Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: 66qdIofkOCZj7KPP/fN6ZAQVH3jh0Piy+wpeFhLKm0k=
Subject key identifier: ED:EF:BA:F1:70:4E:8A:8C:F7:84:47:E1:D0:65:78:EC:55:B4:C4:08
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 01969E6388957E2BBBF678067ABD74B172A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0C43
Signing time: Mon 05 May 2025 03:00:45 +0000
Manifest this update: Mon 05 May 2025 03:00:45 +0000
Manifest next update: Tue 06 May 2025 03:00:45 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: MlrH5qmV1FcWJRRTZWsroLT4vV5O6jwqmuGdlXw8e5A=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:88:95:7e:2b:bb:f6:78:06:7a:bd:74:b1:72:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: May 5 03:00:45 2025 GMT
Not After : May 6 03:00:45 2025 GMT
Subject: CN=edefbaf1704e8a8cf78447e1d06578ec55b4c408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:de:2a:86:ba:a2:98:b9:03:01:bd:e3:d7:
88:8a:14:db:5a:9a:ab:1b:c3:b6:2c:18:a2:6a:78:
64:83:1b:20:35:ee:26:a7:a6:58:51:3a:ed:18:ac:
d7:92:54:22:03:14:cb:31:7d:c7:af:6c:c2:84:a6:
01:bf:ba:fe:28:28:19:49:54:06:e0:56:db:0e:18:
67:dc:92:cb:59:bc:51:6e:6f:db:25:58:cc:f5:d8:
d7:44:78:47:c6:2b:84:93:46:7f:cf:82:77:d1:0b:
a5:cd:25:ae:fa:8c:bb:9d:df:13:77:ab:4f:96:9e:
c6:e8:2b:92:9a:38:ca:a6:34:5c:93:98:05:c6:9f:
9b:9a:17:42:c0:99:2d:27:ff:8f:b9:0c:7c:2e:dd:
49:6e:2d:a3:f0:4f:a2:b1:77:bc:44:78:2a:ea:06:
23:77:09:48:db:68:b2:dd:cd:0f:1f:b1:0d:e8:47:
22:a4:48:71:c3:40:89:9a:a9:2c:3f:32:bb:61:4e:
81:3c:2d:c5:80:8d:ec:49:db:78:e0:cf:13:2d:fc:
07:ed:a6:fe:06:fb:99:ea:d9:7d:17:92:00:47:d1:
f3:9c:bd:ce:0c:c6:fa:5f:38:5c:d3:be:3e:2d:3a:
bf:18:0e:e5:eb:f5:1f:b5:b0:2a:66:85:a4:f9:fa:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:BA:F1:70:4E:8A:8C:F7:84:47:E1:D0:65:78:EC:55:B4:C4:08
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c5:c2:44:36:ae:af:1c:65:34:6b:5d:61:84:58:61:13:9f:
0b:62:15:0d:f0:21:4d:a3:96:2f:47:06:1a:1c:53:01:b6:a6:
08:67:0d:d3:12:06:57:a8:9f:25:2a:f0:6c:92:55:b4:58:91:
e8:c9:be:dc:46:92:e3:44:dc:8e:b7:09:12:61:5e:c5:f0:23:
d3:a9:07:fa:0f:98:51:21:1b:a0:9b:39:36:df:53:df:d4:9c:
9b:38:6d:3c:1d:25:f7:fb:e9:51:11:c8:a8:c3:f2:d9:8a:20:
05:d4:2d:d5:5e:47:d4:44:ee:05:4b:e8:94:01:05:11:aa:f5:
20:d7:a3:1c:1f:76:f6:ad:71:e9:e7:82:16:40:ee:9d:21:32:
3c:3a:73:1e:d6:5f:75:cc:65:60:4b:90:c6:23:49:1c:c5:9c:
04:ac:06:9d:3a:8e:32:2d:7d:e9:9d:d8:31:65:63:e9:ce:44:
e4:18:91:27:92:59:8a:28:57:51:a0:e7:4d:14:0f:ae:fd:8d:
41:81:9c:d9:12:a4:71:0a:5a:f6:92:b6:db:81:61:56:2d:55:
67:29:17:71:95:4e:ad:2b:db:c7:b8:00:ae:21:b5:64:89:c8:
68:2a:27:e9:8e:e0:9f:ad:66:6b:38:84:ed:a1:29:a3:96:5f:
70:99:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:09:43 2025 by rpki-client