Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: ZUbjjsioa9Ggd6vX+CZi4Wyr62mfM1ZHBTG5q7n/aRk=
Subject key identifier: 30:A1:FA:61:84:C4:3C:BE:ED:63:E2:9F:D7:B6:E0:FB:F1:94:23:B2
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0198C6EF2DDAF6805EC302919659C08220D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0D61
Signing time: Wed 20 Aug 2025 10:03:40 +0000
Manifest this update: Wed 20 Aug 2025 10:03:40 +0000
Manifest next update: Thu 21 Aug 2025 10:03:40 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: eivyxxnZtQxMuchG5FBO/9nut1sSe7ed+TpdEJgKK3c=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ef:2d:da:f6:80:5e:c3:02:91:96:59:c0:82:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Aug 20 10:03:40 2025 GMT
Not After : Aug 21 10:03:40 2025 GMT
Subject: CN=30a1fa6184c43cbeed63e29fd7b6e0fbf19423b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:38:24:ec:19:44:07:ca:4e:62:38:9a:90:
75:c1:3a:48:a6:87:e3:90:d1:a0:a8:38:86:f2:eb:
ff:a4:58:7e:54:21:4a:6a:23:c5:00:ca:53:3e:3b:
86:f7:c1:7e:3e:eb:75:cb:25:d7:5b:df:49:49:65:
ce:2f:49:fe:6d:db:52:43:27:88:bc:38:5f:68:87:
d7:f2:90:0e:c7:51:86:65:b2:fc:f6:38:4d:38:84:
8c:4d:d9:44:af:31:e6:06:af:7b:af:5f:83:46:88:
17:f3:50:1a:e8:06:4b:07:50:a5:83:8c:23:b0:5d:
09:88:ae:09:89:5b:71:93:3b:1b:d3:33:c8:7a:17:
ed:e4:dd:da:d6:77:99:8a:1a:e8:e9:3c:86:b0:19:
26:ed:c2:f3:98:7f:89:f5:3f:b3:7d:61:1b:d3:b4:
1b:ab:1e:47:45:ef:2b:02:97:a6:20:2f:be:3d:9c:
aa:9a:c2:8a:34:cc:99:1c:7f:1f:11:e9:15:24:29:
72:89:ab:bd:7d:87:ab:30:b0:83:e5:2f:ad:1a:cd:
93:01:5b:62:03:36:3a:0d:7c:fd:44:31:38:c2:b2:
a0:14:55:27:39:72:10:20:a0:f1:28:91:be:d4:b6:
59:f1:b9:26:d3:7f:11:e6:55:72:88:99:f1:9c:60:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:FA:61:84:C4:3C:BE:ED:63:E2:9F:D7:B6:E0:FB:F1:94:23:B2
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7f:91:a3:8b:b7:d6:b9:9d:cf:54:51:89:78:9c:9e:e6:47:
dc:a4:d1:bb:8f:68:0c:ee:97:8a:d9:98:29:fb:ce:67:ef:37:
52:57:0f:36:2a:55:5a:2f:87:1c:8f:c0:a0:6f:7f:7f:09:c1:
6f:bf:c2:5e:b0:57:30:bf:d2:cc:39:50:18:f0:2d:1d:4e:91:
22:83:8a:9a:d5:c2:7a:07:96:7a:e3:d9:2c:fd:01:7e:a7:36:
3f:2d:ff:a5:cb:31:e9:00:04:67:60:e3:e8:64:00:b5:fc:62:
73:25:c9:87:97:cd:2d:01:6a:1d:e9:93:2d:b9:50:ec:6a:e8:
d5:c0:f4:84:c2:61:74:c5:37:6e:5e:e3:c6:1b:ac:84:4f:10:
57:46:0c:20:78:45:95:81:34:7d:43:8b:3e:80:c7:91:9f:a1:
15:26:6c:52:5f:c8:70:4f:ca:d4:f6:ce:f5:f0:f3:3e:58:25:
31:8d:db:a0:4a:a6:33:2d:fe:0a:00:09:ee:dc:80:c1:4e:66:
49:fb:0e:18:b6:a0:ed:d1:48:a4:0b:95:4f:05:b6:7b:86:da:
86:23:d1:3a:a8:06:df:e0:0b:63:39:96:fd:89:51:44:68:a6:
f1:25:b5:ef:5d:db:31:92:35:11:45:7e:89:24:55:77:a3:1f:
7d:db:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:40:31 2025 by rpki-client