Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: qEdlDr5v5ozWLGNgUr5j7NxpZP7zZGmB16NuaVMHXbc=
Subject key identifier: 8B:9E:D6:AC:C0:EA:1A:4C:33:0F:2C:F0:49:96:3F:45:FF:76:DC:0D
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 01984A40F9F9E3AC383C617EF609C99D6152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0D21
Signing time: Sun 27 Jul 2025 05:00:28 +0000
Manifest this update: Sun 27 Jul 2025 05:00:28 +0000
Manifest next update: Mon 28 Jul 2025 05:00:28 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: w6zne/qxDBgw4zrcXbg8+Ow29Or7sC52bDUg0gDCIkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:f9:f9:e3:ac:38:3c:61:7e:f6:09:c9:9d:61:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Jul 27 05:00:28 2025 GMT
Not After : Jul 28 05:00:28 2025 GMT
Subject: CN=8b9ed6acc0ea1a4c330f2cf049963f45ff76dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:92:b3:c1:0e:7e:b3:aa:fa:b9:e6:b7:95:
76:75:0c:4f:cb:da:31:4f:d4:2b:e4:55:d9:e7:b2:
f7:e4:92:14:4d:b5:52:28:db:e0:07:c6:d5:c2:2e:
44:70:cb:6c:68:69:dd:7b:9f:bc:71:e6:c5:45:c3:
14:4e:53:b8:50:da:2a:7b:5f:bc:52:cc:f9:2b:30:
e4:21:e9:e8:aa:a9:98:84:e0:41:13:1d:24:ab:a1:
a7:8e:51:d5:a7:a8:e1:25:03:ac:a8:a0:a9:95:34:
6d:bb:4e:54:2f:3b:ec:fd:d9:ed:a6:c4:5d:cc:ec:
e1:12:5f:9a:ad:74:2d:96:af:fa:49:88:36:a0:c5:
5e:5b:c7:a6:a9:63:c0:47:10:57:7a:25:2f:54:c9:
81:00:7a:ca:ae:7d:f0:25:f2:3f:d3:74:12:ce:5f:
d5:7c:73:37:a5:36:0d:44:ce:af:fb:20:66:a6:d3:
a5:52:fd:7a:ed:48:73:8a:cb:a0:9b:98:c6:59:00:
a7:83:88:55:4a:5e:53:e4:ec:c8:26:f6:be:37:9e:
bb:11:fd:96:4c:c8:8e:1a:c6:46:12:a7:36:75:8e:
7b:73:36:d3:97:e8:62:13:33:34:b5:23:ee:92:f9:
74:26:81:83:fc:b4:21:de:a9:2a:01:79:3e:f4:72:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:D6:AC:C0:EA:1A:4C:33:0F:2C:F0:49:96:3F:45:FF:76:DC:0D
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:91:8f:32:18:d9:8e:99:b8:20:1f:f7:2f:bb:c7:78:e3:87:
7d:41:d9:32:87:e2:95:02:37:16:7f:47:a2:07:13:e6:1a:ad:
48:85:39:12:38:0b:09:d9:b5:9a:45:1d:91:f9:ff:56:18:76:
c5:ef:95:ef:16:3c:46:9e:35:c7:af:08:7d:93:5e:ae:07:8e:
98:fb:8d:9d:14:8a:b6:ca:96:8b:79:6f:00:4f:20:62:c0:9a:
58:88:04:4c:b7:11:67:61:da:52:82:ef:75:43:4f:01:d1:39:
98:7a:30:ff:6d:c3:c6:c3:70:73:59:b2:28:da:04:0e:2e:bc:
19:76:e7:87:48:9e:20:7f:f4:0e:cd:8f:38:25:b1:23:0e:d7:
00:e0:63:65:dc:3b:97:2b:89:38:2f:9a:a7:29:ba:a4:7b:13:
d2:90:73:6b:bb:37:88:af:75:00:8e:62:04:d8:aa:c3:63:7c:
7e:e5:2f:7b:b3:29:83:12:f7:31:03:16:f3:92:ea:81:3d:fc:
19:ab:e5:fc:cf:b8:94:1a:7b:57:ae:97:22:e6:dc:86:14:99:
ef:2f:e3:dd:2b:72:1d:1e:ca:5b:9b:02:3c:e3:42:34:72:75:
05:8e:94:53:5b:8b:a5:21:75:05:26:5e:f5:27:f8:76:68:2b:
f4:4e:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:58 2025 by rpki-client