Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: N03/W+fj/ZyCPZ8qP+J/hF44vf6uEZQin+HPYjeQM1g=
Subject key identifier: 18:D5:43:93:AB:48:F8:14:65:B6:36:B9:9F:97:2D:8F:BE:4E:F6:B5
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0197B6A04F34BAECF9F831748F6EE28FC7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0CD4
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: bIWturW00ZQ/g84yw4VESsr1MMPk+Q7B/fQ7WZ2y4To=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4f:34:ba:ec:f9:f8:31:74:8f:6e:e2:8f:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=18d54393ab48f81465b636b99f972d8fbe4ef6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:dc:48:43:36:d5:ad:b8:02:ad:ef:ef:4c:
8b:ea:8e:d9:a2:e8:b9:3d:0e:a7:1c:9e:e4:be:fd:
02:ae:96:b5:0f:7c:e6:e3:fc:42:ea:1b:7b:39:24:
0b:20:05:5e:bd:c8:de:31:33:3f:3a:6c:42:bf:34:
94:86:a1:9a:c8:5a:07:a5:47:76:25:61:6d:8d:c9:
65:0f:60:ba:fe:9e:09:97:a1:10:e0:d6:dc:e5:1b:
02:98:d0:6c:2b:1b:16:36:6f:c4:f3:e1:84:2c:27:
eb:02:a0:51:92:ec:83:69:15:e0:3a:55:d4:35:8b:
2a:5c:14:47:f2:c6:1b:dd:0a:2f:1d:f3:e2:cf:05:
26:97:3d:ce:e3:18:2c:dc:27:a2:86:59:ba:bd:97:
41:bf:1a:11:da:1a:76:f1:f9:7b:34:10:74:2c:e8:
73:24:ee:89:71:9c:51:a9:cb:97:a5:9f:72:9a:06:
56:5c:ed:9b:06:f4:5b:00:9e:b3:6c:85:f1:f6:52:
fd:b5:87:7f:70:74:96:46:bc:3b:fc:c4:bc:f7:db:
63:13:52:c2:1a:7f:ab:42:36:11:aa:dc:39:5e:b2:
27:35:7d:18:16:66:a7:2f:53:67:46:e7:cc:a5:d3:
1b:86:0b:5d:33:3f:53:08:39:03:e7:87:04:e6:97:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D5:43:93:AB:48:F8:14:65:B6:36:B9:9F:97:2D:8F:BE:4E:F6:B5
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:1b:8b:e9:ca:32:a5:e1:0d:0b:3a:d9:73:8e:87:64:cb:
49:10:27:c8:3b:3e:4e:da:8f:b9:09:9b:f9:5c:45:96:66:46:
27:dc:54:ca:ca:cc:34:75:8e:20:cf:1a:d2:63:45:44:38:38:
90:61:e5:4f:6d:f3:7d:61:31:05:fd:91:b2:9c:7b:76:dc:f6:
bd:1e:38:48:7b:b0:48:5d:c5:49:ad:c3:65:88:b3:de:a1:0c:
6f:dd:86:e8:c2:77:f8:f7:e1:5b:b5:f7:92:57:1e:6f:48:f1:
8a:75:6a:50:ab:6a:fc:22:7e:14:69:fc:6a:ef:6a:84:78:91:
51:11:32:e2:f9:82:10:4f:6e:9c:69:38:ee:10:03:4e:20:fb:
3a:71:78:45:00:65:96:09:f3:24:7b:75:da:a2:00:e9:49:70:
c1:66:eb:73:c0:05:f9:f9:a0:a4:bb:c2:8d:80:3b:82:80:8d:
76:f1:af:11:e8:4e:4e:d8:d0:1f:53:f9:97:b0:da:e5:60:66:
21:1f:70:26:12:4c:32:5b:4a:9c:cc:eb:51:10:84:ce:64:5d:
9b:01:bd:bb:4a:16:bd:53:e3:7f:07:2a:9e:a5:2e:7c:66:50:
41:ce:b4:7d:e1:af:34:2c:ff:41:5e:98:f0:11:55:d1:bc:4e:
70:1a:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:28 2025 by rpki-client