Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: 7NxnhsuxW59DCkCwL3VWb3/GBTAVpFChkFckUaZlKLY=
Subject key identifier: C7:02:62:1D:46:A6:6D:2C:82:37:B3:A4:7E:73:E9:25:AE:AB:B9:73
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 019603E503BE8BA84EF47D2982976EF70CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0BF3
Signing time: Sat 05 Apr 2025 03:01:02 +0000
Manifest this update: Sat 05 Apr 2025 03:01:02 +0000
Manifest next update: Sun 06 Apr 2025 03:01:02 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: cFZy7QLIukd5qUTQD9see5nInuveldgcu0lZW5u0qb8=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:e5:03:be:8b:a8:4e:f4:7d:29:82:97:6e:f7:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Apr 5 03:01:02 2025 GMT
Not After : Apr 6 03:01:02 2025 GMT
Subject: CN=c702621d46a66d2c8237b3a47e73e925aeabb973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:76:3a:51:45:14:74:c9:54:9d:51:d5:c5:
77:26:a1:f2:2a:c4:f6:e3:54:75:a9:fe:ab:56:52:
21:b2:90:f5:17:df:57:0f:dd:40:54:2f:71:08:20:
2d:67:1d:7c:97:81:ee:e6:72:83:a8:06:ef:eb:e1:
ae:67:e6:86:e2:24:8c:a9:79:14:fe:df:1b:8b:10:
97:b2:65:fe:1d:f6:82:c8:67:cc:0c:bd:ef:ad:a1:
89:7c:18:9d:04:8e:d3:0c:4a:6f:46:0f:d5:94:e4:
30:ce:f2:ba:9d:b4:13:02:2d:88:ba:a8:65:f3:1d:
b2:5d:95:22:61:e3:c9:0e:0d:b0:9a:96:6d:cc:f8:
5d:6f:80:0f:5e:51:9c:3c:30:65:99:1b:fb:fa:e0:
a4:49:ad:4e:dd:64:85:e9:ed:ce:e1:92:0d:65:16:
05:e5:cd:33:ec:06:54:63:48:ce:3c:47:cc:5f:6d:
aa:d6:44:40:88:33:1e:0c:97:d0:9c:4b:1b:03:23:
00:e4:76:93:34:84:46:a2:66:76:7a:90:0e:af:75:
42:4a:57:ed:59:15:e1:dd:68:7a:f1:18:69:83:53:
2a:fa:03:0f:d3:bf:4e:84:fe:c3:83:1b:4f:8b:59:
8a:67:44:28:05:63:4d:a1:55:78:f7:24:4f:23:cf:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:02:62:1D:46:A6:6D:2C:82:37:B3:A4:7E:73:E9:25:AE:AB:B9:73
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:c3:51:7f:65:71:39:dd:de:d1:fd:7a:88:5a:a2:1b:f4:
01:c8:28:77:9a:0a:5f:fd:08:53:fc:0f:98:9c:0c:28:4c:19:
bd:9d:e3:37:38:78:ae:f6:48:5a:64:1d:30:6d:b1:3a:5b:4c:
8d:3b:f1:0b:46:73:d3:49:71:79:f6:63:55:0e:c9:01:45:6e:
d3:fd:cf:4a:8c:4e:fb:2d:33:de:83:db:85:57:05:0e:7f:8a:
f9:1c:6f:7b:92:41:78:fb:20:66:e7:1e:03:8b:cf:1b:14:b6:
19:17:ed:2a:f8:e5:67:8b:15:95:da:28:11:39:9a:5d:21:ff:
73:6b:58:0a:a7:92:26:88:05:44:32:7a:c2:11:be:28:16:9d:
4a:cb:77:4d:2c:d5:41:7b:04:53:29:ca:70:d0:91:42:9c:42:
fc:35:c4:00:56:2e:d6:24:f2:31:42:00:e6:32:c1:1a:0d:f5:
f1:11:c2:d8:6b:9b:6a:db:e8:80:f6:41:84:b3:3d:2b:0e:a6:
c5:e6:ee:08:49:36:5b:44:9e:93:19:53:2b:c7:09:89:2b:fb:
00:ff:44:19:dd:ff:8c:84:16:05:09:ae:35:2d:29:77:cd:30:
64:1d:2b:94:95:85:31:7e:55:5e:71:9d:4b:35:66:54:61:d7:
c9:14:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:43 2025 by rpki-client