Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: tsWDfthKGJTTWFVdhycHxlRKoviuf3unOge/HnT3St0=
Subject key identifier: AF:B8:45:F0:A4:12:05:69:F5:5A:9D:CD:0A:7C:8F:7A:C7:5C:25:5D
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 019A2855ADD00ED80C8FB51C040C41061904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 05BC
Signing time: Tue 28 Oct 2025 01:01:34 +0000
Manifest this update: Tue 28 Oct 2025 01:01:34 +0000
Manifest next update: Wed 29 Oct 2025 01:01:34 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: joeaGsdZz+n3Ln1bnfOhHn/OuKy93rebrbTZhqD2BI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:ad:d0:0e:d8:0c:8f:b5:1c:04:0c:41:06:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Oct 28 01:01:34 2025 GMT
Not After : Oct 29 01:01:34 2025 GMT
Subject: CN=afb845f0a4120569f55a9dcd0a7c8f7ac75c255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:34:7b:3b:20:70:f9:d8:5b:e9:c6:ea:48:
29:c8:05:0c:e7:49:2e:49:8d:47:09:dc:3c:73:25:
01:87:26:b1:7f:37:df:04:fb:c4:68:4a:e7:7c:b7:
72:a0:ba:1d:fc:a5:12:22:53:ed:65:4a:ea:9d:05:
87:bc:13:f1:d1:87:67:09:b7:64:24:40:cb:04:e2:
c8:8b:16:40:eb:4c:be:e1:8f:ba:66:13:c5:0b:cd:
91:62:f9:8a:84:b5:09:65:3f:91:8a:44:3a:4c:92:
4b:19:57:5d:ba:e2:a6:d2:0c:d7:38:b5:e5:35:b4:
63:03:83:f6:d9:4d:48:3c:d8:88:b5:9f:d1:4c:af:
3e:fb:83:27:4b:9d:fa:e6:a5:28:fd:4f:90:8f:e0:
7b:2e:6c:fc:b1:78:43:df:d7:93:c9:aa:33:2e:0c:
a5:26:74:0c:0e:90:fd:3e:fd:45:77:ce:c9:36:0d:
bf:39:e2:8d:b7:0d:ad:89:c9:38:ae:8f:41:09:5b:
c1:86:bd:ba:1c:2d:55:84:cd:27:ff:2b:a6:83:f4:
8d:76:cb:d7:f5:91:8e:fc:23:c6:aa:9b:3f:a2:5d:
13:7d:79:3e:66:bd:91:81:c8:20:b0:af:40:03:aa:
84:41:d3:95:72:92:fc:4f:d8:e0:a8:97:32:25:8c:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:45:F0:A4:12:05:69:F5:5A:9D:CD:0A:7C:8F:7A:C7:5C:25:5D
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f2:77:0f:6f:8d:32:7c:d2:55:b1:ec:ef:7d:13:89:10:ae:
34:9d:76:99:19:75:48:de:ab:93:ed:d8:e1:a8:0b:56:96:af:
04:9f:ff:ae:05:a5:f7:71:bd:c4:7e:74:51:9a:a0:01:d8:02:
f7:db:a6:e4:f2:63:af:0c:f7:0d:36:c4:07:c5:31:82:5e:d5:
64:c8:b5:88:e1:2f:05:37:05:4d:9c:b4:16:cb:f0:72:49:5f:
24:9e:ee:31:96:28:ea:01:45:c6:d9:f5:35:3c:02:be:3e:a3:
18:08:c4:9e:f4:34:90:b7:9a:6f:04:a6:ce:76:c4:73:d8:c5:
87:9a:79:19:1b:b7:a5:61:b3:b3:64:04:53:26:8e:9b:4f:d8:
4f:d1:d3:ac:dc:cc:18:f1:7b:c7:d6:46:9a:a1:06:2c:dc:c0:
96:d9:90:a3:b8:41:da:bf:db:6b:4d:a9:4e:4d:fe:40:05:5b:
3b:90:83:aa:25:ec:08:96:1e:72:ac:84:bf:4e:1b:53:62:3c:
86:f1:49:fd:60:e9:75:6c:05:0e:e1:bc:e5:2c:10:1f:c4:b3:
e6:55:64:5c:05:8b:4b:21:be:35:a8:8d:64:4f:48:21:11:ce:
30:9a:a1:b8:a8:c5:c4:14:6e:dc:e0:e2:18:f8:0a:3d:dd:fd:
e0:5c:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:21:35 2025 by rpki-client