Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: SAMxOqJUD0U8NdPNRTmx/jVcSRARqbx6/yI8pdZJdnQ=
Subject key identifier: 74:0B:66:A5:1A:B9:65:4E:44:4A:9B:3D:C5:B4:A7:2C:09:F6:CC:BB
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 0198D5F138DED2B7DB5480013879E6993C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: VF1mMUsjIQR7IKz20lWT9vWqMFgQ/KGaSuDksLAXAFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:38:de:d2:b7:db:54:80:01:38:79:e6:99:3c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=740b66a51ab9654e444a9b3dc5b4a72c09f6ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:b5:2a:1f:96:a6:98:00:74:ca:7d:fb:b9:
35:11:ee:3b:87:c0:76:4c:3a:ae:4d:ca:d8:f9:83:
0f:10:b9:a2:4e:1e:54:6e:e1:7c:ad:2b:c1:bd:eb:
1e:d7:01:19:74:9c:b6:6b:f8:81:c6:60:33:11:ee:
20:2f:e1:38:b1:02:57:5d:fd:6b:d8:1f:b7:12:28:
71:99:64:04:81:dd:8d:6d:96:30:87:57:05:bc:db:
ff:3d:8e:97:dc:17:72:bf:ec:04:60:3c:21:29:d0:
f7:ef:9d:1c:01:39:a7:14:5e:f3:71:b0:b0:cc:24:
5d:cb:4f:42:fb:9e:e8:98:00:0a:5f:bd:9a:65:02:
ed:41:ae:ef:3f:c7:c1:7f:4d:a5:41:66:d0:dc:70:
5a:f0:b2:d0:e1:0d:ee:c0:27:94:e5:7c:56:f7:e4:
ec:14:1a:20:57:b0:9d:74:e9:41:bb:08:cf:58:1c:
2c:e0:5e:8f:68:90:24:2f:29:8c:76:b6:0b:49:32:
51:3e:73:4a:c3:c1:2f:7b:b9:33:3f:9c:39:e1:22:
83:06:f0:e3:99:b8:45:51:61:9d:36:54:9e:f8:de:
71:5b:44:5f:e4:29:17:1f:ab:f3:72:d5:4e:a8:a9:
92:da:ed:05:32:66:e2:d9:ef:bd:5f:31:cd:22:5d:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:66:A5:1A:B9:65:4E:44:4A:9B:3D:C5:B4:A7:2C:09:F6:CC:BB
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:e8:a4:5d:9f:58:ff:c2:f1:8a:2e:0d:e5:ca:04:db:bb:
b5:38:0c:c8:40:e6:73:a3:13:7f:5c:ef:b3:ba:0a:cf:fc:41:
64:a7:ad:1f:ba:f3:c5:78:36:7c:0e:d7:35:4b:65:41:01:4c:
ac:75:75:6d:fa:a5:d1:3e:b7:b0:b6:d4:58:13:de:37:7e:48:
79:61:71:b0:90:81:9d:45:18:e2:da:4f:26:be:34:3b:c8:26:
64:1a:9f:e5:d9:43:c5:07:81:50:9e:53:f7:61:b0:10:9f:2b:
3a:87:29:8e:72:44:1b:e1:f0:c6:88:c9:6b:1c:2a:28:d3:90:
7c:34:dd:0b:00:4f:13:d2:84:82:80:f8:88:22:8d:34:f4:0a:
80:15:df:53:7c:b4:9b:a8:2e:67:df:c7:e7:3a:75:48:48:74:
53:94:76:22:3c:fc:3f:0d:38:8a:6a:63:3a:5e:c9:65:79:4d:
13:a9:0a:01:f0:46:7a:9c:81:0a:ec:7f:e4:04:57:10:35:59:
3d:54:81:9c:44:5d:78:b3:6a:63:a1:62:8d:47:59:75:55:bb:
f6:18:15:da:d9:bd:dc:ab:e7:14:13:2b:b8:65:e8:95:f0:c1:
cd:68:ed:3b:6f:e6:3d:56:fc:40:a3:62:1b:88:c0:3d:2c:8d:
f6:cc:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:56 2025 by rpki-client