Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: rDm/kikX17whSOgaoxo80j0d/uk03hwI0964qyIXFTQ=
Subject key identifier: 32:4E:62:6B:B6:89:4D:3B:A1:45:B1:12:89:03:58:54:E1:E6:3D:25
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 019931FF3DA5885FF5DC375D378575F05C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0D99
Signing time: Wed 10 Sep 2025 05:00:34 +0000
Manifest this update: Wed 10 Sep 2025 05:00:34 +0000
Manifest next update: Thu 11 Sep 2025 05:00:34 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: 4t3NhXy7QWkU8tvSlWllxshF8AOpgGzUk2H1ThdGoPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:3d:a5:88:5f:f5:dc:37:5d:37:85:75:f0:5c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Sep 10 05:00:34 2025 GMT
Not After : Sep 11 05:00:34 2025 GMT
Subject: CN=324e626bb6894d3ba145b11289035854e1e63d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:21:7f:5a:b1:97:de:9f:33:55:08:15:02:
56:95:26:36:1d:f8:c0:f9:11:b7:f9:76:80:a8:2a:
9f:d6:e2:80:50:a9:35:b6:d0:7d:ea:dd:db:52:59:
4e:47:2e:b7:be:1d:d9:37:ae:49:0e:86:3e:84:60:
a7:02:e8:70:0e:c0:36:59:fe:02:1e:e7:f6:73:95:
6e:35:33:78:8e:db:f6:c1:94:d5:6b:f2:96:e8:ab:
2b:84:f9:bf:18:e5:7f:a0:88:ba:6d:77:90:82:34:
2d:47:bc:40:5d:79:da:10:d7:0e:a0:8e:66:93:7f:
08:36:bb:78:36:68:66:f9:22:0c:1b:5c:f3:93:8c:
3c:b6:f0:8f:d2:29:c9:1a:65:9a:0a:4a:7c:dc:23:
0b:5f:cb:d3:be:f5:dd:36:69:b7:de:58:55:d7:4f:
27:6e:72:d6:3c:f2:49:9d:74:4c:3a:b4:9f:95:f1:
d5:bd:c5:07:a0:27:01:25:89:31:07:c3:ef:58:d2:
4f:55:f4:2b:33:56:99:34:a5:51:f6:30:61:89:c6:
bf:7a:a6:4b:8a:08:2f:8c:74:f9:5d:72:cc:c6:4f:
70:1d:4b:3e:1d:07:83:9f:fb:6f:97:de:bc:d8:ea:
92:98:d5:d2:ed:55:61:b2:40:88:92:f5:c1:58:4e:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:62:6B:B6:89:4D:3B:A1:45:B1:12:89:03:58:54:E1:E6:3D:25
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:01:b3:62:13:8a:32:a0:41:6b:f6:79:bc:84:85:56:1f:
d7:51:ad:6d:a6:8f:d5:67:42:d0:27:50:e6:86:1f:98:11:0e:
6e:5b:6f:2c:6c:31:79:5a:02:30:a7:ca:3c:6a:90:f1:cb:2a:
52:d8:3f:d7:df:93:d8:d6:01:23:34:d2:98:22:1e:63:6c:e6:
50:fe:30:93:74:43:c7:8b:8e:e0:3d:6e:5f:af:9e:10:43:3c:
9d:af:d8:c5:ab:f8:0a:83:f2:79:3f:a3:e0:19:d5:20:b3:71:
8d:f9:82:75:0a:67:85:0a:86:33:f5:f7:15:a8:f2:33:cd:87:
7a:99:92:e8:a6:76:cb:1f:15:86:bb:2e:6d:91:34:d0:0b:3a:
1d:81:b2:76:6d:b5:aa:88:cf:2e:ec:0d:55:74:29:ef:19:34:
a9:04:04:31:f3:fe:de:ef:3f:22:2c:2d:92:53:25:a6:e4:a9:
a7:04:4d:40:d2:94:86:ab:64:47:b0:43:5c:92:d5:83:27:bb:
b4:5d:51:bd:df:4a:6a:fd:a9:cc:b1:a0:75:29:e4:4a:47:6a:
9c:a4:61:b7:a8:dd:3d:eb:a2:04:34:1a:08:38:0a:09:1f:dc:
70:63:e5:06:65:29:92:ee:2b:1e:17:e0:7d:91:71:e2:a3:7d:
ec:a0:eb:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkx/z2liF/13DddN4V18FyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4
MjlkOGUwHhcNMjUwOTEwMDUwMDM0WhcNMjUwOTExMDUwMDM0WjAzMTEwLwYDVQQD
EygzMjRlNjI2YmI2ODk0ZDNiYTE0NWIxMTI4OTAzNTg1NGUxZTYzZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXQhf1qxl96fM1UIFQJWlSY2HfjA
+RG3+XaAqCqf1uKAUKk1ttB96t3bUllORy63vh3ZN65JDoY+hGCnAuhwDsA2Wf4C
Huf2c5VuNTN4jtv2wZTVa/KW6KsrhPm/GOV/oIi6bXeQgjQtR7xAXXnaENcOoI5m
k38INrt4Nmhm+SIMG1zzk4w8tvCP0inJGmWaCkp83CMLX8vTvvXdNmm33lhV108n
bnLWPPJJnXRMOrSflfHVvcUHoCcBJYkxB8PvWNJPVfQrM1aZNKVR9jBhica/eqZL
iggvjHT5XXLMxk9wHUs+HQeDn/tvl9682OqSmNXS7VVhskCIkvXBWE58JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJOYmu2iU07oUWxEokDWFTh5j0lMB8GA1UdIwQY
MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt
MWFiYjhlMjdiNGQxLzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx
LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFkBs2IT
ijKgQWv2ebyEhVYf11GtbaaP1WdC0CdQ5oYfmBEObltvLGwxeVoCMKfKPGqQ8csq
Utg/19+T2NYBIzTSmCIeY2zmUP4wk3RDx4uO4D1uX6+eEEM8na/Yxav4CoPyeT+j
4BnVILNxjfmCdQpnhQqGM/X3FajyM82HepmS6KZ2yx8VhrsubZE00As6HYGydm21
qojPLuwNVXQp7xk0qQQEMfP+3u8/IiwtklMlpuSppwRNQNKUhqtkR7BDXJLVgye7
tF1Rvd9Kav2pzLGgdSnkSkdqnKRht6jdPeuiBDQaCDgKCR/ccGPlBmUpku4rHhfg
fZFx4qN97KDrZw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:14:10 2025 by rpki-client