Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: Iz8ftnM7hH02A9iLsYTWj7hRRiljbm2pC+pxbJYSFrw=
Subject key identifier: 8C:8A:32:53:D9:F3:75:C2:AB:38:A9:73:43:33:95:05:6B:6B:41:82
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01974C69657DCC6654BB773331F15887ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0441
Signing time: Sat 07 Jun 2025 22:01:05 +0000
Manifest this update: Sat 07 Jun 2025 22:01:05 +0000
Manifest next update: Sun 08 Jun 2025 22:01:05 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: a0lgSFKwtT4Q5T8nmnz6YP7jtNw9kkTkXvZxMPRysAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:65:7d:cc:66:54:bb:77:33:31:f1:58:87:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Jun 7 22:01:05 2025 GMT
Not After : Jun 8 22:01:05 2025 GMT
Subject: CN=8c8a3253d9f375c2ab38a973433395056b6b4182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:54:99:f0:ce:07:95:00:2f:7d:c3:52:97:
09:fa:c8:32:93:e2:c1:34:a2:df:0c:0d:c8:31:9e:
1b:d3:3b:1e:6c:61:6e:29:08:df:80:8a:1a:a1:77:
c3:43:8e:9b:80:3d:02:b2:ec:34:4e:29:85:21:88:
4e:a1:c0:2f:1d:e5:3c:a0:c5:97:43:60:41:dc:5b:
d1:09:86:9c:14:fd:f2:65:76:73:42:a7:4c:71:24:
4f:5f:6c:0b:25:06:94:01:68:dc:aa:54:bb:e1:56:
db:d8:fc:fc:cb:d9:23:1c:7f:e0:8e:e0:60:27:f6:
5a:f3:ee:be:e6:53:45:63:9f:3d:8b:9c:86:6b:f4:
a2:81:9a:6f:bd:eb:de:61:85:f5:d0:79:6c:39:44:
84:8d:99:80:a1:ae:51:fd:89:99:25:9b:19:17:b7:
4e:01:35:83:ae:5a:69:9a:67:91:76:e1:c3:a2:41:
28:86:06:29:16:8a:5a:aa:c4:39:9c:61:3a:c9:a8:
44:90:0b:24:49:18:ce:ae:88:ac:5c:34:ff:d9:3b:
34:be:a9:a5:42:fd:87:b0:ef:5b:6d:7a:c5:c8:60:
56:fc:f4:58:20:c6:a2:54:aa:38:17:b9:a7:87:2a:
6a:26:55:63:6b:6f:28:29:ed:08:42:1a:81:bd:30:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8A:32:53:D9:F3:75:C2:AB:38:A9:73:43:33:95:05:6B:6B:41:82
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:cf:71:5f:7a:a4:04:67:4a:49:95:8c:6d:02:a9:51:db:2a:
f7:25:f3:77:a0:7f:62:c6:15:fc:14:6c:ae:ee:fd:56:25:78:
4c:d0:97:58:01:ca:20:86:b9:18:85:31:c4:36:3c:09:bb:01:
d8:08:36:00:a4:6e:73:23:84:da:70:15:c0:00:b8:9f:a2:70:
0b:5c:ca:08:b8:03:84:ae:f9:41:1c:0e:8b:1a:95:69:46:69:
42:0a:dd:f3:c7:2f:38:24:bd:b6:61:54:f8:f8:98:1c:30:28:
b1:f0:83:1f:59:1a:33:b8:0c:b9:42:2c:80:42:7e:19:b9:97:
cf:fc:33:27:63:34:f9:22:1f:79:68:fc:74:d8:39:d8:cb:f8:
44:ef:2d:5e:f0:f0:f9:f9:72:93:6f:34:17:3a:28:aa:1d:bd:
aa:87:a9:db:3c:ed:25:38:18:59:75:98:b5:14:49:2a:ec:f6:
94:95:c2:dd:6b:34:d7:41:a4:7c:86:03:82:ee:56:b3:4e:a3:
8d:57:1c:d4:ce:ea:a8:a0:85:63:78:cd:a9:26:96:06:f5:5e:
ee:d8:ee:92:7d:e4:10:ef:24:64:dd:a6:41:4f:25:f6:88:62:
42:d7:69:3e:0f:73:29:8b:0b:68:c2:8e:95:e0:ed:5b:bd:8a:
18:81:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:12 2025 by rpki-client