3c:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:44:04:04:41:F6:9C:86:B6:E3:C7:43:CB:A1:5E:0B:59:3C:BB:04
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ed:9c:9c:f7:b7:c9:85:6f:67:53:f0:9c:10:4d:62:78:98:
b3:a6:2a:ea:6a:03:e7:bd:e4:0a:2a:2f:4e:ac:5b:7a:7c:87:
18:93:c2:98:a2:00:17:44:ab:a0:cb:93:9f:d5:a1:06:02:9d:
1e:8a:43:a3:fe:6a:ef:2c:6c:3a:e1:34:89:33:30:ad:14:fa:
32:74:9a:bd:ad:45:56:be:0a:de:56:c3:e4:39:94:84:f6:98:
b4:fd:c4:e5:01:9e:0d:38:8e:4e:39:a1:0d:dd:a3:68:17:75:
cc:03:56:c2:83:95:96:33:e1:7b:d7:a4:eb:1a:32:17:cc:70:
f3:75:f8:ca:74:2b:91:71:db:fa:1f:7d:6f:70:f5:2c:8a:c3:
03:c8:51:10:2b:c8:ee:89:e8:f0:ae:0a:c9:05:0d:53:36:1c:
6d:47:3f:aa:5e:14:9c:c4:ec:7a:2d:50:15:81:dc:41:6c:f6:
e0:96:b6:d0:c2:63:00:8b:46:56:ed:a1:a7:dc:6c:c5:e6:8d:
2f:41:b3:ad:82:f0:18:76:5c:be:4f:10:52:09:a0:23:a8:7c:
f7:dc:72:e6:a2:ec:8e:4a:36:63:c3:d8:db:ba:1e:2f:8c:c0:
cf:97:49:51:9d:bd:21:5f:d0:ad:1e:1f:c4:26:31:24:60:d9:
e3:32:fe:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:32:26 2025 by rpki-client