Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 1PrQcPOMxwPrAMXGpC/uJkLtF3DvjwHwS/4SOmNaJvc=
Subject key identifier: 1A:F9:7E:F4:3C:D1:24:2E:B9:72:D3:71:11:4F:F7:A7:3C:E5:E0:30
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 0199FD6B30209011FA778D64BB7F4C12BE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 17:01:24 +0000
Manifest this update: Sun 19 Oct 2025 17:01:24 +0000
Manifest next update: Mon 20 Oct 2025 17:01:24 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: DH00gcGy21NKq3bt8tFOm2V/LSCLmwlQT1K1OmR7Bbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:30:20:90:11:fa:77:8d:64:bb:7f:4c:12:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Oct 19 17:01:24 2025 GMT
Not After : Oct 20 17:01:24 2025 GMT
Subject: CN=1af97ef43cd1242eb972d371114ff7a73ce5e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:00:3e:7f:02:9c:eb:ac:9e:33:15:76:69:
92:1e:21:09:84:81:c0:ad:ee:37:31:3e:4f:ee:17:
48:35:43:33:5a:a2:36:72:6d:14:44:be:79:b2:73:
58:f0:7e:b9:f2:39:8b:11:66:32:7b:55:ac:3f:2c:
38:b4:19:75:7e:5d:46:ee:72:ed:ef:a1:33:89:31:
a7:62:31:54:82:84:3d:92:0c:f8:91:8e:40:92:27:
f0:8e:71:7e:7b:37:8d:ad:79:cd:17:b7:2f:66:0b:
fa:d8:16:35:51:45:72:9e:1b:c3:db:67:d7:aa:3d:
ae:34:2b:db:69:ea:78:a6:1c:47:b2:01:49:2c:83:
d6:14:99:07:b8:84:dc:34:8c:39:21:73:3a:6d:f7:
e3:63:44:9f:e1:b6:de:91:b7:c5:ac:cd:67:db:24:
eb:d4:07:f0:3b:21:15:77:cd:de:9b:d9:38:72:ee:
5d:c0:5f:cb:bb:46:55:8e:0e:bd:cb:37:4c:9d:be:
d3:30:91:7e:72:c3:be:c1:92:4e:96:99:9a:58:2c:
06:29:56:c0:af:62:09:8b:41:14:2c:03:1f:12:2a:
50:ea:60:20:39:0e:ba:fe:db:a2:6b:96:8c:7b:79:
89:39:d7:cf:b8:c9:aa:ea:56:bf:b1:8e:ed:07:8f:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:7E:F4:3C:D1:24:2E:B9:72:D3:71:11:4F:F7:A7:3C:E5:E0:30
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:53:da:db:4f:04:94:38:67:fd:75:1e:4c:9a:70:c1:f6:
91:4d:91:32:59:dc:6b:24:92:61:28:e2:55:51:56:53:91:b7:
01:06:82:ee:01:0f:05:4b:09:ab:02:4c:b1:1b:79:e5:bb:35:
7a:b4:8a:7e:3d:69:48:c7:d2:23:39:4a:45:c2:62:9b:b3:b4:
eb:58:c9:20:cd:7e:06:92:06:c3:44:ea:1f:6e:0e:9c:d8:0e:
dd:6b:4e:00:1a:7c:53:a7:83:30:49:7f:c8:5d:dd:46:03:7f:
d5:f0:18:36:3d:f4:aa:ad:d4:64:bb:c9:af:71:63:38:21:c2:
54:9e:69:4d:10:20:1c:50:35:b0:5c:67:cf:7c:db:95:e8:59:
64:f4:2f:f5:3d:ec:8c:3f:84:ec:67:33:28:7b:99:fc:c5:9a:
be:5d:09:df:d1:91:6d:0a:d7:1d:9b:2b:6e:e1:78:9c:58:0b:
ca:40:93:22:8c:40:c3:dc:74:1d:63:8c:d0:30:ac:db:a6:49:
8a:dd:d2:c1:cc:a4:cb:24:63:e5:47:b1:0e:d8:fe:28:72:30:
44:f4:9f:07:be:ea:8d:61:ce:10:32:7b:ac:24:eb:ba:e3:3e:
cb:e8:e9:51:be:b8:51:3c:3f:2c:53:8f:a3:ac:92:ce:0d:35:
eb:d0:f5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:03 2025 by rpki-client