Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: JtyMMJ0tPQoSyrHkb6e16ZBS029bDDkI8n5D2a8plFU=
Subject key identifier: 42:27:13:90:93:6E:36:F2:13:A5:B3:C7:7D:0B:6C:1D:99:23:E0:64
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 019747796040A8E44D38305E7BCE0EB10A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0C9B
Signing time: Fri 06 Jun 2025 23:00:26 +0000
Manifest this update: Fri 06 Jun 2025 23:00:26 +0000
Manifest next update: Sat 07 Jun 2025 23:00:26 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: x/JWDXnr632NG/feHBWK4g9EcpHasTsYx6WRdsLubcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:60:40:a8:e4:4d:38:30:5e:7b:ce:0e:b1:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Jun 6 23:00:26 2025 GMT
Not After : Jun 7 23:00:26 2025 GMT
Subject: CN=42271390936e36f213a5b3c77d0b6c1d9923e064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:36:a3:05:0a:4b:45:5c:2a:e4:d3:72:71:
04:32:15:fb:6a:4e:e2:b3:b7:1b:2d:f5:43:42:0c:
7e:ad:6b:3d:d6:49:61:a0:6a:e9:fb:51:55:1e:51:
93:bd:4d:66:b9:00:7b:57:5d:20:67:16:7f:3f:8c:
14:ad:ee:13:a4:72:b8:97:e8:0c:e6:27:17:58:c4:
ce:7f:d5:21:7b:da:49:cb:c7:4f:25:2f:6f:3a:63:
7c:0e:8e:64:12:1f:8c:71:d7:b5:c6:ee:05:67:8c:
a2:bb:3f:4c:95:e3:bf:49:3c:6b:07:ed:bc:4c:00:
11:64:91:8a:f8:b3:3c:93:f6:5b:c1:c5:cc:af:33:
38:e0:65:1e:17:53:fc:f1:57:4e:7b:7e:ce:5b:d8:
d5:cc:90:ff:46:5f:c4:1b:b1:f5:e5:de:99:92:54:
f1:5a:53:50:56:9d:80:c3:f0:38:0e:ca:a4:24:a1:
01:16:e0:8b:60:6d:74:19:a5:a1:7c:bb:d6:b5:57:
04:34:3f:26:61:ff:ad:8c:fb:26:10:90:18:d9:c2:
5c:2f:4b:53:8d:8e:6f:23:72:bc:c2:51:fc:9c:68:
49:e7:eb:74:da:80:d3:2a:1a:5f:d1:1a:d7:05:05:
fc:0f:d2:d9:82:4f:f6:c4:8d:0a:7b:b5:1a:76:31:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:27:13:90:93:6E:36:F2:13:A5:B3:C7:7D:0B:6C:1D:99:23:E0:64
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:8e:a4:74:51:ac:2c:c9:52:92:8f:57:f7:be:ec:08:51:
e2:d0:e5:49:fb:e7:6d:ef:de:ee:a3:27:34:64:1a:87:0a:08:
9c:27:8d:3c:0a:5b:e6:3d:7f:b2:1a:ba:03:d7:e3:85:58:55:
48:0e:a0:91:a3:81:17:c7:08:87:93:c2:0e:64:9d:c1:45:4b:
5f:fb:11:8a:87:5d:25:91:db:51:7b:de:ee:08:d8:f5:5c:78:
c6:a0:d8:ec:11:95:f6:9b:86:40:1d:f3:0e:d8:f5:07:52:49:
41:06:a6:7a:cb:e4:cc:f6:83:e5:9f:56:d4:0b:c7:02:3e:84:
2e:d0:cb:df:be:0c:f3:be:bd:0c:d4:cf:d9:1c:a9:87:ef:24:
46:bb:18:11:fd:5c:1d:0d:ff:78:9b:98:fb:34:23:2c:a3:46:
ff:c2:04:e0:d2:79:03:75:8e:86:6e:71:6f:8f:0b:b4:17:36:
3b:72:d5:f3:06:8a:7d:1c:35:23:a3:e4:c6:61:cc:a7:70:cd:
1d:26:1d:c8:f8:17:aa:f2:68:f3:d1:d4:b9:41:49:d2:9f:71:
24:51:0c:74:3f:46:b2:fd:8d:0d:35:ff:29:6f:3d:f0:e3:8c:
df:1b:f9:a4:c7:ab:13:d9:5f:00:ee:e4:12:b0:7a:74:00:7f:
4c:04:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:25:59 2025 by rpki-client