Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: i8ZAqjctYXuEyyPSvoD7UwApcRUVav6KPWXj3TeETVw=
Subject key identifier: 9A:20:6C:94:A8:5D:1A:00:93:05:B6:53:44:E9:57:2B:B6:63:D7:24
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0199FEB4EBB8C11ACB73176251EC61E6ACED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0E03
Signing time: Sun 19 Oct 2025 23:01:33 +0000
Manifest this update: Sun 19 Oct 2025 23:01:33 +0000
Manifest next update: Mon 20 Oct 2025 23:01:33 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: ygSdN4A/91X6Q21xotRGm7D/n+mkb9SjRcFqsREjz5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:eb:b8:c1:1a:cb:73:17:62:51:ec:61:e6:ac:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: Oct 19 23:01:33 2025 GMT
Not After : Oct 20 23:01:33 2025 GMT
Subject: CN=9a206c94a85d1a009305b65344e9572bb663d724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:bf:0f:d1:8c:5b:a6:62:95:f9:0a:ad:7d:
cc:9d:df:77:b9:8a:04:36:64:5f:4d:b4:02:59:55:
f2:9a:7a:f5:b6:d0:5a:4d:af:00:06:0f:7e:78:38:
7a:ae:cd:e4:e2:e9:9f:0f:ee:d6:6f:50:c9:31:a1:
e6:cd:45:7c:c2:ea:52:11:ef:c4:52:05:ce:a3:fc:
ed:78:0e:58:c0:74:b6:09:fc:0b:7d:9d:f6:de:1b:
59:25:b8:aa:66:c2:c1:7d:a0:24:d6:4f:d2:ff:dd:
b6:17:e4:f7:d9:b1:b4:97:e0:4a:55:06:0d:59:1c:
32:71:69:c8:1d:8c:88:d2:2e:51:db:59:7c:6f:94:
be:4d:03:75:23:1e:c8:b2:cc:ce:a1:ab:f5:e8:c5:
ad:0e:ab:52:85:b6:f3:a8:9c:0b:11:33:f7:d9:9c:
28:1d:4e:1b:29:75:eb:6f:e0:31:27:4b:94:cc:20:
c7:ad:9f:38:33:6b:68:17:ab:76:d1:2b:03:dc:d3:
3a:2a:75:e8:84:ad:6d:d7:18:60:a5:aa:4f:a5:53:
e5:37:2f:ba:ae:36:59:b2:ea:17:e9:07:b1:1e:b0:
ee:6f:28:c2:6a:40:26:59:9c:85:3b:5d:b9:97:93:
d4:f9:01:7f:13:a0:8f:3d:31:ad:94:9a:44:00:52:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:20:6C:94:A8:5D:1A:00:93:05:B6:53:44:E9:57:2B:B6:63:D7:24
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:cc:d6:0b:bc:92:1c:9c:92:94:9b:59:a7:0c:8a:a7:ed:
42:8b:b9:4b:57:04:94:42:22:0e:ba:4c:4f:cb:ef:33:83:4c:
94:1c:b4:44:20:30:5b:15:31:7e:cb:e3:c4:94:98:01:cc:28:
c7:ae:b5:47:5e:85:f3:b4:4c:19:2d:5c:e2:34:74:9e:1a:a0:
d2:56:4b:5e:92:ce:2c:02:1e:61:62:a5:2c:cd:77:82:93:e7:
6d:7f:47:0e:fb:60:1d:8a:4f:de:b2:dd:54:fe:10:23:a4:3a:
f1:c6:da:b9:ab:3e:27:a0:ca:d8:f6:3e:39:3f:e2:d9:07:a6:
96:93:f4:22:e8:0c:a9:d7:90:ba:2c:4f:48:79:dd:91:80:4a:
3b:a2:95:ff:87:bc:04:25:2a:df:17:65:57:85:c8:be:5d:41:
eb:db:7d:9c:c7:32:cb:cc:2f:1f:35:68:ae:ac:e7:e5:cc:90:
a7:75:c5:33:af:d6:33:e1:3f:d8:5b:b4:de:94:fa:22:d8:bb:
a7:a3:99:27:f3:15:81:66:94:5b:c1:ad:a2:24:b8:dc:90:0b:
28:cd:c5:3d:fb:f5:8b:b9:63:3c:4a:59:03:45:be:08:97:f2:
6a:eb:77:cf:4f:ef:67:a1:a5:6c:a4:10:85:fb:c6:ba:6f:85:
da:6e:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:36 2025 by rpki-client