Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: smb9jtJoH/b7KYRINdLdbwvt2/iBIenr+L2RAQUbzj8=
Subject key identifier: 08:65:72:FF:A4:D6:25:8E:43:BB:58:42:A5:91:3E:0D:F5:E9:7F:BC
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 0197B821379F74D356376EBEA006C2E925E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: /ZTfBwletGauK3ozOlQ0PmlUqC3ZGgXc9tFaCL8pcSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:37:9f:74:d3:56:37:6e:be:a0:06:c2:e9:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=086572ffa4d6258e43bb5842a5913e0df5e97fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:95:74:9a:b2:8c:58:e6:c0:c0:2c:fe:54:
49:65:70:48:b0:c3:48:64:91:ed:12:9e:7e:c3:fa:
a4:62:37:63:6b:1a:b7:83:cd:a3:78:ab:df:2a:44:
dd:ce:3d:d4:9c:9a:e0:ea:dd:5d:c3:a4:88:f0:e1:
c7:1b:2a:ad:cc:ff:aa:b3:08:ad:1d:7a:97:08:16:
a6:4f:b9:fe:6a:f6:38:b5:9e:6f:47:8e:68:77:09:
95:63:04:99:58:83:b6:dd:e9:e6:54:eb:5c:27:fe:
05:25:8e:f3:c7:56:4c:83:39:94:46:10:dd:bb:55:
d2:92:f8:d6:6a:7f:1a:27:cc:14:18:93:65:64:96:
32:1e:5b:e5:12:b9:88:4f:aa:90:88:c2:ca:ca:34:
8c:ba:12:67:8e:14:63:3e:53:17:b6:53:f2:2b:73:
0f:41:6c:29:ea:09:f3:e2:b9:75:7b:7f:99:b1:03:
e0:9d:35:19:65:71:cb:3f:44:79:b6:c6:14:e1:0c:
43:5d:c6:4e:ea:1a:df:14:c1:1a:06:22:ca:90:65:
ab:8d:ae:e1:fd:3b:db:d0:3e:99:b1:d2:d3:0e:35:
76:5c:75:ff:26:2e:bf:0c:c2:3b:4e:ac:3b:05:35:
c7:e9:5f:fd:ec:af:e0:7b:4e:bc:84:a3:b3:f1:40:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:65:72:FF:A4:D6:25:8E:43:BB:58:42:A5:91:3E:0D:F5:E9:7F:BC
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:58:1f:30:2e:94:97:c0:41:39:af:05:5d:c3:8d:e4:b2:09:
27:75:ca:db:d1:f7:18:40:25:46:ea:8a:f0:31:e6:22:cb:6b:
66:0f:fd:14:1e:fe:34:9c:b0:7c:3e:2f:0a:be:99:98:cb:b6:
ac:86:ac:16:b7:b9:3e:e3:de:69:02:54:f7:6f:91:68:61:41:
e8:17:e4:8a:0c:42:11:34:c8:7b:80:5e:30:7e:a6:41:c5:37:
29:68:60:cb:02:55:51:7e:c9:71:e4:f3:cc:9d:9c:fb:29:35:
97:ce:29:bb:3a:ce:63:e6:0a:b0:77:3c:35:68:cd:96:78:aa:
53:d6:e7:18:f8:af:b6:46:c8:12:92:39:1c:7a:62:d7:d9:34:
de:4a:a6:67:00:1c:a8:8a:48:aa:f5:f8:8f:48:fa:cc:52:8e:
75:ad:c9:92:45:1a:fa:ba:e4:ef:9f:20:2a:dc:da:0b:c4:70:
5c:42:50:8e:5b:aa:70:94:c1:e6:a1:41:8d:29:98:6e:66:27:
d3:c9:15:2f:21:8c:4f:0b:fb:e3:8e:33:e0:43:aa:d3:cb:5e:
f0:c6:e7:9d:e6:be:01:77:ef:a9:55:a0:34:41:45:1b:a2:a3:
80:45:82:12:91:0b:f9:21:77:aa:a8:72:54:50:90:06:33:83:
36:de:a6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITefdNNWN26+oAbC6SXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjUwNjI4MjAwMTEzWhcNMjUwNjI5MjAwMTEzWjAzMTEwLwYDVQQD
EygwODY1NzJmZmE0ZDYyNThlNDNiYjU4NDJhNTkxM2UwZGY1ZTk3ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHiVdJqyjFjmwMAs/lRJZXBIsMNI
ZJHtEp5+w/qkYjdjaxq3g82jeKvfKkTdzj3UnJrg6t1dw6SI8OHHGyqtzP+qswit
HXqXCBamT7n+avY4tZ5vR45odwmVYwSZWIO23enmVOtcJ/4FJY7zx1ZMgzmURhDd
u1XSkvjWan8aJ8wUGJNlZJYyHlvlErmIT6qQiMLKyjSMuhJnjhRjPlMXtlPyK3MP
QWwp6gnz4rl1e3+ZsQPgnTUZZXHLP0R5tsYU4QxDXcZO6hrfFMEaBiLKkGWrja7h
/Tvb0D6ZsdLTDjV2XHX/Ji6/DMI7Tqw7BTXH6V/97K/ge068hKOz8UDR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhlcv+k1iWOQ7tYQqWRPg316X+8MB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFgfMC6U
l8BBOa8FXcON5LIJJ3XK29H3GEAlRuqK8DHmIstrZg/9FB7+NJywfD4vCr6ZmMu2
rIasFre5PuPeaQJU92+RaGFB6BfkigxCETTIe4BeMH6mQcU3KWhgywJVUX7JceTz
zJ2c+yk1l84puzrOY+YKsHc8NWjNlniqU9bnGPivtkbIEpI5HHpi19k03kqmZwAc
qIpIqvX4j0j6zFKOda3JkkUa+rrk758gKtzaC8RwXEJQjluqcJTB5qFBjSmYbmYn
08kVLyGMTwv7444z4EOq08te8Mbnnea+AXfvqVWgNEFFG6KjgEWCEpEL+SF3qqhy
VFCQBjODNt6mag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:28 2025 by rpki-client