Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
File: pFACAit6PkeQuLTi9tW3o9q93OE.mft (raw, json)
Hash identifier: NZGJnlNgah62+Qti/QodOa0T+S54Ml/DW5Mc1Mn+i9c=
Subject key identifier: 5D:3C:46:B6:F5:89:42:B2:EC:A0:6D:5E:21:5F:74:56:A5:02:55:2A
Authority key identifier: A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
Certificate issuer: /CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Certificate serial: 019A0CDD8611EF57C6B2EB12AC021185AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
Manifest number: 1680
Signing time: Wed 22 Oct 2025 17:00:35 +0000
Manifest this update: Wed 22 Oct 2025 17:00:35 +0000
Manifest next update: Thu 23 Oct 2025 17:00:35 +0000
Files and hashes: 1: GOvB6QZnz6YW3hChXA1oOkJyRf0.roa (hash: DT4Q1bjsNZB10Vx5Xooi+zre0pXNXku+ccr/is9arG0=)
2: pFACAit6PkeQuLTi9tW3o9q93OE.crl (hash: DbdYLYIcNd7pelo2phmebBHyy9vLMAfuC8XUNljIk4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:dd:86:11:ef:57:c6:b2:eb:12:ac:02:11:85:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45002022b7a3e4790b8b4e2f6d5b7a3dabddce1
Validity
Not Before: Oct 22 17:00:35 2025 GMT
Not After : Oct 23 17:00:35 2025 GMT
Subject: CN=5d3c46b6f58942b2eca06d5e215f7456a502552a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:25:3f:d3:33:02:26:55:42:91:76:60:81:
3f:69:53:a9:1f:08:93:29:54:c6:a2:d0:02:6c:3b:
8e:d6:b6:f7:8e:2e:d7:4e:88:4d:66:0c:03:60:a8:
5c:6a:3b:06:a3:48:7d:2c:ff:09:bb:d5:80:98:49:
15:f3:6f:da:60:ab:c2:11:c7:e4:20:5f:db:cd:d7:
04:a3:9c:66:b6:40:92:40:a3:3d:03:b4:1b:c4:76:
d5:0f:56:1c:6a:a4:f1:00:33:b3:0d:90:bd:4c:70:
d2:c0:1d:5d:3e:53:4c:45:4b:6a:5b:b6:b2:a3:40:
31:13:aa:a8:8e:cb:80:f5:1f:ce:36:a3:ff:3b:75:
17:c2:b7:20:3a:26:17:b8:87:e6:ce:77:92:d2:c4:
3b:a3:7e:c3:f6:6f:37:1c:1d:59:8d:7d:42:c0:0a:
33:5c:84:98:fb:0e:46:75:ea:e2:3d:d6:ed:9e:0a:
d3:9d:d6:bc:84:2e:7c:2c:e5:f8:97:b0:cb:10:12:
12:5f:ac:6a:7c:3b:91:51:5d:dc:41:5b:60:b0:50:
80:06:28:1f:e2:95:21:7f:59:2e:1d:df:16:e2:80:
d8:a9:5f:92:f5:97:d8:1c:20:bc:d1:fd:c2:cf:cc:
10:2c:e0:83:4e:07:03:8b:ec:d4:fb:2e:a6:ec:3c:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:46:B6:F5:89:42:B2:EC:A0:6D:5E:21:5F:74:56:A5:02:55:2A
X509v3 Authority Key Identifier:
keyid:A4:50:02:02:2B:7A:3E:47:90:B8:B4:E2:F6:D5:B7:A3:DA:BD:DC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFACAit6PkeQuLTi9tW3o9q93OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/d809b3-3675-4fd8-8821-b367ebdf302b/1/pFACAit6PkeQuLTi9tW3o9q93OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a9:c3:10:42:5a:e5:37:53:d1:fe:97:18:31:25:fc:83:c6:
42:16:5e:50:44:07:c6:02:61:e9:16:f7:0e:03:20:0b:a0:99:
01:af:18:09:0f:3a:46:fc:aa:85:31:e7:fd:1b:fd:fd:35:d9:
11:84:d6:be:e0:41:b9:38:dd:ab:ba:53:fd:7d:01:a2:90:b6:
cf:32:17:19:f2:a2:28:e9:67:2d:67:f9:29:4c:94:5f:f3:9b:
64:99:0b:3c:00:dd:5a:b8:87:09:40:94:a3:01:a3:22:35:8d:
b2:22:4b:6c:82:f3:55:61:9e:ae:60:d5:33:97:6f:87:d9:62:
24:71:94:57:a5:54:fa:3c:0a:69:d9:db:ea:51:f4:c4:e0:fe:
f4:b2:88:0b:c5:15:22:1c:b5:6b:42:19:a7:c9:90:27:96:3a:
c5:22:b3:d7:b1:cf:3d:11:30:cf:00:8b:36:fe:c7:e5:4b:ac:
9a:9d:73:c2:d5:b9:55:04:c3:ab:64:3b:56:42:50:01:7d:a0:
77:fb:4c:72:ac:ec:d1:00:2e:3f:85:31:f0:76:7f:05:a9:ec:
4e:bc:38:a6:b7:ac:0b:81:dc:32:ee:c6:6a:67:39:fd:88:48:
ff:57:a0:2f:d0:fa:66:84:61:24:6d:06:24:c7:af:7d:ba:fd:
a6:2b:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:24:31 2025 by rpki-client