Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: 5dtRWUIdE2ScrBXmscPoed1Yph7FRAnKixUkwBr3YMw=
Subject key identifier: 57:5B:DC:9B:1B:3A:D2:0C:67:F9:DC:B0:6F:7D:A1:EF:26:0B:F1:9C
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 019676E7A73CDBF7111C10228729EB662688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0C2F
Signing time: Sun 27 Apr 2025 11:00:15 +0000
Manifest this update: Sun 27 Apr 2025 11:00:15 +0000
Manifest next update: Mon 28 Apr 2025 11:00:15 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: CwrHeftlRr1a8jiLrmD+9UN0Wmx7x+C5ADJ8Q0OnkOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:a7:3c:db:f7:11:1c:10:22:87:29:eb:66:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Apr 27 11:00:15 2025 GMT
Not After : Apr 28 11:00:15 2025 GMT
Subject: CN=575bdc9b1b3ad20c67f9dcb06f7da1ef260bf19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:70:1b:46:ce:b0:16:77:87:55:07:d0:fe:
ee:1e:94:41:33:49:3b:ba:9b:23:e3:a3:c4:47:42:
21:eb:71:18:4d:e8:d6:67:46:17:3c:73:76:6a:16:
af:92:e8:15:7b:54:89:69:29:5d:ae:82:7d:b2:be:
5c:34:24:11:05:4c:f0:e8:81:80:71:c8:6d:0b:de:
87:b8:cb:b9:20:bf:75:42:0a:96:6a:b9:3e:a5:11:
6b:ec:a1:e5:3d:5b:04:2f:1e:c3:15:01:4c:ba:fe:
75:f0:67:18:c5:dc:95:1d:e5:25:a8:19:5c:95:97:
dd:1f:57:a5:5f:78:34:d3:34:02:dd:28:71:7f:d9:
a4:ed:c7:f3:c2:2e:f0:b4:cc:21:44:43:c2:43:37:
4d:eb:47:29:ca:ce:fa:94:af:5c:65:8a:74:79:6a:
75:91:1a:a5:6f:1b:08:bb:c0:22:58:9c:84:90:cb:
b2:64:2d:e3:84:10:f7:bd:11:6c:36:ae:8a:b2:f3:
e2:32:88:6c:25:6a:9c:ee:5c:b9:70:83:65:bf:5d:
20:2b:08:d0:fd:ed:ab:64:3f:d0:51:22:2f:dd:e8:
3f:0c:8d:02:df:6c:9e:88:0b:f6:36:d1:e5:e9:9b:
32:15:54:86:94:4c:f0:16:4b:84:36:6a:7a:3d:99:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5B:DC:9B:1B:3A:D2:0C:67:F9:DC:B0:6F:7D:A1:EF:26:0B:F1:9C
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e7:c5:ac:26:48:c9:3d:ba:0b:f1:08:ab:ba:45:fa:64:b5:
7d:81:82:e8:cf:f1:4c:08:e9:8f:e6:7a:ed:ab:57:2f:2d:7d:
c6:1a:46:4e:7a:06:f0:ea:96:27:e5:c6:6c:cf:49:ad:78:23:
6d:77:21:06:bf:2a:1e:b3:c2:fa:ad:c9:a6:6c:6d:1c:98:c3:
64:f1:08:82:f6:4e:da:8a:6c:5f:b2:35:3e:80:68:14:ea:59:
ef:d0:75:06:8b:c8:6a:28:47:5e:3d:6a:de:b5:78:fc:f0:b3:
99:52:8e:96:e2:d0:b5:42:bd:70:8d:3a:a4:f3:e7:52:18:8e:
c3:30:4d:0d:d0:e1:4e:d0:42:4b:65:24:dd:be:67:00:52:e2:
47:22:65:c7:e0:e4:d6:17:9d:85:50:53:82:8a:89:85:cb:69:
01:0f:f7:90:9e:04:d8:bf:ad:5d:a2:21:0b:47:c4:40:e9:f6:
77:f6:7c:e5:05:3f:7c:40:e9:29:00:7f:65:92:73:ca:07:df:
2a:25:de:97:99:85:bc:d6:94:2f:1c:c7:af:f6:24:75:43:1d:
79:94:e7:1b:5d:a8:90:ee:c4:ec:9b:f2:bc:9d:de:54:19:ac:
9d:f9:3b:54:80:37:72:e2:5b:df:cb:82:b7:cc:ff:eb:1f:78:
0a:0c:63:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ256c82/cRHBAihynrZiaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmZiOWZkMzFjMmM2MGFiZGExNGUwYjNjOTJhODk4NjY4
MjlkOGUwHhcNMjUwNDI3MTEwMDE1WhcNMjUwNDI4MTEwMDE1WjAzMTEwLwYDVQQD
Eyg1NzViZGM5YjFiM2FkMjBjNjdmOWRjYjA2ZjdkYTFlZjI2MGJmMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLpwG0bOsBZ3h1UH0P7uHpRBM0k7
upsj46PER0Ih63EYTejWZ0YXPHN2ahavkugVe1SJaSldroJ9sr5cNCQRBUzw6IGA
cchtC96HuMu5IL91QgqWark+pRFr7KHlPVsELx7DFQFMuv518GcYxdyVHeUlqBlc
lZfdH1elX3g00zQC3Shxf9mk7cfzwi7wtMwhREPCQzdN60cpys76lK9cZYp0eWp1
kRqlbxsIu8AiWJyEkMuyZC3jhBD3vRFsNq6KsvPiMohsJWqc7ly5cINlv10gKwjQ
/e2rZD/QUSIv3eg/DI0C32yeiAv2NtHl6ZsyFVSGlEzwFkuENmp6PZnz+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdb3JsbOtIMZ/ncsG99oe8mC/GcMB8GA1UdIwQY
MBaAFKYvuf0xwsYKvaFOCzySqJhmgp2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQt
MWFiYjhlMjdiNGQxLzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lMDUxZmYtY2UyNS00ZDZjLTgzZmQtMWFiYjhlMjdiNGQx
LzEvcGktNV9USEN4Z3E5b1U0TFBKS29tR2FDblk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbefFrCZI
yT26C/EIq7pF+mS1fYGC6M/xTAjpj+Z67atXLy19xhpGTnoG8OqWJ+XGbM9JrXgj
bXchBr8qHrPC+q3JpmxtHJjDZPEIgvZO2opsX7I1PoBoFOpZ79B1BovIaihHXj1q
3rV4/PCzmVKOluLQtUK9cI06pPPnUhiOwzBNDdDhTtBCS2Uk3b5nAFLiRyJlx+Dk
1hedhVBTgoqJhctpAQ/3kJ4E2L+tXaIhC0fEQOn2d/Z85QU/fEDpKQB/ZZJzygff
KiXel5mFvNaULxzHr/YkdUMdeZTnG12okO7E7JvyvJ3eVBmsnfk7VIA3cuJb38uC
t8z/6x94CgxjoA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:53:51 2025 by rpki-client