Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: tLmFbv1MVCDMfkVZ4gZmYtSksgBxNdcAcLXz4MrkYhI=
Subject key identifier: 38:54:DF:C5:CF:3A:6F:B8:30:AD:F8:37:25:D1:D7:A0:3F:4F:89:95
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019770ACB550EF99299FDCD8C5FAD828FCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1526
Signing time: Sat 14 Jun 2025 23:00:56 +0000
Manifest this update: Sat 14 Jun 2025 23:00:56 +0000
Manifest next update: Sun 15 Jun 2025 23:00:56 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: epFLhRICLJ1OPqN3LcfwsAHC80UuZz+PTYq7ez4HkMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:b5:50:ef:99:29:9f:dc:d8:c5:fa:d8:28:fc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jun 14 23:00:56 2025 GMT
Not After : Jun 15 23:00:56 2025 GMT
Subject: CN=3854dfc5cf3a6fb830adf83725d1d7a03f4f8995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:7f:aa:e6:a9:77:93:25:1d:45:fa:39:25:
38:c6:d0:8c:8a:57:0e:08:67:24:67:f8:d2:bd:b8:
f4:68:41:f1:09:7b:52:c5:01:01:47:9d:4b:6d:6d:
de:ce:59:01:cd:e8:1c:9b:68:42:c0:5e:bb:d3:a0:
75:b7:a4:ba:40:52:76:f9:de:79:b2:a9:dd:d3:33:
bc:2d:4a:6f:31:00:b4:99:9e:85:ed:96:8f:8a:f6:
79:b3:71:2f:24:aa:73:01:d5:de:df:10:83:0a:16:
02:39:c6:11:39:bb:35:2a:c8:e7:4e:be:4f:38:15:
7a:1f:9d:84:3b:46:0d:ac:9e:5b:48:43:d2:a9:a3:
bb:bb:a1:a3:37:63:a7:b9:48:ee:54:6a:c5:04:84:
fb:27:35:65:e4:e1:76:3f:5d:5a:64:c9:a2:a7:df:
a5:5b:f9:65:52:4b:be:72:4e:94:99:50:cb:78:55:
32:54:12:21:db:02:c0:8f:38:7e:fe:88:41:64:3e:
c6:08:de:82:c8:a4:97:a8:d1:8f:13:70:71:8a:22:
22:33:17:80:a3:54:51:fb:9d:7c:05:5f:10:b2:70:
14:ac:2d:17:5d:b7:0e:53:6f:b9:15:9f:b0:56:8b:
b9:1c:38:4d:e8:c5:16:6e:5c:b2:e6:5d:a3:a5:c6:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:DF:C5:CF:3A:6F:B8:30:AD:F8:37:25:D1:D7:A0:3F:4F:89:95
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:b6:2b:43:f3:ba:12:e2:c2:3f:d1:a7:1a:89:61:26:93:
68:7f:ac:fd:a7:a2:91:cd:d3:85:34:03:6a:79:80:34:36:a7:
87:5a:d7:2f:04:56:23:57:4b:10:81:01:47:31:a2:f8:8d:dc:
96:57:35:54:71:95:34:bf:f7:2b:ad:9e:51:b6:9b:8c:00:0b:
81:e6:5a:cf:b2:0d:a1:30:b9:be:a9:28:31:58:08:82:4d:80:
b7:47:1a:2d:4c:d6:46:b8:10:34:26:70:3a:17:6c:b2:5b:4d:
76:cd:8d:24:5e:56:1a:cb:ca:93:de:9a:39:9f:d6:4d:90:40:
92:5c:a9:c0:05:e1:c9:e3:b4:9b:17:0d:50:e3:58:34:55:d6:
90:4f:76:7c:6a:fd:1c:f1:45:10:03:f7:64:4a:6a:a9:ec:3b:
30:01:68:5b:8a:3a:41:d7:f5:53:2e:2d:e3:08:39:73:70:81:
4c:3c:fb:32:80:8c:90:a4:2a:1f:83:f4:32:a9:69:d0:b3:f5:
9e:ae:80:2b:31:61:a4:59:7b:25:13:17:e0:22:47:b6:9e:6c:
5e:3c:f3:57:7c:58:2d:da:86:ed:6d:4e:be:7f:44:ae:de:b7:
0d:43:16:be:0f:75:13:1a:ee:e2:53:35:c9:6e:df:ef:09:10:
5e:ba:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:25 2025 by rpki-client