Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: oEDKZ64xsVzS1jql6fzlqTp01Rx6TgqOdBl6S0hsCpQ=
Subject key identifier: 99:83:DF:3A:37:D3:92:1B:ED:EA:0D:9B:55:EB:13:E5:F3:88:4B:9A
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 01992F3636521581AC6F198FE7EE06A9D5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 053B
Signing time: Tue 09 Sep 2025 16:01:45 +0000
Manifest this update: Tue 09 Sep 2025 16:01:45 +0000
Manifest next update: Wed 10 Sep 2025 16:01:45 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: myc53pw39PbFl8OdKcqhC8yxZ/EMBIywvor47SEXty0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:36:52:15:81:ac:6f:19:8f:e7:ee:06:a9:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Sep 9 16:01:45 2025 GMT
Not After : Sep 10 16:01:45 2025 GMT
Subject: CN=9983df3a37d3921bedea0d9b55eb13e5f3884b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:76:9a:e2:0d:23:06:00:33:48:ff:4c:32:
0d:d1:95:09:18:16:3a:9c:99:1c:c8:25:6d:81:e2:
c9:12:43:b6:fb:f1:1a:cf:62:b2:35:da:fa:f6:35:
8e:cb:6f:b0:28:78:3d:11:f1:81:6f:b3:d8:4b:54:
a7:71:90:cb:21:54:29:25:35:3f:7c:01:9d:d3:0e:
ae:b9:e4:b3:89:dd:cc:ae:6c:3b:bd:13:ee:24:2e:
70:d5:99:41:06:b7:91:8d:fb:c7:a2:ca:7a:be:6b:
2e:8b:f1:27:58:71:8e:1b:e2:ef:b7:35:ff:f9:44:
1e:58:c7:47:2a:68:c7:e0:ac:bf:52:03:99:42:95:
6b:7c:93:bb:9e:c4:c2:7b:9b:64:bc:18:e5:d9:87:
75:e3:a5:cd:26:1d:6e:3f:2a:e3:1a:a4:02:66:78:
8b:f2:70:0f:e7:12:aa:e1:9d:f7:c8:df:32:91:af:
95:7d:6e:40:9f:49:28:11:1a:c4:1c:66:48:5f:50:
e2:76:8d:bf:eb:53:08:04:9b:fa:7b:41:cc:52:2f:
33:91:83:00:47:e8:b1:37:0b:b3:4f:62:8c:50:48:
47:ab:65:1c:85:1e:45:9d:57:10:3e:b6:6c:07:10:
97:69:bf:75:20:18:59:0f:41:52:75:9e:71:7f:19:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:DF:3A:37:D3:92:1B:ED:EA:0D:9B:55:EB:13:E5:F3:88:4B:9A
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:20:1c:10:e7:44:5b:ff:1d:0f:17:9f:4e:73:73:0f:91:
95:ba:13:72:83:32:df:4a:17:80:5a:5f:c3:3e:3c:7f:64:fe:
1f:94:f4:35:93:9e:c3:6b:e9:68:c0:3b:6a:ea:7a:70:21:69:
4b:6d:3a:ae:76:a8:7a:9a:f0:4c:77:f0:89:ba:fa:e0:62:0a:
4b:3e:4b:16:92:81:f0:a1:18:0a:ac:8b:d2:37:3f:58:40:95:
01:02:1f:93:36:3b:4c:e8:7d:56:ad:a2:dc:ed:da:02:cc:39:
53:d3:af:60:fc:14:f8:18:78:4a:67:2b:eb:02:b1:4c:89:1a:
17:3d:3c:5f:0c:13:c4:c1:56:d0:3e:a1:ed:19:65:5f:e8:1d:
f3:ff:58:72:e6:d4:a2:e8:11:91:16:ca:b9:4a:32:7a:5b:cc:
63:63:2d:f1:cf:ae:83:df:ce:57:7e:5e:0d:de:b8:e0:6e:74:
13:b4:f1:69:d9:8a:74:38:63:36:01:5f:d3:b5:f2:b9:87:16:
84:15:4b:26:5e:91:67:a8:a2:60:a1:e9:a9:92:63:d0:4a:63:
29:70:85:c7:4a:4d:e4:ba:b2:8e:c8:88:a1:7c:93:0d:5c:3c:
5d:43:43:14:59:8e:3f:d0:93:ef:c4:80:2b:c6:ab:32:dd:1a:
cd:92:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:30:38 2025 by rpki-client