Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: WhSHDK0NnYnyD4U4XZJM+hVMzO79g/DD15ROMtquL2k=
Subject key identifier: 4B:14:68:BB:0D:48:B1:AE:5F:64:CB:03:F6:D4:73:E4:E1:5F:58:5C
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 01974A0CA6045A47559308B01142875A7624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1512
Signing time: Sat 07 Jun 2025 11:00:32 +0000
Manifest this update: Sat 07 Jun 2025 11:00:32 +0000
Manifest next update: Sun 08 Jun 2025 11:00:32 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: Ur74/ubKepjhjpVO/qeAfLV8kBDA1CWIqXbBRxKgxnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:a6:04:5a:47:55:93:08:b0:11:42:87:5a:76:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Jun 7 11:00:32 2025 GMT
Not After : Jun 8 11:00:32 2025 GMT
Subject: CN=4b1468bb0d48b1ae5f64cb03f6d473e4e15f585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:e5:64:13:6e:d6:e6:af:44:50:fb:4f:de:
c6:4d:ed:9d:8f:06:54:b3:08:0a:12:92:c6:57:e8:
da:77:4c:05:81:12:ca:72:92:99:b4:5c:49:cc:19:
24:57:63:0e:7b:c4:e0:35:be:d0:f7:c5:58:db:9f:
77:c0:4d:0b:c6:c4:3d:cc:78:64:74:d4:25:09:cb:
a7:af:7a:c3:7e:97:bc:a0:26:32:74:78:c9:99:03:
de:2e:9a:d3:50:99:ed:39:7e:ce:4d:29:19:7b:ff:
a9:54:f7:a8:e3:69:e4:02:b6:44:65:8e:d3:dd:20:
dc:4d:b8:32:85:1c:6b:71:ca:f9:2b:fc:b6:aa:93:
69:15:73:90:63:07:18:84:78:b0:8a:a4:2e:e9:2e:
94:0a:1b:63:bf:2a:df:b9:54:e0:a3:31:b0:6f:5e:
2c:50:2f:f1:8f:50:18:96:b0:64:66:74:9e:0a:ac:
6b:85:90:02:70:4f:74:64:5b:12:11:08:d8:e1:3a:
7f:04:5d:ee:ba:fe:b6:16:fa:79:d3:98:9f:18:9a:
30:4a:b0:30:7b:2d:40:bd:01:79:0b:b9:39:b1:1c:
bd:b9:6c:9d:b8:bb:2d:05:68:fd:58:11:04:1b:9a:
da:93:ca:bc:38:5d:67:ba:62:33:f6:da:01:02:7f:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:68:BB:0D:48:B1:AE:5F:64:CB:03:F6:D4:73:E4:E1:5F:58:5C
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:71:8d:cd:84:88:b8:bf:8e:94:15:de:a8:00:b5:a9:d3:
b6:31:0d:f6:cb:b9:3c:d5:fc:9c:ba:b5:dd:50:b5:f5:f3:d5:
f2:f8:50:69:1c:f5:22:c5:0e:75:f7:aa:c9:06:f4:79:76:60:
07:f0:59:bc:7b:07:4a:5d:62:1a:6f:13:11:58:45:e6:e7:7d:
5f:4b:55:ae:d2:f9:ac:8d:19:71:28:16:d7:90:be:68:fc:85:
8e:d5:bd:6c:62:9a:07:91:b6:97:5f:59:78:25:36:10:21:2f:
bd:d2:d9:08:47:7e:03:8a:bb:e7:c7:3c:b2:54:9b:a0:56:eb:
bb:9b:58:76:f3:f6:0e:ba:78:41:93:e6:b5:22:79:a0:8e:cd:
44:be:e6:1a:05:42:9d:2a:9f:ec:2a:4f:d2:8d:96:d4:90:51:
aa:74:74:d4:00:a6:9e:10:2f:74:08:2f:08:e3:8e:88:80:fe:
cd:f9:c1:63:7d:b4:75:2f:e0:5f:54:e7:5f:ea:45:f7:bb:9e:
dd:ff:ae:51:b9:d3:45:45:b1:64:3a:51:69:20:f5:eb:85:44:
0a:9d:f2:b0:39:62:89:cf:6f:79:8b:f0:5c:34:1a:da:ee:3b:
02:96:4e:e7:7b:1f:57:a3:94:8a:66:8c:20:e6:5c:84:b7:15:
3a:89:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:53:27 2025 by rpki-client