Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier: kOOtKSjPFMh4uKytfRUI6KRiK5JXUzcIPaeNR9dFH0g=
Subject key identifier: C5:39:DC:1F:36:73:F9:31:57:61:C9:58:D7:83:CE:1A:38:65:22:5C
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial: 11FAA736AD5F6EB00E622EDE5FC1CA3ED88AD14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number: 0265
Signing time: Sun 02 Nov 2025 04:19:38 +0000
Manifest this update: Sun 02 Nov 2025 04:14:38 +0000
Manifest next update: Mon 03 Nov 2025 06:47:38 +0000
Files and hashes: 1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: fsgKIQQLdsqvbDWc44O2aQxWFBYv/7OaXJdD/qi7fTA=)
2: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fa:a7:36:ad:5f:6e:b0:0e:62:2e:de:5f:c1:ca:3e:d8:8a:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Validity
Not Before: Nov 2 04:14:38 2025 GMT
Not After : Nov 3 06:47:38 2025 GMT
Subject: CN=C539DC1F3673F9315761C958D783CE1A3865225C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:86:9c:d5:1c:96:cb:58:5a:94:35:bb:fd:
21:a7:fd:dd:d6:47:a5:e4:e8:c1:0f:2f:fb:0b:f1:
d1:94:75:1c:57:bc:ee:13:d0:de:f7:35:f0:85:1b:
53:9e:f9:4d:a8:4b:f4:55:e7:fa:ea:e9:c6:26:27:
2f:52:09:87:a2:04:f0:95:ad:31:b7:c3:9f:7f:7c:
c0:fc:d3:6a:c2:25:b1:a8:f5:43:4b:7d:95:58:70:
5d:b4:8e:e8:10:35:48:ea:a3:55:28:d4:66:18:49:
c0:6e:ce:ed:42:52:70:48:21:f0:1e:85:1e:f8:5c:
4b:e2:ef:0c:0b:1b:13:e8:c0:66:43:c8:1b:a8:cf:
96:62:fe:f8:64:3c:13:5d:fd:0f:19:ec:87:a1:55:
7d:41:a3:61:0c:ac:b9:16:07:6c:e2:fd:93:42:36:
c7:71:c3:9e:ce:55:84:9f:01:63:d7:67:df:e5:c3:
7c:c1:51:3d:f9:df:d9:ed:2c:01:d6:3e:61:ab:a7:
97:07:f9:86:6b:df:68:b5:04:3c:cb:fb:5f:34:3c:
15:e2:9d:bd:74:95:23:d8:80:45:07:f5:b6:77:67:
9a:b3:c9:a2:60:1a:67:ba:4c:df:b6:01:88:fb:44:
29:3e:7e:a2:0b:03:f0:71:08:21:46:5a:bc:6a:b8:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:DC:1F:36:73:F9:31:57:61:C9:58:D7:83:CE:1A:38:65:22:5C
X509v3 Authority Key Identifier:
keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b9:06:5d:7f:96:cc:7f:a1:2e:e1:6b:bf:ef:3a:9f:11:c3:
1d:34:39:8c:4e:40:f3:90:26:1d:c2:0d:bd:c7:ca:3d:6b:be:
dc:a9:43:04:88:0a:0b:a9:c9:49:91:25:f3:73:a5:28:75:6c:
0c:f2:5f:54:6e:79:7f:cb:b4:24:f7:57:30:52:25:01:b8:1d:
a8:d7:27:4f:3d:7e:f6:5a:0d:01:03:72:f7:d2:b8:fb:d3:2b:
fa:f8:1f:32:ef:97:15:34:81:53:db:14:fa:67:49:7a:e7:49:
e8:c8:c3:34:ae:53:f1:9d:e9:41:57:b7:0f:70:81:1c:e4:ac:
da:41:4f:cd:02:5b:1a:6d:16:81:7f:d1:4b:6b:82:91:fb:ff:
a0:a5:27:11:23:75:d0:7a:da:bc:e6:09:7d:1a:8c:7e:03:9c:
35:7a:cf:ca:5a:bf:51:86:60:74:c0:d5:3d:1e:82:8a:29:0d:
11:e3:bc:d6:51:21:ac:47:af:c1:8e:a7:6e:2a:c4:99:5a:f8:
a7:ea:13:c6:f9:2c:ce:02:b0:08:d8:b8:d0:95:cd:95:6f:a7:
43:0e:9a:14:4d:90:ea:d0:62:8f:6d:b6:6f:14:64:2c:34:84:
7b:ed:7e:01:3c:16:87:af:30:64:9b:63:ec:e5:25:01:c8:e4:
16:1f:31:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 2 11:15:02 2025 by rpki-client