Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: BBQkfoPRrrugpMZiWIvE4A1evrxXrS/AxkTzahU4rVk=
Subject key identifier: 00:87:B9:B8:D5:3F:AE:0F:58:0C:81:8B:3E:97:49:D3:25:FF:01:BC
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 01987C77CDB551F103FA832E23B36C80D36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0D3B
Signing time: Tue 05 Aug 2025 23:01:22 +0000
Manifest this update: Tue 05 Aug 2025 23:01:22 +0000
Manifest next update: Wed 06 Aug 2025 23:01:22 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: jN7i2MQcGD8sLOTG0bhdVVxfHWMqNYVoR7+PTuOQHBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:cd:b5:51:f1:03:fa:83:2e:23:b3:6c:80:d3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Aug 5 23:01:22 2025 GMT
Not After : Aug 6 23:01:22 2025 GMT
Subject: CN=0087b9b8d53fae0f580c818b3e9749d325ff01bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:d2:03:aa:8c:d0:5d:9e:b5:1f:f5:a6:f7:
8a:9f:58:06:8d:c0:96:c5:b8:45:01:65:c4:d5:28:
24:75:39:25:32:1c:db:a8:11:ad:95:30:ed:12:89:
49:4e:48:5c:f0:59:01:f2:00:01:c2:92:0d:6c:2b:
26:7a:04:30:ae:72:d5:43:0c:15:52:10:d6:1a:f1:
5e:0e:1c:19:ca:40:c5:cb:01:45:b2:e5:ab:e2:36:
bb:73:50:05:94:23:7a:09:05:dd:c6:c4:97:2d:da:
a6:c0:c4:76:55:bf:ff:03:c1:58:a3:70:1a:1f:60:
a0:7e:4b:34:9c:2b:ae:62:df:82:2f:91:b3:b0:51:
32:ab:5a:56:be:07:96:9e:b8:19:12:4a:5b:c2:45:
66:ea:be:26:c5:69:55:fd:f7:d2:81:ea:9d:26:95:
b2:d8:6c:e2:73:4a:1d:3e:92:7a:6d:0d:c2:82:4c:
d8:48:fd:7d:83:57:fe:4f:97:4d:94:13:99:40:de:
ba:5e:59:3f:4e:ed:48:35:35:7a:fe:1a:00:78:d4:
f3:27:ff:e3:f0:33:84:64:dd:fd:bb:63:18:89:10:
3e:70:45:a5:ee:db:b3:2e:5f:7c:83:38:a8:32:d5:
b1:98:76:2c:a9:1e:9f:68:3f:59:00:5a:85:d8:67:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:B9:B8:D5:3F:AE:0F:58:0C:81:8B:3E:97:49:D3:25:FF:01:BC
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:ce:41:49:e1:b6:2f:6d:c8:c0:f0:cc:81:f2:93:81:a7:
71:8c:f8:93:10:33:1a:a7:b1:2a:5d:f0:9b:09:1e:a0:49:b0:
92:56:05:ce:48:18:84:53:af:4e:53:98:65:4d:df:7d:7e:fa:
92:d7:be:a7:60:90:06:80:e7:ce:ba:6e:4b:d7:cf:60:ed:e6:
53:bc:bb:10:f2:21:23:42:32:30:9b:ce:ba:ad:2b:6b:a5:72:
6c:36:c4:33:aa:8f:2e:f7:33:f6:ed:49:88:75:f2:b8:c1:22:
74:95:d4:6d:bc:65:43:2e:c9:1e:ac:98:1f:32:8d:81:d1:23:
8e:30:0c:1b:ff:24:fc:18:a3:bc:50:a4:e3:81:54:37:30:b7:
80:3a:38:46:30:cd:da:20:51:ab:29:fe:88:cf:ae:ea:50:79:
ad:b0:8d:3c:10:c7:c5:aa:14:df:74:01:e2:0c:62:b9:4b:96:
ba:50:0e:c5:9e:1f:32:4e:b1:19:c9:b2:1e:65:13:31:8b:52:
a9:f6:b5:7a:1e:aa:09:79:21:42:a4:11:59:84:2b:92:a9:fb:
45:52:e4:f5:28:24:80:a5:4d:4d:b1:c9:7c:99:59:b4:e4:94:
2d:bf:c6:07:27:c2:31:0b:dc:81:70:a0:4b:ff:fb:16:3a:2e:
2e:c1:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:42:23 2025 by rpki-client