Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: Etd5KF8Fle1WvmeUutRrPW77mzeq5W0nad7Pvsn5/gs=
Subject key identifier: 51:A3:94:45:A9:31:70:D2:7E:73:60:CC:2D:5C:79:EF:A0:F5:55:C4
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01984777BB7E7622C49E106B5B2FE7441200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 04C3
Signing time: Sat 26 Jul 2025 16:01:25 +0000
Manifest this update: Sat 26 Jul 2025 16:01:25 +0000
Manifest next update: Sun 27 Jul 2025 16:01:25 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: 6CpDTfA5auoVBnAAEZ5T56kMF3RRwrIoDuPKQrQ63nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:bb:7e:76:22:c4:9e:10:6b:5b:2f:e7:44:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jul 26 16:01:25 2025 GMT
Not After : Jul 27 16:01:25 2025 GMT
Subject: CN=51a39445a93170d27e7360cc2d5c79efa0f555c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:f3:f2:91:8f:99:81:c2:13:a4:bf:05:ea:
37:0e:b8:53:99:96:fa:02:a8:fa:24:00:26:6b:91:
f8:64:5e:07:60:b3:c1:bc:e2:a6:ef:95:05:b6:b9:
39:52:f2:e0:ce:16:29:b7:a9:58:77:4b:f5:4f:cf:
34:d7:3f:4a:10:3a:46:18:e3:49:0f:93:83:f6:f1:
1e:2c:8b:37:9a:7b:63:f0:2a:30:83:0f:a5:ca:0a:
af:07:96:bc:5b:48:ee:ed:64:16:2a:37:d2:9b:4f:
2f:5f:18:b9:23:62:4e:f7:04:e1:9a:21:d1:de:9f:
55:54:89:f6:a3:c8:91:3c:d0:98:3d:22:0e:90:63:
39:d4:ed:04:21:f7:6e:b0:0e:34:d5:fd:a0:07:00:
ee:21:aa:65:f6:1d:80:dc:bc:e0:b3:65:ea:04:e7:
44:1c:f9:27:3d:41:b9:ac:b2:70:03:0d:38:ba:64:
2c:36:93:bc:b8:a3:2b:21:7e:b6:6c:ee:21:f5:83:
8b:ef:a9:86:cb:a0:e6:f7:02:07:d4:cd:79:26:5a:
e6:5f:48:8f:19:47:fd:2c:56:74:f0:28:38:c9:7f:
8a:bb:8a:4d:56:15:ef:af:94:d1:43:cc:f8:04:ef:
6f:35:c9:c4:fb:12:f4:31:35:7c:1d:d3:68:52:d4:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:94:45:A9:31:70:D2:7E:73:60:CC:2D:5C:79:EF:A0:F5:55:C4
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:d6:6f:e1:6c:94:a7:87:03:b1:28:aa:fb:ff:e9:32:f9:
76:4c:fa:10:c8:e9:8a:a5:c1:d8:5b:ef:40:b0:29:12:77:4d:
78:c6:e1:f9:ea:23:75:57:e9:2b:c1:a0:50:cf:df:c9:11:ea:
5a:6b:ea:9b:a9:54:af:3b:3c:dc:39:09:b9:04:0a:56:1a:a9:
3b:92:a0:bb:68:bf:70:66:f1:c6:f9:81:cc:62:0d:f8:b6:09:
d6:83:e4:8e:0e:22:42:5b:9a:52:15:0f:fe:3b:a7:53:55:19:
6e:42:b7:cc:a6:5c:fe:5d:34:7f:35:80:67:d9:bd:bc:7c:6d:
40:3b:89:2b:66:9f:0f:00:fc:22:2f:a6:23:48:fd:32:0f:0d:
e8:a5:a1:56:a0:b7:5e:0e:c6:5d:df:b0:87:c9:53:fc:b0:96:
fb:0e:3f:1d:89:ef:0e:44:16:32:9c:ba:1a:fc:6d:6d:84:34:
9e:f1:b4:95:f5:87:e5:f5:5c:4b:ce:22:61:4c:78:d8:8b:79:
97:83:c4:31:e4:cf:34:53:68:35:0d:9a:0c:f7:da:16:bb:19:
b1:0e:47:ad:67:9d:3a:d7:e6:66:3a:08:38:2e:7f:f5:d3:84:
8d:05:ca:13:ad:b4:67:06:72:2b:4e:c2:52:1f:54:da:a3:25:
ad:c4:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:07:43 2025 by rpki-client