Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier: 5EulP9cUPqqCAURj6gwq2Qy82rlQh8OUCdZeU4/Ca8E=
Subject key identifier: 54:4A:92:84:8C:8A:24:CC:45:07:61:A7:C3:CE:6F:A5:39:6A:1D:90
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial: 201D59124662776D12A2AFA9DB7912D5655D57B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number: 0253
Signing time: Sun 19 Oct 2025 20:15:44 +0000
Manifest this update: Sun 19 Oct 2025 20:10:44 +0000
Manifest next update: Mon 20 Oct 2025 21:51:44 +0000
Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: RTmMuu4InlumtZw/SoexjpRP9oitFuATbGF7euajs64=)
2: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 21:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1d:59:12:46:62:77:6d:12:a2:af:a9:db:79:12:d5:65:5d:57:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Validity
Not Before: Oct 19 20:10:44 2025 GMT
Not After : Oct 20 21:51:44 2025 GMT
Subject: CN=544A92848C8A24CC450761A7C3CE6FA5396A1D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:70:a5:6e:f7:1c:fb:f9:fa:2e:46:c3:f1:
89:d9:df:39:a9:de:52:9d:e7:1d:e3:a5:1d:9e:0d:
ed:fe:16:0d:34:b2:62:61:d6:79:5a:7e:d8:65:fa:
7f:65:96:8b:3d:95:02:e0:dc:42:97:01:96:a0:8f:
0e:b5:ce:41:49:32:52:07:a4:94:50:98:5f:61:e8:
13:5a:e1:1e:7c:05:a8:79:ff:33:6e:72:1f:9a:ce:
d3:0f:12:36:7e:34:5f:67:7d:11:2e:38:92:22:95:
e3:42:fa:26:52:14:69:c2:57:1e:a4:15:27:be:f7:
61:0f:0f:a6:ac:72:27:26:33:b6:f6:3d:d6:2a:78:
79:12:57:05:9e:06:e4:ea:1a:ee:52:98:85:e2:14:
47:51:b9:96:94:90:1b:76:22:99:0e:c2:66:b7:e8:
ad:cb:99:7a:b6:f0:5f:ca:94:85:64:50:c6:f6:c7:
41:c1:c7:62:74:9f:be:0d:c0:d5:2d:db:59:8b:84:
54:84:24:db:76:bd:12:6f:14:0a:00:03:0e:bf:2b:
fe:99:dd:94:3a:57:4b:c0:3c:60:3d:42:87:dc:27:
ad:8d:f9:6e:a6:15:f3:ef:e5:76:4d:0d:cd:1a:7d:
7a:d6:25:f7:1d:10:99:63:34:99:23:1f:60:f4:3e:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4A:92:84:8C:8A:24:CC:45:07:61:A7:C3:CE:6F:A5:39:6A:1D:90
X509v3 Authority Key Identifier:
keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:b2:6c:31:6b:09:5c:a5:e8:83:46:84:c6:af:cf:b6:e5:
f1:d8:43:50:c7:c2:db:06:19:1d:94:48:30:55:93:78:1a:fe:
5c:f2:0e:c8:6a:39:76:45:a1:5e:bb:b1:37:02:d2:fc:bb:10:
02:82:d3:c2:15:fe:2c:8b:5b:13:46:b9:c6:18:5e:79:e0:07:
3b:2b:16:a2:3d:84:28:e2:d6:bd:65:b6:6e:24:e3:6c:46:92:
19:6f:98:bf:3f:63:c8:f6:60:ef:c4:5d:fe:b8:a4:21:f6:b6:
e8:64:f5:9f:21:b8:e6:36:d6:59:2f:f5:68:f9:b2:72:25:72:
95:86:14:71:2d:84:f3:89:b1:c3:e7:a7:b2:71:f4:cb:a8:70:
9d:0a:6e:49:99:35:b4:e1:b7:dd:f2:d9:34:79:26:cf:fc:9a:
32:84:19:5a:c8:11:b9:26:37:fa:fd:0b:49:ac:38:36:ad:71:
46:5e:b3:01:de:6b:a7:1d:ad:fa:ff:df:0b:d8:0d:1c:b2:ae:
31:20:2a:fa:b1:ec:d3:f8:95:39:61:b1:a2:88:7c:70:a8:0f:
74:87:9f:68:66:c4:13:12:92:5f:07:cd:3f:f3:b7:81:b0:ba:
31:fc:8c:9a:ad:cc:f0:05:21:f4:91:78:e6:39:76:74:58:d2:
0e:17:86:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:47:21 2025 by rpki-client