Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: 1bSqFHVwAF6PYNt1F/I5XNR15F/JqEdwmaMwu0Lx/G0=
Subject key identifier: 2B:5E:32:91:A0:E3:81:A0:07:A9:87:94:37:F6:A0:9A:EB:99:9B:4D
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01983D60F81B087CBF0C3B2846CC7C9D1419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1590
Signing time: Thu 24 Jul 2025 17:00:21 +0000
Manifest this update: Thu 24 Jul 2025 17:00:21 +0000
Manifest next update: Fri 25 Jul 2025 17:00:21 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: fjxkAtOaNcFYpSC27zMcxr2OzXKuWE71lprBlhIyV78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:f8:1b:08:7c:bf:0c:3b:28:46:cc:7c:9d:14:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jul 24 17:00:21 2025 GMT
Not After : Jul 25 17:00:21 2025 GMT
Subject: CN=2b5e3291a0e381a007a9879437f6a09aeb999b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:1d:2d:4f:78:37:8d:6e:a8:f6:5a:90:c5:
25:60:47:95:00:d8:7d:9e:26:f8:09:43:02:f4:21:
e7:67:47:be:c6:b7:f2:f5:e8:09:fd:a2:b2:30:b4:
0b:d0:20:20:d1:44:87:ec:cc:b9:7a:37:ca:bf:55:
71:32:9a:de:45:07:e8:3f:ad:90:dd:e8:e4:e5:0e:
db:03:0b:33:42:a5:0b:5c:a2:c5:fa:25:37:94:e1:
fd:96:b8:6c:47:42:5e:c3:03:43:34:26:c3:19:b9:
22:30:03:cf:c1:35:d8:06:ab:d9:1c:cb:c7:79:eb:
88:a6:96:eb:a6:0e:1c:09:54:5b:7e:49:c8:60:66:
b2:11:22:a4:72:ad:c8:48:39:07:01:34:76:af:18:
dc:67:74:7c:6b:c5:d0:47:a1:d4:e5:2b:74:36:2f:
bc:37:a0:e5:12:4f:90:ea:30:87:91:f3:57:11:d9:
42:e7:8c:d3:b1:78:eb:50:20:00:cb:3a:ef:fd:43:
0b:cd:8b:91:1d:1d:28:28:e3:ae:18:48:a5:1f:54:
92:e6:92:53:5a:3f:dd:97:1f:20:c6:0b:fc:67:22:
b1:0b:c1:49:7e:c6:e7:0f:1e:81:76:83:14:9b:97:
43:46:00:a6:79:3a:ce:35:16:7c:11:e1:cb:b2:db:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5E:32:91:A0:E3:81:A0:07:A9:87:94:37:F6:A0:9A:EB:99:9B:4D
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:28:d1:7e:8a:c9:14:eb:ba:27:ad:87:c2:5b:45:cb:34:
91:e4:14:84:26:68:5f:a8:27:67:6e:9a:57:ba:50:4b:b4:84:
a3:c1:e7:27:9c:a5:96:5a:5d:25:21:59:ab:3b:6f:87:2f:80:
f3:d6:72:f8:df:3f:aa:b6:bb:e0:cc:24:91:fb:eb:f7:21:04:
03:59:f0:83:6d:02:9f:92:6d:8f:72:06:b8:7a:5c:e1:35:6b:
3c:46:ce:ff:8d:70:5f:86:26:74:ff:d0:fb:66:21:ed:6d:f9:
c1:e1:11:d5:75:8b:58:29:fe:9e:5c:7e:17:a7:58:4c:4a:b0:
5e:0e:4d:c5:b8:e9:bf:70:3d:47:7a:97:c5:47:d6:f8:ca:55:
41:3f:7c:03:08:81:61:26:dc:d9:cd:d6:ec:d7:64:f0:b2:60:
c0:b9:49:ca:5f:d7:8f:00:32:f6:cc:e8:4f:99:5c:5d:0b:cf:
24:4f:b6:98:bc:e1:be:73:bc:8e:83:ed:4d:39:3c:bf:0e:aa:
fa:ff:91:6f:f4:36:c7:ed:ee:59:41:16:cf:6b:bd:d8:a4:75:
73:17:a3:bd:65:50:74:5b:9b:04:26:7f:a0:86:2f:98:34:97:
23:7c:40:73:4d:c4:da:64:13:b0:f5:c0:7d:0c:21:c1:ad:20:
46:e0:c0:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9YPgbCHy/DDsoRsx8nRQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjUwNzI0MTcwMDIxWhcNMjUwNzI1MTcwMDIxWjAzMTEwLwYDVQQD
EygyYjVlMzI5MWEwZTM4MWEwMDdhOTg3OTQzN2Y2YTA5YWViOTk5YjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BMdLU94N41uqPZakMUlYEeVANh9
nib4CUMC9CHnZ0e+xrfy9egJ/aKyMLQL0CAg0USH7My5ejfKv1VxMpreRQfoP62Q
3ejk5Q7bAwszQqULXKLF+iU3lOH9lrhsR0JewwNDNCbDGbkiMAPPwTXYBqvZHMvH
eeuIppbrpg4cCVRbfknIYGayESKkcq3ISDkHATR2rxjcZ3R8a8XQR6HU5St0Ni+8
N6DlEk+Q6jCHkfNXEdlC54zTsXjrUCAAyzrv/UMLzYuRHR0oKOOuGEilH1SS5pJT
Wj/dlx8gxgv8ZyKxC8FJfsbnDx6BdoMUm5dDRgCmeTrONRZ8EeHLsttrVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCteMpGg44GgB6mHlDf2oJrrmZtNMB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsco0X6K
yRTruieth8JbRcs0keQUhCZoX6gnZ26aV7pQS7SEo8HnJ5ylllpdJSFZqztvhy+A
89Zy+N8/qra74Mwkkfvr9yEEA1nwg20Cn5Jtj3IGuHpc4TVrPEbO/41wX4YmdP/Q
+2Yh7W35weER1XWLWCn+nlx+F6dYTEqwXg5Nxbjpv3A9R3qXxUfW+MpVQT98AwiB
YSbc2c3W7Ndk8LJgwLlJyl/XjwAy9szoT5lcXQvPJE+2mLzhvnO8joPtTTk8vw6q
+v+Rb/Q2x+3uWUEWz2u92KR1cxejvWVQdFubBCZ/oIYvmDSXI3xAc03E2mQTsPXA
fQwhwa0gRuDAeA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:41:54 2025 by rpki-client