Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: Kf6Bnw1jzCFw+whPL1S4l/q49hkkSQYZyrwOs8lJWCg=
Subject key identifier: 3C:F5:0C:C2:93:80:2E:E5:6B:82:FC:E2:50:13:7C:35:45:8C:4D:8F
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0199FBEBA6305F8CF17A52AC9470BDC24595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0E01
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: j54jmP6M7MklF/pnkQLOGhlqwiF5LSkgW9GJcsaHigY=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a6:30:5f:8c:f1:7a:52:ac:94:70:bd:c2:45:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=3cf50cc293802ee56b82fce250137c35458c4d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:ca:4e:27:a2:53:96:d7:ec:00:70:bb:84:
13:d1:aa:a3:48:e7:47:c1:61:e1:c2:03:94:f6:d0:
ce:5e:26:7d:68:c2:dd:c3:0a:27:06:21:f2:8d:52:
e6:c7:33:1f:31:3b:96:3e:89:1a:32:ed:cf:63:88:
8d:ee:e5:3e:b5:89:67:1c:9c:9b:86:7d:5b:31:8a:
58:6a:84:1f:f8:bc:92:8e:38:ec:16:b1:24:47:50:
d9:5b:a4:b0:e4:c5:9a:21:13:5f:47:1e:2e:e5:e6:
09:bc:4f:19:ab:8a:6c:46:79:d1:7c:a7:4b:7f:a1:
be:67:7e:cb:36:00:b1:ff:2a:37:d3:bc:6f:68:9d:
58:fc:02:1c:da:88:84:a5:ae:e5:8e:6c:80:5c:14:
49:4b:99:0f:93:57:3c:ed:e1:e2:78:d8:2d:68:c7:
22:4f:fc:27:b6:38:95:37:33:9c:33:92:10:b0:3b:
8f:4d:73:39:3d:05:7c:6e:41:95:39:6d:74:1c:b0:
02:8a:f4:3d:7a:73:db:d0:c8:0b:31:72:3f:25:26:
8b:ce:87:f9:d8:42:c7:01:2e:5d:d4:a2:e5:21:6d:
3c:4d:f5:db:96:f9:da:bc:3a:89:27:b4:87:cb:d5:
a5:de:65:b5:15:d4:8a:00:23:30:33:56:51:fb:93:
8b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F5:0C:C2:93:80:2E:E5:6B:82:FC:E2:50:13:7C:35:45:8C:4D:8F
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:ca:f4:5e:93:b2:db:63:6b:98:6d:78:e1:95:c7:c6:78:
0a:1e:0d:b5:73:41:f2:29:1a:27:23:67:82:8d:49:40:76:a1:
4b:c2:c2:13:19:a2:55:0f:93:e0:89:c4:f3:fd:41:b8:62:d1:
5b:d5:a9:06:76:28:32:30:aa:46:3d:06:f5:c0:ea:de:56:37:
4d:98:78:8e:c2:70:5f:3f:22:f9:c0:95:11:10:4c:ac:8e:cf:
f3:44:23:dd:f3:da:bf:28:e3:c9:02:08:37:6d:9b:e2:f8:b0:
bb:34:4e:6c:ad:d2:bc:43:86:cf:9b:aa:6a:0a:32:79:6c:29:
6e:33:5e:1d:0b:88:89:01:ec:ba:b4:ea:ea:49:2a:ca:e0:98:
bb:24:cb:8c:21:04:a0:d2:56:f9:c7:29:e2:7f:d4:61:6d:a3:
f9:4f:84:0d:fb:55:c1:97:cc:5c:bd:8f:7a:70:e0:74:b3:c1:
b4:62:d2:d6:3f:f9:0f:03:f3:57:00:d1:d1:aa:88:9c:ce:6a:
ab:92:b0:9d:09:bb:30:9e:66:b2:e8:36:14:ec:68:99:37:c0:
b6:66:72:94:06:bb:cc:9e:ad:d9:c5:96:98:8a:f2:92:74:c7:
8a:d1:02:24:f5:ec:d1:51:cf:8e:ec:15:95:fe:2b:4a:4a:66:
58:c1:39:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:02 2025 by rpki-client