Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: Ed2n2gNgJ1UgHK1zezGHpCnHGE2uArnlCatAuAr79zQ=
Subject key identifier: FC:09:EC:83:CB:3F:4F:34:07:B8:4D:BD:9E:93:2A:80:2B:EE:20:79
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019671F8AFED127E2EE3B9ACC497A4E089AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0C2C
Signing time: Sat 26 Apr 2025 12:00:45 +0000
Manifest this update: Sat 26 Apr 2025 12:00:45 +0000
Manifest next update: Sun 27 Apr 2025 12:00:45 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: 6QfVW6mtunXadcElACzhMVZWwbmrEchml/dRW0lGzAE=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:af:ed:12:7e:2e:e3:b9:ac:c4:97:a4:e0:89:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Apr 26 12:00:45 2025 GMT
Not After : Apr 27 12:00:45 2025 GMT
Subject: CN=fc09ec83cb3f4f3407b84dbd9e932a802bee2079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:3b:3f:d2:23:b3:c4:e3:00:58:30:27:ae:
7f:68:b4:5f:db:6e:b6:01:57:1b:a1:ce:e6:dc:95:
a7:7c:7c:2b:71:c0:3d:f3:43:15:7a:52:f6:ac:78:
67:a3:f4:61:ea:78:2b:fc:d7:e5:78:8a:08:2e:c3:
e5:5f:fb:10:f1:30:92:4f:99:0a:3a:26:80:e6:0e:
08:cb:0f:81:05:78:d9:d9:34:67:65:34:ca:38:6f:
34:93:6f:b5:44:6b:3c:9b:e8:c0:40:cc:ff:49:e0:
08:ae:b7:f1:78:a0:9d:19:a9:39:cd:48:d7:2e:16:
1b:39:88:ee:cf:61:8a:47:d4:da:2d:aa:76:77:7d:
47:f5:38:ba:d6:28:b9:75:f2:de:91:cb:6b:e8:d5:
6e:2c:fd:f0:41:74:6c:56:19:9c:87:39:70:0a:90:
f8:2d:20:39:24:3a:23:03:5f:43:bc:9f:eb:76:e4:
ff:07:60:9e:d2:ce:b7:a7:7b:25:ba:47:d6:3c:28:
f1:cc:4e:cf:9d:e0:9c:a4:c5:c5:78:35:cc:db:01:
cf:a7:6a:5a:8a:dd:14:7e:91:e1:4c:61:4d:c7:b1:
0d:57:03:2a:b3:a2:c6:11:ab:21:42:fd:65:1d:99:
cc:e9:c7:6d:a0:5c:76:e6:4a:45:ad:c2:91:56:b3:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:EC:83:CB:3F:4F:34:07:B8:4D:BD:9E:93:2A:80:2B:EE:20:79
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:05:ba:68:e9:5b:5a:db:3d:94:6d:32:2f:c0:b7:8c:ec:92:
bb:4d:c4:f3:4c:ef:7e:28:2b:95:92:39:8c:20:c7:02:95:ba:
4a:52:cf:57:e6:e5:64:a4:58:c4:2a:f7:75:34:6f:ef:6f:01:
36:0c:59:ab:5e:dc:9f:64:bd:d1:fe:33:7f:7b:c0:3c:d3:0a:
49:75:4a:48:93:1b:90:ab:67:5a:5a:52:fc:c2:06:5a:11:a6:
fb:c3:b5:e9:16:3a:25:b0:68:42:a2:13:18:f1:e8:92:f7:a7:
6d:8c:2d:cd:3c:eb:a4:d6:e5:a6:d7:74:7a:ce:93:42:83:5b:
b9:71:67:d2:76:98:10:f4:9d:b8:f0:ec:52:4c:a4:6b:17:e4:
8d:fa:06:f1:92:48:56:ea:a0:35:93:61:a9:02:1b:59:dc:07:
5e:1c:da:90:5f:9d:80:c6:b9:63:cb:19:1a:0c:d6:52:8f:4b:
80:e6:f5:bb:9c:4a:2d:29:f8:64:27:89:6b:c5:ca:1c:8b:e9:
e7:32:35:2b:62:db:b8:39:71:2f:9e:dc:69:68:81:bf:f8:2d:
7b:8a:33:a1:cb:b7:f1:ce:f3:03:cc:d6:db:47:e6:8a:ae:dc:
df:8d:ee:89:bc:1d:4b:c8:8b:06:9b:a6:ec:02:f6:ea:20:a3:
a1:99:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:05 2025 by rpki-client