Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: fgW9QkW5Tx7YIMb1HlqI5EQqNUuPMB3Pqbd/f62VeD8=
Subject key identifier: A4:F1:C3:82:FC:4E:E1:93:3E:30:84:E8:DC:A3:CD:13:69:A4:0A:24
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019A4C98729A0BA7E307C706760BB93A2DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 02:00:50 +0000
Manifest this update: Tue 04 Nov 2025 02:00:50 +0000
Manifest next update: Wed 05 Nov 2025 02:00:50 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: +f2kOKASYdI5G2VbuFQQQ9vKLu9pyf0WEo8bXGHlx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:72:9a:0b:a7:e3:07:c7:06:76:0b:b9:3a:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Nov 4 02:00:50 2025 GMT
Not After : Nov 5 02:00:50 2025 GMT
Subject: CN=a4f1c382fc4ee1933e3084e8dca3cd1369a40a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:89:9a:03:d0:38:bc:aa:fb:78:6d:44:0c:
ea:35:79:fe:dc:8d:d1:dd:ef:bf:d1:b4:e3:cd:91:
4c:4c:d8:30:7c:4c:c1:c4:90:28:76:21:fe:05:81:
06:fc:a4:0c:6e:ae:b0:79:e1:5f:93:44:e9:7f:b0:
7f:a7:da:25:b4:4f:d8:60:ab:17:b8:a8:80:89:07:
0e:5e:8c:75:ef:5d:b9:ac:f2:4d:14:fc:c9:51:7d:
3a:b6:10:c6:53:9f:d9:6f:bd:29:d8:fc:f2:65:3d:
3a:64:c7:e0:93:e1:49:87:28:04:04:f0:de:e9:80:
31:d7:e6:59:b7:0b:1a:19:1d:a9:ad:f1:09:fd:f9:
69:41:22:2e:3b:c7:2e:3f:e8:62:95:5f:f6:13:88:
03:74:b8:d3:7d:45:35:f8:20:e8:66:31:5b:e5:7c:
68:3c:42:a5:74:c2:72:7a:ce:53:d0:a2:0b:56:89:
62:4a:fc:2e:3a:79:3d:22:e2:71:1f:56:23:de:28:
31:ea:39:9c:49:fc:30:50:d4:c3:9b:90:ab:f4:c7:
ff:3f:f9:3d:a4:61:a2:d5:2a:41:12:70:f2:6b:bd:
52:0a:de:f1:ad:1c:94:1e:3e:e9:d9:d1:d8:52:02:
bc:41:2e:b3:b6:14:f4:58:3e:56:38:a4:86:b7:31:
75:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:C3:82:FC:4E:E1:93:3E:30:84:E8:DC:A3:CD:13:69:A4:0A:24
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:c8:ec:05:31:16:5d:eb:32:76:8b:67:d0:5b:c3:50:08:
a6:8d:53:60:5e:15:77:71:4f:bd:49:10:ff:3c:50:36:45:be:
ab:89:40:3b:12:29:8f:2d:b9:6a:49:31:a6:7f:6a:a3:1e:f3:
9c:30:88:16:dc:22:c3:ec:66:b9:41:57:07:f9:11:54:9e:02:
31:e1:c7:82:27:4b:21:0c:1b:3a:ae:6c:c3:d0:4a:ef:11:de:
76:14:33:20:4a:e3:39:9d:ce:2c:b9:47:11:4f:6f:04:40:b2:
09:fc:11:d4:eb:12:51:82:83:34:1a:7f:5a:58:81:9e:0c:e6:
d0:76:ea:13:78:16:7d:9d:a7:c2:41:1e:54:b0:2c:e8:6e:7a:
f2:af:b1:ff:cd:ad:07:95:d6:ee:94:a2:e8:77:cd:71:76:43:
72:38:0f:55:ce:62:c4:12:af:e3:54:15:e7:9d:ce:de:a5:12:
a3:22:ff:9c:0a:7c:68:88:f8:a9:5f:25:fa:a8:0a:e2:42:4b:
46:a5:e4:98:8b:b8:58:3d:e0:8c:2e:e7:17:24:4e:50:a3:9d:
38:ef:8b:88:00:b7:5c:0f:d2:60:cd:bf:22:d6:76:47:7f:8f:
f8:f1:10:4c:d2:10:06:d1:e1:ae:db:e1:a8:fc:bb:20:c4:b7:
ff:24:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:31 2025 by rpki-client