Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: Ow2PsqyLGNcr5/7gXT2TZbhnSlAOdjEMgvtTSLnkJlk=
Subject key identifier: 6A:EB:9B:55:60:D0:DD:81:93:97:23:1F:72:53:A7:7E:A5:A4:BA:11
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0198D4735E2C1634ED9857A2EA3D4E0A0A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0D68
Signing time: Sat 23 Aug 2025 01:03:07 +0000
Manifest this update: Sat 23 Aug 2025 01:03:07 +0000
Manifest next update: Sun 24 Aug 2025 01:03:07 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: bcjbKp11bIvqw+TQPJ2E+GWUNGz4yAz8cFR7O2ImkEU=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:5e:2c:16:34:ed:98:57:a2:ea:3d:4e:0a:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Aug 23 01:03:07 2025 GMT
Not After : Aug 24 01:03:07 2025 GMT
Subject: CN=6aeb9b5560d0dd819397231f7253a77ea5a4ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:cf:de:af:82:4d:05:9a:c3:0e:a5:3a:d3:
98:19:46:1e:01:0a:5e:1d:3d:13:2d:01:62:da:54:
55:52:c7:f7:7a:a7:53:46:b9:ca:5b:66:e7:66:66:
0a:1e:a1:0d:29:5c:9e:f3:dc:1d:82:f3:65:41:c7:
3d:f0:75:13:a7:20:61:61:be:7a:b5:37:27:0c:d5:
9a:b1:2c:97:73:c0:b7:34:6f:41:b0:3b:8a:1d:7a:
8c:22:59:78:64:ce:96:93:1f:19:a7:7b:78:9b:83:
c7:06:1b:69:3f:11:29:75:4a:72:95:16:eb:6d:a2:
a6:48:6d:99:84:af:c3:84:4d:60:32:e0:99:a5:6b:
61:26:dc:fc:8a:91:5b:67:ad:90:f4:d9:b9:ce:ca:
18:96:7d:7f:5b:70:cd:d9:c3:94:8a:de:72:0a:05:
b5:cc:68:33:36:72:5b:85:38:3c:3f:90:3b:97:e7:
19:af:c5:99:88:4a:bf:d3:11:8a:1f:46:30:ce:c9:
ca:d2:30:82:9f:64:8c:de:87:78:b0:35:da:0c:ca:
8b:02:7d:da:cd:9b:e6:a1:ac:e7:49:e1:87:91:90:
b1:04:8e:4c:3a:5f:14:90:b8:cd:bc:a3:02:66:14:
42:fb:f5:00:e4:e0:0f:ef:1c:2d:c0:74:47:25:76:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:9B:55:60:D0:DD:81:93:97:23:1F:72:53:A7:7E:A5:A4:BA:11
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:db:55:e2:3d:d6:59:56:4d:59:88:47:24:d5:22:aa:0f:13:
22:71:d7:6e:24:af:12:e2:74:e4:2e:24:ee:3e:2f:85:f7:32:
82:ef:4f:14:82:e5:b5:45:3b:28:c9:7a:dc:1a:3a:e1:5e:61:
ad:8e:77:6e:d6:3d:58:aa:00:28:13:2d:27:e0:d5:30:d2:5e:
8d:e2:63:c1:36:d4:d8:9c:10:42:32:05:4d:09:2b:e9:10:9d:
61:a8:22:02:4a:b5:5b:e8:ce:ae:4a:fe:4b:16:a4:db:08:34:
19:d4:d8:a1:45:93:3c:e2:59:6f:59:40:d7:2c:84:c2:d8:2b:
d4:73:d2:d0:ed:9e:0f:ff:fd:db:35:c9:20:69:79:2e:2a:b2:
f6:00:88:ca:c4:4e:3a:24:63:f0:42:85:b3:c7:db:5d:34:7f:
9c:e8:da:af:19:ba:c0:81:a4:bd:12:c2:b4:cf:b6:aa:56:fa:
f1:34:67:48:7e:28:73:2d:af:f0:63:47:ed:ec:4f:52:b2:fa:
9f:b6:2d:c9:23:9d:5d:87:a1:83:11:b2:de:ed:99:a1:73:04:
01:7c:f6:21:bb:6f:a2:a2:40:69:28:a0:30:9b:f3:7e:06:bf:
d3:56:d4:6b:78:bd:2a:39:3b:d1:9c:35:86:b5:a8:fa:74:29:
fe:98:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client