Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: T2e/aM1vOO2IPiAyZJkLmknXvPqmeKAcwfHyKBc2Yog=
Subject key identifier: 11:2F:78:08:27:1E:25:A5:EA:6D:D1:28:E2:C7:57:BD:3B:E4:96:BE
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019879AD878010639EEA247C21D09D9AD1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0D39
Signing time: Tue 05 Aug 2025 10:01:12 +0000
Manifest this update: Tue 05 Aug 2025 10:01:12 +0000
Manifest next update: Wed 06 Aug 2025 10:01:12 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: cH4xk82N/MIdSDMsMdEstsk/07sCvxeBN2gBUmZS7ng=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:87:80:10:63:9e:ea:24:7c:21:d0:9d:9a:d1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Aug 5 10:01:12 2025 GMT
Not After : Aug 6 10:01:12 2025 GMT
Subject: CN=112f7808271e25a5ea6dd128e2c757bd3be496be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:ea:81:91:1d:0b:43:fa:90:c4:10:b1:20:
02:fe:b6:dc:26:1c:d2:d7:e6:3b:aa:b9:6a:13:97:
70:40:aa:3b:9e:33:d2:17:8a:91:45:89:36:bd:c3:
38:d6:de:06:46:54:e5:af:2d:d5:14:60:4b:d9:4d:
c2:b7:a6:f6:84:37:fa:a0:27:0e:11:84:5c:bf:fa:
7d:8c:70:24:02:f5:88:e4:fc:cf:bf:95:1f:0c:24:
47:89:b3:f7:9e:0a:33:84:9a:49:12:57:a3:c7:a0:
ff:16:e4:7a:3b:d1:1f:1c:db:36:32:7c:6e:66:14:
78:66:33:a1:6b:fd:1f:19:22:81:9b:b7:47:93:2b:
e5:eb:f9:e0:40:f6:35:c8:5e:34:bb:d5:a4:31:fb:
6b:ac:95:43:e0:23:63:c1:19:2c:8b:39:8b:54:68:
50:4b:d6:a4:39:b6:99:88:cb:ea:f5:2d:50:99:1e:
c1:7a:19:56:9d:e1:b8:ba:67:61:66:b5:cd:3c:f2:
f8:eb:4f:e1:b0:6c:1f:6f:86:a8:e6:51:bf:aa:60:
ea:79:9d:d1:c0:33:27:9e:c1:78:f1:30:0b:e5:18:
61:93:e7:4f:2e:a5:63:85:c0:bd:ed:58:b6:1a:36:
2a:32:71:84:13:a9:40:0b:d2:13:79:a0:d2:f8:e8:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:78:08:27:1E:25:A5:EA:6D:D1:28:E2:C7:57:BD:3B:E4:96:BE
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d4:d2:fb:3d:a5:46:9e:2a:bd:04:14:60:ef:90:51:6e:cc:
f6:c2:f9:e9:42:be:db:8d:f0:9c:db:96:25:f5:a8:bc:94:b7:
92:ee:b5:29:fe:87:92:ae:fd:b5:da:87:42:30:ef:14:8e:7a:
10:37:52:c4:70:f2:40:03:02:ec:2b:e2:25:2f:21:94:ef:b4:
35:84:b7:5e:e4:55:10:6c:ac:01:18:78:d5:93:75:dd:68:e9:
40:e6:74:60:15:db:6e:25:e9:9e:14:a7:96:2d:b4:73:6b:e9:
6b:2a:df:a6:6d:d9:1f:cb:f0:fc:69:43:e5:39:27:a5:0c:24:
dc:03:9d:a7:ef:7b:ed:d2:9d:ea:31:31:35:b4:41:eb:a6:78:
63:c8:8d:6a:ed:82:3c:30:44:42:10:4d:42:79:75:36:a4:6a:
f3:d9:1e:71:6e:e7:b3:70:1e:e3:3c:71:74:2d:96:77:42:b7:
99:c4:bb:d0:f3:ec:ad:32:bd:d4:c0:2a:fc:39:7c:fa:66:86:
72:c2:0c:d4:fc:e8:79:18:88:ed:f0:65:60:37:74:11:c6:26:
ca:80:1f:b2:43:b0:cb:04:35:4a:d6:43:a2:54:35:9b:8f:e4:
00:37:f5:b7:ba:55:f9:39:bd:f9:b8:1e:1a:39:0d:02:f2:25:
ac:0b:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:28 2025 by rpki-client