Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
File: pi-5_THCxgq9oU4LPJKomGaCnY4.mft (raw, json)
Hash identifier: 43lWNPdXY+NqGjllIOTUho7cDuWdmDMIBlCyeQW11NQ=
Subject key identifier: EE:79:9F:B5:97:A1:5F:09:9D:2E:2F:39:EA:3D:6E:80:DC:FA:F6:CD
Authority key identifier: A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
Certificate issuer: /CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Certificate serial: 0196BA7FAEC7C6297A1ADE06203D31902132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
Manifest number: 0C52
Signing time: Sat 10 May 2025 14:00:52 +0000
Manifest this update: Sat 10 May 2025 14:00:52 +0000
Manifest next update: Sun 11 May 2025 14:00:52 +0000
Files and hashes: 1: ZIKQeQoBMcgJAAR9TP75a76cDn0.roa (hash: mC8mJajWFAnAfTbKX+aRBKG3/mLcH0XDCCRpUt2qu64=)
2: pi-5_THCxgq9oU4LPJKomGaCnY4.crl (hash: D0DFkO0h/L4miBhdShuNVFBJQsRrQaiajXoZ+Yk0dhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:ae:c7:c6:29:7a:1a:de:06:20:3d:31:90:21:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62fb9fd31c2c60abda14e0b3c92a89866829d8e
Validity
Not Before: May 10 14:00:52 2025 GMT
Not After : May 11 14:00:52 2025 GMT
Subject: CN=ee799fb597a15f099d2e2f39ea3d6e80dcfaf6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:2b:d2:ce:6c:de:50:07:ac:1a:2b:ca:07:
ef:f1:c9:c8:01:23:30:84:e5:f8:b3:60:47:8f:b5:
61:89:8a:b6:83:46:63:f6:5b:a7:39:48:9f:5b:b1:
d6:fd:31:8e:de:6c:87:5c:f5:03:87:a8:d2:6e:bb:
4a:3c:a5:16:5e:43:8f:1e:be:1c:7a:04:82:df:82:
39:b0:53:62:ec:5d:c6:7b:4d:bd:89:d5:60:1e:08:
a8:7f:bf:7f:e8:42:84:ee:cb:d6:ea:bf:5b:25:2c:
60:ea:6f:17:02:48:1e:e1:3c:3a:83:ae:0c:26:f1:
42:d7:df:f5:93:9a:70:35:06:e0:98:1a:ac:4b:87:
51:fa:4d:dc:26:df:dc:80:e4:00:59:c2:36:8b:9b:
be:44:30:c4:98:bf:65:e2:8d:bb:e6:11:3e:fb:f9:
17:b9:5a:31:22:fa:ba:b5:0d:a5:69:30:ea:ff:46:
5c:96:ee:fa:9f:da:0d:e7:ef:a2:e2:22:95:ed:54:
b6:fd:0a:fc:2c:50:cb:28:7d:e2:cc:30:b1:71:b3:
57:34:d7:59:6c:e4:13:1c:4b:32:e6:f4:4d:be:23:
0f:33:50:be:76:33:77:06:fe:56:d6:dd:89:d1:f6:
de:ef:0c:c0:35:28:a6:20:26:c1:71:72:3d:78:72:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:9F:B5:97:A1:5F:09:9D:2E:2F:39:EA:3D:6E:80:DC:FA:F6:CD
X509v3 Authority Key Identifier:
keyid:A6:2F:B9:FD:31:C2:C6:0A:BD:A1:4E:0B:3C:92:A8:98:66:82:9D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pi-5_THCxgq9oU4LPJKomGaCnY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e051ff-ce25-4d6c-83fd-1abb8e27b4d1/1/pi-5_THCxgq9oU4LPJKomGaCnY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:6d:29:6e:be:19:53:95:0e:82:9a:1c:4e:2e:fc:a1:ef:
fb:2d:81:cf:46:23:cd:d6:e0:c6:58:7f:10:a0:99:b5:e0:ad:
8d:1a:b5:44:6d:96:72:e4:6a:b0:69:8b:db:08:f5:0d:0d:a4:
32:14:8a:6a:a6:5c:29:ea:96:2e:ea:e3:a6:e3:5f:92:c0:c7:
df:c6:31:73:e6:da:28:ac:9b:86:7f:f4:97:4d:10:66:1f:19:
be:99:d9:fa:c9:ef:fa:f4:c9:48:82:fc:32:82:c2:c8:21:b9:
5d:88:1a:d7:63:b9:2f:50:1d:1d:7f:53:99:ab:ba:c4:82:bf:
6f:3f:1c:f3:ba:0e:fb:44:6d:ef:41:80:c4:19:8f:44:09:07:
e0:2d:e5:f9:51:31:19:da:30:47:68:1f:d1:1c:f7:9c:aa:7a:
23:9b:cb:c0:b7:8b:52:e9:e3:10:13:d9:3d:15:da:ea:f0:8a:
03:c2:e8:a3:75:e1:6c:af:69:04:3e:24:77:df:2e:a8:a3:ea:
41:52:6a:87:6a:88:6d:11:01:00:d9:e0:ef:d4:26:6f:be:39:
f4:95:5a:13:a5:09:11:67:c4:8e:29:5a:95:48:54:ec:be:f1:
0f:84:d9:57:34:cd:23:ab:87:5e:21:b5:13:6e:da:19:57:6e:
c3:a1:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:36:28 2025 by rpki-client