Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: orgWHrKyH7mAi3t2hdkX4NlXoe9so82PrAt+zp+b2Yw=
Subject key identifier: 91:59:8C:8E:C8:A1:BC:17:A0:4F:06:16:C6:D8:FA:14:27:A2:B5:3D
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01987373ECA7D9E7539944283145FA6AFF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 15AC
Signing time: Mon 04 Aug 2025 05:00:33 +0000
Manifest this update: Mon 04 Aug 2025 05:00:33 +0000
Manifest next update: Tue 05 Aug 2025 05:00:33 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: HGUcsB8tyyEe22W9rcdY1SfBQPRy3MQmUf0EHgHMSJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:ec:a7:d9:e7:53:99:44:28:31:45:fa:6a:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Aug 4 05:00:33 2025 GMT
Not After : Aug 5 05:00:33 2025 GMT
Subject: CN=91598c8ec8a1bc17a04f0616c6d8fa1427a2b53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:bc:cb:0f:82:66:24:99:68:22:2e:6a:6f:
ee:50:1a:aa:7c:c4:01:7e:e8:b0:c8:8d:88:66:8d:
0d:11:ca:fc:38:86:77:5c:c5:30:01:83:ff:fb:d4:
2a:f4:2e:99:c4:f6:ad:06:95:8f:0a:99:0e:4f:fb:
a1:21:56:0c:b6:32:bf:87:94:0f:7d:05:f4:3d:b4:
01:35:5a:69:66:9b:78:65:cb:b3:fb:b5:d5:4f:72:
32:3f:9e:49:2c:b3:7e:44:ed:ad:ec:01:e1:91:76:
b8:8b:13:9c:f3:be:63:02:16:62:c1:97:2f:ce:0e:
80:3d:0b:a5:90:87:7d:09:e5:0e:4d:b8:84:12:92:
17:24:86:f1:b4:04:6a:cd:77:cb:a8:e3:e6:61:4d:
34:4f:32:64:cf:00:6b:27:cd:05:03:62:f4:de:6e:
0f:48:5f:f2:f1:a9:02:36:44:8a:64:17:5f:78:de:
12:a1:af:2d:0c:38:15:a0:88:bf:50:6a:0a:f0:00:
93:4e:a4:b9:c4:63:33:a9:66:cb:81:49:1e:fc:39:
0d:77:7e:a8:fa:cf:38:80:43:fe:32:c0:77:c9:aa:
0b:d9:e7:f8:6d:86:8d:d4:b9:83:78:2a:7b:7f:79:
86:e6:9e:bb:bd:b6:3d:fc:fd:64:e2:d4:97:71:4f:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:8C:8E:C8:A1:BC:17:A0:4F:06:16:C6:D8:FA:14:27:A2:B5:3D
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:36:73:aa:0c:d7:08:f8:aa:9e:4d:79:68:e1:3b:4b:95:b4:
fb:84:9a:62:6d:55:5f:1a:73:0c:b6:4b:0b:e7:93:99:e9:9b:
49:3c:73:ae:0a:b3:df:14:2e:5e:0a:75:97:6f:75:11:a7:07:
71:e9:be:86:76:49:8c:cd:ab:ab:d0:51:e6:de:61:23:2d:e1:
5a:e0:ed:30:db:df:8b:69:c8:a5:2a:26:88:4d:11:be:33:3f:
dd:0d:e9:ad:a3:b7:34:fe:dc:8b:58:b8:5f:fd:b2:8e:33:c2:
15:ef:4a:3a:0d:07:e1:12:4d:40:67:f3:83:9e:29:5c:8c:bb:
1f:68:03:1b:7a:ef:37:7e:74:60:69:05:b2:4d:dc:9e:4a:1f:
67:58:54:22:98:26:c6:2f:e6:ff:f5:15:df:75:e7:5a:0f:85:
8d:f3:f0:c1:cd:6e:9c:95:18:61:3f:28:82:ae:17:b3:3f:c3:
c7:8e:d3:7e:46:8e:5c:1f:e2:01:9e:14:d5:d4:c9:ee:6c:5d:
bb:84:1f:a2:4e:93:d9:a6:ff:78:36:e7:dc:89:32:06:80:5f:
7f:2f:a1:a8:5a:64:54:6c:b5:ef:f5:72:8d:80:e2:57:7c:b0:
d3:92:ec:f7:b8:7c:42:2f:40:36:94:ae:46:05:d8:ca:4d:a5:
3e:07:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:01 2025 by rpki-client