Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: CtkRIwQdOGLJUVTtdqOPgNHJNS4J3FHteb38n1vOBuc=
Subject key identifier: AB:8B:D3:4E:71:E2:53:B2:A5:0C:D3:C4:14:34:20:B8:61:18:4C:D6
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 01974A439ACD843831D914E5FD5A0EC2D061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0C9C
Signing time: Sat 07 Jun 2025 12:00:33 +0000
Manifest this update: Sat 07 Jun 2025 12:00:33 +0000
Manifest next update: Sun 08 Jun 2025 12:00:33 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: cXzaBSTTMnXMgFsmpuycImwQu3gJgN4kC2L2aXWeSQY=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:9a:cd:84:38:31:d9:14:e5:fd:5a:0e:c2:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jun 7 12:00:33 2025 GMT
Not After : Jun 8 12:00:33 2025 GMT
Subject: CN=ab8bd34e71e253b2a50cd3c4143420b861184cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:8a:36:6a:85:11:52:08:dc:46:e6:72:7e:
45:24:96:78:ec:82:b6:a2:8d:04:0d:4c:b8:e8:0c:
ee:65:0d:b0:54:44:77:7c:59:3e:5b:49:51:37:a8:
9c:4f:0f:09:35:6e:1b:66:9a:81:43:d6:da:bc:10:
0a:01:35:7b:a6:47:48:71:9b:60:22:07:ee:33:d8:
01:fe:41:33:63:1b:48:7d:b2:a1:e3:04:6f:cf:95:
98:91:7c:25:5c:db:dd:9d:fd:51:6a:fe:51:7a:ac:
8b:ee:79:ea:8b:95:a8:8a:12:6e:d6:e2:5e:c8:50:
11:4a:20:fd:03:bc:b2:1a:b4:48:c8:3c:9a:59:ca:
f0:3d:e0:b9:e4:e0:ed:26:f7:75:05:5c:12:dc:28:
22:93:2f:8e:52:4b:33:76:d8:78:cf:ef:df:2f:61:
8a:89:9a:46:94:c7:65:e3:28:a2:99:bf:79:79:c6:
85:b5:68:a5:8a:f5:c7:e5:1a:2f:f9:61:42:80:b6:
0a:ea:16:ff:09:8c:db:30:a8:7c:48:b9:30:f0:20:
c6:fa:4f:5d:26:50:5a:71:57:f9:7e:1e:b1:52:d8:
2e:c9:aa:b4:87:d6:7a:d5:60:bd:91:03:4b:b9:ab:
bd:98:43:db:d6:5d:47:92:17:f2:57:98:ea:e6:53:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:D3:4E:71:E2:53:B2:A5:0C:D3:C4:14:34:20:B8:61:18:4C:D6
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ea:1d:51:7f:00:4d:7a:bd:8e:fe:7d:5c:84:00:1a:76:dc:
f0:e9:59:48:b1:2b:7e:60:e2:9b:f2:50:68:12:67:ed:25:5e:
fe:44:9a:1e:07:bc:dc:db:de:84:a5:c4:a9:94:a4:72:ce:8a:
22:e5:fe:16:99:d2:93:9d:d5:79:d5:94:35:b1:c2:0d:3d:f5:
e5:7d:6d:5a:03:a7:24:55:d5:92:72:12:fa:29:e5:3d:80:81:
cd:a0:8d:45:41:53:31:60:5d:ef:0d:ba:e2:98:6c:5e:cb:b3:
08:9e:9c:10:b1:ff:20:b0:3c:8e:f5:4b:76:da:a5:15:de:77:
55:dd:c2:69:76:7d:76:e7:c3:3d:b5:35:10:49:df:43:eb:45:
f9:3d:5e:09:d9:03:a2:35:a0:0f:28:f1:8d:f7:99:ff:ea:d0:
55:f5:de:39:31:3e:0b:90:58:11:a6:1f:11:45:70:bd:73:dd:
57:ec:40:6c:e8:4f:61:a1:84:e1:50:64:03:29:69:16:b6:eb:
30:0e:07:e7:23:4d:30:79:e3:11:79:05:13:3e:f0:d5:45:5e:
7e:fc:f9:0e:cf:53:e5:36:95:6e:58:75:8d:09:c7:f3:bf:1d:
b3:84:db:de:f9:1e:8f:25:42:2b:4c:05:e9:6f:5e:c9:67:e2:
28:79:be:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ5rNhDgx2RTl/VoOwtBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2
OWIzZjUwHhcNMjUwNjA3MTIwMDMzWhcNMjUwNjA4MTIwMDMzWjAzMTEwLwYDVQQD
EyhhYjhiZDM0ZTcxZTI1M2IyYTUwY2QzYzQxNDM0MjBiODYxMTg0Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGGKNmqFEVII3Ebmcn5FJJZ47IK2
oo0EDUy46AzuZQ2wVER3fFk+W0lRN6icTw8JNW4bZpqBQ9bavBAKATV7pkdIcZtg
IgfuM9gB/kEzYxtIfbKh4wRvz5WYkXwlXNvdnf1Rav5ReqyL7nnqi5WoihJu1uJe
yFARSiD9A7yyGrRIyDyaWcrwPeC55ODtJvd1BVwS3Cgiky+OUkszdth4z+/fL2GK
iZpGlMdl4yiimb95ecaFtWilivXH5Rov+WFCgLYK6hb/CYzbMKh8SLkw8CDG+k9d
JlBacVf5fh6xUtguyaq0h9Z61WC9kQNLuau9mEPb1l1HkhfyV5jq5lOTmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuL005x4lOypQzTxBQ0ILhhGEzWMB8GA1UdIwQY
MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt
NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2
LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOodUX8A
TXq9jv59XIQAGnbc8OlZSLErfmDim/JQaBJn7SVe/kSaHge83NvehKXEqZSkcs6K
IuX+FpnSk53VedWUNbHCDT315X1tWgOnJFXVknIS+inlPYCBzaCNRUFTMWBd7w26
4phsXsuzCJ6cELH/ILA8jvVLdtqlFd53Vd3CaXZ9dufDPbU1EEnfQ+tF+T1eCdkD
ojWgDyjxjfeZ/+rQVfXeOTE+C5BYEaYfEUVwvXPdV+xAbOhPYaGE4VBkAylpFrbr
MA4H5yNNMHnjEXkFEz7w1UVefvz5Ds9T5TaVblh1jQnH878ds4Tb3vkejyVCK0wF
6W9eyWfiKHm+6A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:04:32 2025 by rpki-client