Manifest
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier: 4gCrof6z92KBka38C9g6TGL4b5vpzD/VAaSdGK9eK1Q=
Subject key identifier: 61:4B:84:A5:6D:BF:CD:12:4A:29:63:3B:C9:CD:CF:3A:88:61:FA:4C
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer: /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial: 6981FF8A72E50D9BF6DA230C0C50085F4ABCB58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number: 0228
Signing time: Wed 17 Sep 2025 17:19:24 +0000
Manifest this update: Wed 17 Sep 2025 17:14:24 +0000
Manifest next update: Thu 18 Sep 2025 17:46:24 +0000
Files and hashes: 1: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
2: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: Rs3Qghsc+/c+yy2ZODXk6SQSH8673bRdoVs1c/6A33w=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 17:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:81:ff:8a:72:e5:0d:9b:f6:da:23:0c:0c:50:08:5f:4a:bc:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Validity
Not Before: Sep 17 17:14:24 2025 GMT
Not After : Sep 18 17:46:24 2025 GMT
Subject: CN=614B84A56DBFCD124A29633BC9CDCF3A8861FA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:1c:55:d6:cc:53:be:ed:4f:dd:32:40:0a:
78:0d:a8:90:99:eb:9c:fb:76:7f:4f:4e:ce:6e:be:
8f:1c:ff:91:b8:5c:40:02:a2:57:2d:76:12:30:ba:
2e:7a:d9:00:7b:96:14:36:96:40:b5:e6:28:4c:7d:
75:15:4f:a2:7b:f4:57:2c:67:ff:b3:76:69:4a:11:
af:c5:80:8c:ca:56:ed:44:d8:37:2b:aa:58:41:94:
09:4f:b3:db:93:85:47:14:75:c0:7a:b1:82:60:c9:
bf:7b:21:cf:e4:c9:0f:61:5f:06:d6:2f:5a:a4:44:
8d:32:ed:d9:55:18:bf:4a:b3:98:62:a1:18:83:24:
d7:6f:7f:06:56:96:00:8f:b5:0c:97:2b:7d:a4:71:
68:b1:0b:8c:63:dd:e4:00:cc:bd:f1:d7:5f:0d:e5:
49:2f:05:46:26:6b:5f:66:03:46:5f:82:82:ff:76:
f2:b6:34:d1:f6:1d:6e:72:67:55:6d:3b:bd:7f:6a:
83:05:ea:b2:6c:8a:04:1b:a0:4a:61:b5:ed:0d:20:
d9:8f:b4:8b:70:1b:52:ad:ec:18:4e:3b:bb:6f:a3:
84:ac:7f:fc:2a:22:c8:d8:d0:12:16:ae:8e:00:1f:
cd:51:1e:3c:d0:94:9b:bb:ed:89:bd:fb:27:10:8f:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4B:84:A5:6D:BF:CD:12:4A:29:63:3B:C9:CD:CF:3A:88:61:FA:4C
X509v3 Authority Key Identifier:
keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:66:a3:d0:82:18:96:17:48:70:c7:ef:48:d3:94:6e:4a:e7:
73:a9:d5:4f:df:6c:15:02:0d:e3:5f:4c:fb:72:97:b5:e6:aa:
b1:7c:57:10:8d:1f:3a:57:db:f4:a5:ac:eb:ef:5e:b5:27:c1:
fd:58:bd:89:3c:99:53:ce:23:50:ff:3c:8d:d1:a6:9a:fd:08:
c3:13:77:9e:d6:82:90:59:6b:f8:d6:99:be:c7:56:80:3b:f9:
fd:3b:61:5f:7d:f9:d3:1d:33:dc:7d:19:93:3b:c4:bb:36:73:
da:86:59:1e:0f:51:04:82:00:00:57:bf:4c:5b:4c:46:5e:28:
65:2b:e9:5a:b1:c5:34:29:53:3a:1c:88:29:b1:59:06:2e:30:
0c:d7:5a:a9:a1:f7:ff:3c:d4:d2:12:a9:99:78:36:18:bf:7a:
9e:43:d6:0f:0c:16:24:b5:40:94:cb:39:d3:4c:ec:35:22:06:
fd:bb:dd:c7:7c:01:d9:90:0d:66:52:4a:48:53:9c:42:9a:a4:
75:48:d3:6c:0e:7f:45:37:2c:98:29:08:6d:b2:75:b1:a9:d3:
3a:91:e5:e0:63:a3:47:bf:4c:64:53:83:2d:70:1a:2a:04:06:
c3:b1:94:b5:a5:11:27:57:4f:57:49:c2:9a:e5:ed:e3:2a:ed:
77:0b:aa:d4
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUaYH/inLlDZv22iMMDFAIX0q8tYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhkMjNlYzVlNzg3YWFhZTA1MmE4NzczZmQ5ZGZlYzVi
MWZiYzNhMjAeFw0yNTA5MTcxNzE0MjRaFw0yNTA5MTgxNzQ2MjRaMDMxMTAvBgNV
BAMTKDYxNEI4NEE1NkRCRkNEMTI0QTI5NjMzQkM5Q0RDRjNBODg2MUZBNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3RxV1sxTvu1P3TJACngNqJCZ
65z7dn9PTs5uvo8c/5G4XEAColctdhIwui562QB7lhQ2lkC15ihMfXUVT6J79Fcs
Z/+zdmlKEa/FgIzKVu1E2DcrqlhBlAlPs9uThUcUdcB6sYJgyb97Ic/kyQ9hXwbW
L1qkRI0y7dlVGL9Ks5hioRiDJNdvfwZWlgCPtQyXK32kcWixC4xj3eQAzL3x118N
5UkvBUYma19mA0ZfgoL/dvK2NNH2HW5yZ1VtO71/aoMF6rJsigQboEphte0NINmP
tItwG1Kt7BhOO7tvo4Ssf/wqIsjY0BIWro4AH81RHjzQlJu77Ym9+ycQj1GdAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUYUuEpW2/zRJKKWM7yc3POohh+kwwHwYDVR0j
BBgwFoAUKNI+xeeHqq4FKodz/Z3+xbH7w6IwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vUGZjbG91
ZC8xLzI4RDIzRUM1RTc4N0FBQUUwNTJBODc3M0ZEOURGRUM1QjFGQkMzQTIuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LTkkteGVlSHFxNEZLb2R6X1ozLXhiSDd3
NkkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yZXBv
LnJwa2kuc3BhY2UvcmVwby9QZmNsb3VkLzEvMjhEMjNFQzVFNzg3QUFBRTA1MkE4
NzczRkQ5REZFQzVCMUZCQzNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKFmo9CCGJYXSHDH70jTlG5K
53Op1U/fbBUCDeNfTPtyl7XmqrF8VxCNHzpX2/SlrOvvXrUnwf1YvYk8mVPOI1D/
PI3Rppr9CMMTd57WgpBZa/jWmb7HVoA7+f07YV99+dMdM9x9GZM7xLs2c9qGWR4P
UQSCAABXv0xbTEZeKGUr6VqxxTQpUzociCmxWQYuMAzXWqmh9/881NISqZl4Nhi/
ep5D1g8MFiS1QJTLOdNM7DUiBv273cd8AdmQDWZSSkhTnEKapHVI02wOf0U3LJgp
CG2ydbGp0zqR5eBjo0e/TGRTgy1wGioEBsOxlLWlESdXT1dJwprl7eMq7XcLqtQ=
-----END CERTIFICATE-----
Generated at Thu Sep 18 08:17:54 2025 by rpki-client