Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: z4u/WPDlLQUUUZz0zerSAqQs6bDDjDREkm9Q1aLiQks=
Subject key identifier: 17:F7:EC:9A:6B:A5:1A:75:07:BD:8E:07:3A:F7:CB:6E:BE:C8:14:00
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01964744E2FE3E382F680B5CEDF9EA6AFD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 148C
Signing time: Fri 18 Apr 2025 05:00:18 +0000
Manifest this update: Fri 18 Apr 2025 05:00:18 +0000
Manifest next update: Sat 19 Apr 2025 05:00:18 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: 74uj+bn4B5FFYFpkhcbPbl45N79Fo4akKh9mrTov65A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:44:e2:fe:3e:38:2f:68:0b:5c:ed:f9:ea:6a:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Apr 18 05:00:18 2025 GMT
Not After : Apr 19 05:00:18 2025 GMT
Subject: CN=17f7ec9a6ba51a7507bd8e073af7cb6ebec81400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:49:40:d5:31:64:f5:a2:e9:03:90:9f:07:
c7:6b:e7:d4:ed:9f:73:8d:65:7e:46:78:39:60:83:
2b:56:f5:7c:36:de:df:e1:45:64:30:b0:18:f5:b2:
97:13:fc:6e:48:2f:e0:a3:12:b3:29:a8:21:9b:56:
d8:1f:a6:7c:57:4e:19:0a:cb:cf:61:6c:aa:41:7a:
8c:c4:a6:bc:61:01:a7:6b:87:92:8e:0c:a7:f4:fa:
f6:4e:42:cb:c8:d7:6c:6b:b0:23:07:af:09:9a:a9:
f5:5c:5d:f0:a9:c9:b3:2b:80:b9:89:97:3a:5e:c5:
73:62:c8:ad:c7:b2:a5:ca:ba:8d:59:27:53:8d:f8:
ff:ca:ca:f9:c3:c1:7a:39:cb:79:c2:c0:96:bc:ef:
c7:6e:7a:f7:aa:34:28:e0:ab:90:8a:7c:9d:99:1b:
21:2e:e6:00:9a:6b:46:b5:9f:64:f8:4c:f2:88:d1:
d9:e8:db:0d:71:9c:c8:b1:40:94:bc:a5:00:8b:59:
0f:f2:dc:62:8b:06:ec:df:75:ac:9c:7e:87:7e:9c:
e3:98:ac:f1:f6:d7:1d:a2:4d:19:39:ee:51:68:72:
36:6f:b6:b8:22:65:f3:c8:d3:20:9b:4b:7d:51:a5:
f6:da:b5:e2:58:33:5c:2b:95:5f:cb:1f:1b:f8:d1:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F7:EC:9A:6B:A5:1A:75:07:BD:8E:07:3A:F7:CB:6E:BE:C8:14:00
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:60:59:91:b7:73:8e:1c:21:9a:22:d5:a0:b8:f0:f1:3c:
c1:d9:e4:3a:f9:2b:e0:a2:8f:9a:e5:7e:84:98:13:2a:81:86:
35:ee:c9:08:f1:ad:48:49:7c:87:32:14:31:94:73:c9:c3:25:
db:37:2b:99:4b:dd:bc:4d:db:38:28:5d:97:9f:24:c7:bf:e0:
9c:1d:69:fb:05:36:74:a6:12:ee:c1:94:23:b3:47:f1:60:6b:
75:b6:f5:28:67:47:cc:be:ad:e6:b1:0a:dd:f2:ea:07:28:97:
29:32:12:92:de:7a:e3:e4:1f:f6:d9:70:2c:02:65:37:39:55:
8a:c6:b0:c5:12:25:06:d4:cd:ee:c6:ad:5f:51:99:80:f6:be:
57:86:db:ce:7b:52:ba:f4:07:48:c0:1e:f3:0e:06:3b:bb:2b:
d8:6b:ac:e5:d7:b9:a2:e1:5c:5d:42:0c:b8:89:d4:25:27:fb:
b8:42:7c:d4:56:69:46:a2:91:80:3a:95:37:6b:cc:de:e9:6b:
97:9a:71:1b:60:cb:d1:cc:bb:67:f1:fe:38:4b:e5:3e:7c:20:
83:99:15:31:6a:ea:0f:30:b6:4f:66:55:59:3d:43:84:67:76:
70:56:f1:74:d7:35:91:b3:3d:5a:df:a5:42:a1:66:31:35:aa:
e4:77:30:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHROL+PjgvaAtc7fnqav2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTAwMjAyMmI3YTNlNDc5MGI4YjRlMmY2ZDViN2EzZGFi
ZGRjZTEwHhcNMjUwNDE4MDUwMDE4WhcNMjUwNDE5MDUwMDE4WjAzMTEwLwYDVQQD
EygxN2Y3ZWM5YTZiYTUxYTc1MDdiZDhlMDczYWY3Y2I2ZWJlYzgxNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtNJQNUxZPWi6QOQnwfHa+fU7Z9z
jWV+Rng5YIMrVvV8Nt7f4UVkMLAY9bKXE/xuSC/goxKzKaghm1bYH6Z8V04ZCsvP
YWyqQXqMxKa8YQGna4eSjgyn9Pr2TkLLyNdsa7AjB68Jmqn1XF3wqcmzK4C5iZc6
XsVzYsitx7KlyrqNWSdTjfj/ysr5w8F6Oct5wsCWvO/Hbnr3qjQo4KuQinydmRsh
LuYAmmtGtZ9k+EzyiNHZ6NsNcZzIsUCUvKUAi1kP8txiiwbs33WsnH6HfpzjmKzx
9tcdok0ZOe5RaHI2b7a4ImXzyNMgm0t9UaX22rXiWDNcK5Vfyx8b+NH2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBf37JprpRp1B72OBzr3y26+yBQAMB8GA1UdIwQY
MBaAFKRQAgIrej5HkLi04vbVt6PavdzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEt
YjM2N2ViZGYzMDJiLzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kODA5YjMtMzY3NS00ZmQ4LTg4MjEtYjM2N2ViZGYzMDJi
LzEvcEZBQ0FpdDZQa2VRdUxUaTl0VzNvOXE5M09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnepgWZG3
c44cIZoi1aC48PE8wdnkOvkr4KKPmuV+hJgTKoGGNe7JCPGtSEl8hzIUMZRzycMl
2zcrmUvdvE3bOChdl58kx7/gnB1p+wU2dKYS7sGUI7NH8WBrdbb1KGdHzL6t5rEK
3fLqByiXKTISkt564+Qf9tlwLAJlNzlVisawxRIlBtTN7satX1GZgPa+V4bbzntS
uvQHSMAe8w4GO7sr2Gus5de5ouFcXUIMuInUJSf7uEJ81FZpRqKRgDqVN2vM3ulr
l5pxG2DL0cy7Z/H+OEvlPnwgg5kVMWrqDzC2T2ZVWT1DhGd2cFbxdNc1kbM9Wt+l
QqFmMTWq5Hcwdg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:58:46 2025 by rpki-client