Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: MfwchnpcTRFRqJhwvslbmigA6Fky4WxW65rZzTpCEOc=
Subject key identifier: F6:AE:61:04:40:D3:D0:FE:8C:97:09:B3:2D:B2:E1:B7:58:82:FA:90
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 01976EF4CDBDDA0CF6AE27AE6706611F0DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0CAF
Signing time: Sat 14 Jun 2025 15:00:26 +0000
Manifest this update: Sat 14 Jun 2025 15:00:26 +0000
Manifest next update: Sun 15 Jun 2025 15:00:26 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: vb13BWc2gDLNIbSxf/WWmZXoIoJwZwYoeBeU5u/y1rk=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:cd:bd:da:0c:f6:ae:27:ae:67:06:61:1f:0d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jun 14 15:00:26 2025 GMT
Not After : Jun 15 15:00:26 2025 GMT
Subject: CN=f6ae610440d3d0fe8c9709b32db2e1b75882fa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:0d:1d:22:18:20:01:4b:eb:5e:8c:f9:36:
c5:7b:35:e4:0c:68:fa:39:08:7e:d5:09:ea:52:13:
30:b3:99:1f:28:c6:3b:65:64:8a:a2:12:ee:00:0b:
0a:aa:0c:63:96:aa:65:98:f7:3e:f2:9f:3a:7a:ff:
ad:e3:e1:60:3b:85:cd:3d:a0:5b:43:d6:be:ae:c2:
55:e6:e1:50:d5:5f:dd:a5:3d:a8:70:13:90:77:15:
c9:86:3a:38:8c:87:3c:80:42:ad:0a:43:2e:d4:8e:
e4:03:60:7f:a1:da:5a:d6:58:18:a8:69:c7:80:5f:
66:5c:fa:84:7a:21:3a:d9:59:8f:cf:6a:19:05:35:
a0:08:99:1d:7c:7d:b4:a8:07:4b:13:23:f7:d0:a2:
bc:3a:22:c8:23:76:43:ee:ed:a0:37:e4:ab:f2:7c:
30:59:7b:31:37:8c:71:ca:9c:df:3b:b9:15:9e:59:
cd:aa:29:e2:0f:91:20:16:dd:89:78:5b:8a:66:06:
a1:9d:ca:a9:80:e6:f5:ed:ae:1e:48:c7:95:80:65:
76:31:64:99:41:2b:2b:8a:0c:f6:4b:b1:94:ac:17:
d3:1b:b3:51:88:22:c0:e4:7a:cd:c9:31:54:6e:5a:
8d:d1:3d:0b:08:12:b2:c4:1c:fa:fa:50:c6:9b:58:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:61:04:40:D3:D0:FE:8C:97:09:B3:2D:B2:E1:B7:58:82:FA:90
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:25:75:40:2a:c6:8e:1c:cf:8b:ec:25:9e:6b:61:64:c8:
2c:fe:ff:35:6d:e6:e9:72:18:66:b0:7b:19:b8:29:97:f0:4b:
70:cc:15:0f:82:29:24:e6:c2:31:ba:1f:0d:b3:3e:ac:23:71:
99:f5:65:63:c5:f8:12:70:29:76:e9:18:f6:af:ec:95:76:49:
33:cb:68:0b:fe:59:c8:36:7a:86:86:2b:b9:6c:56:d7:c1:ac:
51:3b:bd:7f:cf:c7:ea:a8:b4:bf:8f:82:ed:36:c0:4b:f4:c1:
8f:c0:0a:bd:f0:25:d6:10:79:e0:4c:27:ea:e0:fa:c7:8d:1c:
0c:f3:6f:a6:b0:f9:f8:36:d4:14:e8:b4:11:d7:8d:db:0f:08:
44:b4:2e:2b:2b:95:33:00:2c:fc:9c:85:fb:a6:87:28:c9:15:
74:bd:56:6a:a7:a8:f7:94:8b:d0:1d:c8:16:89:86:28:45:c3:
f2:43:50:e7:98:13:c8:dd:67:9a:34:6b:87:3b:c6:89:ef:d4:
7c:b2:1e:5f:15:17:7a:bf:53:f2:ee:4a:96:62:62:07:d2:21:
d4:7d:95:d2:91:65:ec:51:34:25:c6:0b:01:2e:eb:09:10:de:
a3:31:38:8c:d4:d4:e5:7c:54:e8:85:fc:05:40:cd:99:41:35:
7a:bb:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:43:54 2025 by rpki-client