Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: qk/ugxi5xCXqHmpprIjX3wV9outvIr/Rd/WUIj7gkx8=
Subject key identifier: 38:2B:F3:87:EB:57:BB:55:01:FB:19:86:BB:1E:BE:18:00:28:58:EE
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0198D54DEA1B4AE04367F0D5CC3972BD1DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0D69
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: AAnn1eFztGBlFlJ56EnbT+yYwh0pZZl/iitwoLZG7eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ea:1b:4a:e0:43:67:f0:d5:cc:39:72:bd:1d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=382bf387eb57bb5501fb1986bb1ebe18002858ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1d:29:bc:e6:1b:b3:23:76:d6:0c:63:b7:e4:
92:24:9a:86:a7:cc:b9:19:51:36:7a:c4:6d:ca:7f:
a8:24:58:42:41:69:8c:34:10:60:0c:59:4f:f9:81:
63:8b:c7:3e:1a:c0:48:ff:84:ba:0f:74:81:79:e6:
bf:15:5d:c7:f3:c8:1d:38:f4:d7:22:1f:65:bb:39:
93:47:5e:17:a2:53:86:97:4c:bb:fa:56:33:0d:b5:
07:fa:66:2d:9d:ad:66:ab:b5:c7:52:80:11:ce:aa:
9f:77:a5:07:2c:9f:0e:87:7f:b7:ac:8f:99:6a:3b:
91:30:64:06:6b:00:e3:b8:34:d3:d6:64:ee:c2:6a:
26:02:2c:ce:7a:21:85:94:76:b9:d8:a7:e6:ca:83:
a1:d7:7e:d1:76:ed:13:f1:15:97:7f:c1:d1:68:57:
51:42:92:38:90:5c:c6:c7:fd:ed:c0:a9:86:13:45:
16:33:2d:af:40:69:4a:c7:15:4a:bf:b5:c2:86:71:
aa:f6:df:a9:b5:8d:65:d2:0a:e3:4b:fb:0a:98:99:
76:5f:15:3b:fc:17:c0:4e:79:21:1d:33:6d:42:8d:
62:e2:f5:ad:70:d2:7d:c2:c0:dd:f5:99:67:fb:ab:
5a:61:3d:b4:3a:30:35:61:e9:99:6c:2e:b4:c6:15:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:F3:87:EB:57:BB:55:01:FB:19:86:BB:1E:BE:18:00:28:58:EE
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f9:77:57:80:da:22:0a:25:be:ab:ea:94:d5:a2:05:3e:4c:
3a:f8:a7:2c:23:85:b7:9e:9b:ac:5c:ac:b2:00:05:79:c0:71:
e4:36:8e:29:ea:d2:22:bf:ee:bf:b8:11:50:83:90:2b:0e:d9:
8b:70:49:6c:47:35:76:28:11:d5:1c:84:f7:13:56:5e:3e:1a:
d9:3f:a1:28:08:64:20:e1:db:84:d7:a0:ab:1e:81:d3:a8:df:
69:d1:4b:74:e4:ed:91:8e:ff:d8:3e:7d:3e:13:7d:51:8c:2a:
93:e0:6a:2a:d1:02:08:0a:a6:74:2b:af:4c:8e:d0:e5:71:6b:
b1:8d:33:2a:20:40:7b:d1:41:62:58:25:b5:3b:6a:4a:b0:b7:
09:4d:2a:10:9c:a0:41:c5:9f:c1:ff:c1:f6:1c:d2:3d:4c:c6:
13:00:19:68:02:59:c8:ff:95:f3:33:f3:45:3e:26:97:64:9b:
13:76:51:3c:49:5c:a6:b4:0a:7c:2e:d9:db:8e:f2:fe:10:40:
7f:ee:60:eb:6d:94:ca:96:08:07:da:9f:8e:03:70:45:e1:d4:
57:d8:cc:4b:42:49:f7:17:d6:c0:22:5a:39:2f:fc:11:59:36:
6f:06:ec:81:ca:0e:22:5a:c2:b2:e6:a3:78:e3:12:31:2d:78:
3a:27:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:09 2025 by rpki-client