
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
File: 43FB377824B048048B8756B6C65C599B82AEB5B9.mft (raw, json)
Hash identifier: +iOwhAt55UyZJhUrrI3Q639UFEuuoPvipq7Lh6eCLcY=
Subject key identifier: 05:7E:E5:30:64:6E:89:97:89:9E:AE:14:67:1B:BA:BF:C9:D0:1E:F9
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial: 33E2E9CAE6F6424F3EE7C3D70553976CB2304B1F
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
Manifest number: 026C
Signing time: Tue 04 Nov 2025 09:14:39 +0000
Manifest this update: Tue 04 Nov 2025 09:09:39 +0000
Manifest next update: Wed 05 Nov 2025 11:33:39 +0000
Files and hashes: 1: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (hash: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY=)
2: 326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (hash: wdy7zhj9prGo6bSgGDkTv3nBiTLVF8B2Xn97a7b8uwM=)
3: 43FB377824B048048B8756B6C65C599B82AEB5B9.crl (hash: csisoXpHdQR2Y7sv0+Gul9rq+qKp16QJLlH8Dvg1LlU=)
4: 6F08383FF15292BFB6A427602811D5E225F0853C.cer (hash: DwPyhoPAg32N+V7bitfMVwCIUjikjYCTsp7qjFCQVio=)
5: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (hash: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs=)
6: 326131343a3763323a3a2f33312d3332203d3e203531333936.roa (hash: BnqGqWCqFbZRAQvqh2fuARYnYagyLSJRBck3hTgawF8=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e2:e9:ca:e6:f6:42:4f:3e:e7:c3:d7:05:53:97:6c:b2:30:4b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Validity
Not Before: Nov 4 09:09:39 2025 GMT
Not After : Nov 5 11:33:39 2025 GMT
Subject: CN=057EE530646E8997899EAE14671BBABFC9D01EF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:75:7b:b6:23:bc:ed:6f:79:4c:fc:b7:cf:
29:db:50:53:71:f6:d4:20:21:78:90:32:63:1e:5d:
a6:e8:1a:67:30:6c:df:7f:b7:39:0f:25:99:f3:82:
84:37:81:05:bf:60:e7:80:ea:76:d8:8c:5d:79:18:
53:d6:19:0c:5d:fc:52:f8:1c:eb:37:94:1a:3e:05:
50:87:08:24:b0:06:bc:58:b6:bf:fe:91:cc:01:50:
a7:43:f6:34:aa:4f:d3:09:b2:9c:42:1a:30:e2:c1:
0d:9f:df:2e:db:ca:09:a9:fb:e9:4a:14:b9:05:a3:
e8:65:0c:6d:99:2a:37:d8:3a:89:d1:e7:41:1d:89:
32:e1:03:2c:cf:4d:4b:c5:a9:a4:b6:ce:55:b9:79:
18:a3:b1:fd:c3:81:da:23:8f:e7:e6:7c:9d:18:02:
d3:85:d2:22:40:8c:a2:4e:32:57:05:d0:51:7c:ea:
4c:25:89:0e:0e:e2:4a:c9:52:bc:1d:fe:7b:5a:a0:
00:d8:00:82:4a:9b:2c:5a:ba:cf:a0:3f:84:61:8a:
f4:15:03:6a:0c:1e:68:82:1f:3c:e9:b9:4a:3d:43:
15:85:7b:85:a9:67:07:c8:ca:00:d9:c5:45:67:08:
1c:46:5c:7e:eb:fc:4d:c4:86:77:b0:e2:fd:d4:8c:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7E:E5:30:64:6E:89:97:89:9E:AE:14:67:1B:BA:BF:C9:D0:1E:F9
X509v3 Authority Key Identifier:
keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:d5:c2:ce:8c:3b:43:3f:3f:99:6d:60:59:e2:c2:b9:18:
47:bf:07:67:f5:23:2c:78:3d:f0:79:cf:09:98:72:94:5b:eb:
a1:ef:d6:ed:a0:61:e4:ea:be:41:39:05:42:f2:3a:c4:da:e7:
36:d6:48:62:b4:11:4b:ab:c6:b7:ae:ba:71:94:37:6e:5c:db:
a4:1d:1e:0b:3f:86:1c:8e:96:5a:e1:0c:8e:63:06:82:c2:b7:
34:5d:a3:52:42:ae:db:b6:03:bb:6e:99:ff:36:58:20:2e:6b:
e6:26:9d:58:90:26:37:54:58:45:ab:f8:6e:99:df:09:59:0c:
c8:51:05:fe:e7:7d:79:c3:88:ab:23:1f:1f:f3:97:97:0d:12:
05:e9:fb:5a:bb:4d:3a:d2:de:fb:74:75:81:88:b5:e1:b6:a2:
b4:b6:c8:b8:8e:d6:88:d2:d0:a7:f1:fd:f6:47:8c:19:a6:9c:
c3:60:75:1d:cd:a7:50:eb:12:0b:78:79:03:d2:ff:50:04:d0:
7c:89:fe:be:65:2b:2f:35:60:73:77:1e:2c:9c:66:ac:29:a7:
89:a3:44:6b:59:0a:08:61:02:ce:23:6b:ef:e2:6e:cf:b9:58:
06:3d:28:a6:52:ac:a3:27:75:0e:5b:9e:b7:e3:7f:ed:d9:7f:
21:e6:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:30:27 2025 by rpki-client