Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: 8SZq4bNsuI0GkzewPoqp6WFz/7drrJ74h26RIAut2mg=
Subject key identifier: 49:4F:20:F4:64:33:31:A0:BB:F2:A3:D8:C3:F8:A7:F1:26:80:91:5B
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0194C46330261433518E03F34433A9642AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0B4E
Signing time: Sun 02 Feb 2025 02:00:21 +0000
Manifest this update: Sun 02 Feb 2025 02:00:21 +0000
Manifest next update: Mon 03 Feb 2025 02:00:21 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: NXBz/nd5Icaqqg01jJN+4dvdw9DZzqvWFjj7B9j4FX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:30:26:14:33:51:8e:03:f3:44:33:a9:64:2a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Feb 2 02:00:21 2025 GMT
Not After : Feb 3 02:00:21 2025 GMT
Subject: CN=494f20f4643331a0bbf2a3d8c3f8a7f12680915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:53:c2:fd:f3:9f:80:e0:29:72:54:f9:79:
ce:ef:c2:1a:5f:04:12:f0:09:7f:22:42:58:6e:d3:
4a:53:b2:9a:47:da:61:e2:48:07:f9:17:7e:da:79:
73:00:5e:e3:61:34:78:71:54:ab:6c:de:b1:37:f7:
f4:bc:fc:ff:4f:19:a2:10:fa:dc:ee:09:eb:73:07:
61:46:27:4e:12:e6:16:0e:31:cf:9b:6c:8b:e1:24:
35:9b:cf:f7:26:71:d1:4d:fb:13:60:06:62:1f:07:
05:6f:ea:2d:ec:32:ce:29:74:0e:6c:7e:e6:94:c2:
53:ff:10:80:50:03:71:89:2e:80:af:9a:4b:f5:00:
1b:b9:74:68:1e:6b:2c:0f:d4:f8:62:9d:83:31:15:
16:59:4a:34:bd:1b:0f:0f:78:1c:c9:c8:92:0e:36:
08:04:62:4e:32:f9:22:cd:a4:46:99:8c:5f:76:e9:
3b:af:41:5d:f8:69:58:41:6b:9a:cc:fb:f6:92:5f:
d2:03:40:c2:9d:95:2d:4c:81:69:6e:cb:5b:e6:17:
9a:ce:00:3f:c5:e5:dc:60:ee:6e:e6:54:c7:17:20:
1e:e6:a2:64:e8:0e:fa:93:d4:0f:20:08:38:64:3e:
35:d2:9a:be:ed:17:35:32:9f:07:f9:bf:12:ed:49:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:20:F4:64:33:31:A0:BB:F2:A3:D8:C3:F8:A7:F1:26:80:91:5B
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:e1:b2:4b:03:fd:c7:65:67:1a:53:39:37:3a:6c:2a:08:
60:db:ba:12:a1:44:26:91:0f:1a:8f:52:76:ed:26:62:ba:74:
1d:3b:e1:68:90:76:e8:c6:97:b1:a7:76:1c:93:f6:50:c3:46:
fd:2e:e5:e7:0e:d5:80:34:dc:33:58:88:6d:67:18:7e:65:86:
1b:0d:33:8a:d4:3b:e4:de:a8:3b:7c:04:fd:e3:e4:28:f6:c6:
d6:fc:a3:67:49:48:1b:d4:54:58:ef:b3:78:3d:0c:f2:16:8e:
7a:59:be:e5:90:b2:46:08:11:84:e2:f7:ad:e4:14:a9:9f:2c:
cb:57:2f:86:a0:f7:db:16:57:02:20:e2:34:43:5a:31:64:1e:
95:0c:8e:ea:fb:e5:89:14:32:74:6c:6e:e4:d5:ca:ef:c0:b2:
ab:ec:db:52:78:70:fd:82:5d:c1:94:8b:a1:3f:89:d7:ae:4b:
a3:86:d2:76:23:15:b2:03:84:c9:c9:eb:7f:d0:53:64:50:c6:
9c:0b:16:83:66:cd:f3:7a:d9:38:ef:31:4d:91:d8:54:af:4c:
9c:ab:41:e4:74:3a:b1:e9:d9:7e:b5:aa:4c:4d:7d:29:ef:58:
ff:48:17:3e:e2:b4:2d:90:51:71:88:ec:d5:d6:ac:2e:a1:8a:
97:65:a1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:32 2025 by rpki-client