Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: gNlXpOmjvmphRi0Xem2krY6Aow0jxwtEjZRXdCCo7ak=
Subject key identifier: 3D:6E:6B:7F:6B:EF:CF:92:5D:DE:D6:31:FB:9E:FB:57:70:F0:2C:A4
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 0199296A03C5CA2C5C894D38F7D91AA3AB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1675
Signing time: Mon 08 Sep 2025 13:00:37 +0000
Manifest this update: Mon 08 Sep 2025 13:00:37 +0000
Manifest next update: Tue 09 Sep 2025 13:00:37 +0000
Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: ok/cY6b+9/Tl8JmcPK1qEhFcAi+3XU+nOWuMUXuOFxY=)
2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:6a:03:c5:ca:2c:5c:89:4d:38:f7:d9:1a:a3:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Sep 8 13:00:37 2025 GMT
Not After : Sep 9 13:00:37 2025 GMT
Subject: CN=3d6e6b7f6befcf925dded631fb9efb5770f02ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:4f:9f:e8:31:22:31:96:e5:e9:ec:d9:c2:
30:62:88:09:82:f7:91:91:46:6d:0e:bd:32:c3:58:
ed:36:e1:ca:ab:7c:be:d0:00:88:cd:0f:26:c9:dd:
af:3b:28:f7:f8:9c:4b:31:d4:81:d4:ba:aa:82:80:
22:12:10:07:ef:97:0c:5a:14:00:25:5c:97:56:f1:
14:ff:2c:a4:ea:38:b4:01:fb:33:13:82:f8:00:35:
4e:4e:5e:f6:5d:23:d6:30:3b:b1:ef:60:65:b3:c2:
08:ca:1e:3d:36:82:3c:43:86:c4:c6:f7:81:19:52:
a6:9f:e0:35:0b:08:11:51:75:59:ef:f6:5c:0e:3b:
f4:59:6d:34:86:df:ae:de:03:77:6b:37:7f:1d:ca:
6a:ed:6c:cf:18:d1:5e:73:f9:ce:32:d7:03:1f:5a:
65:f4:8d:50:54:53:0c:c4:4b:63:2f:20:d8:17:13:
4f:e3:7d:6e:c8:77:84:8a:56:a1:cc:15:4c:1e:8a:
ba:ad:7d:85:ee:c9:b2:d6:13:f8:fc:ae:7c:14:cc:
7b:69:b6:12:75:cc:4b:2b:36:53:bb:a8:2d:50:1d:
70:7c:4e:01:ab:c0:80:d2:10:b7:79:e3:b2:03:fe:
a9:5c:b9:be:23:d5:d9:ab:df:38:32:65:c9:ab:16:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6E:6B:7F:6B:EF:CF:92:5D:DE:D6:31:FB:9E:FB:57:70:F0:2C:A4
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d8:a2:02:ce:7e:cc:60:c2:63:9f:ea:ff:15:51:ff:d4:06:
89:4f:7a:6d:01:85:0a:6f:50:83:4c:7a:da:ef:5b:4e:5c:f1:
8c:11:71:fb:5b:b5:f3:5c:0c:95:07:f6:7a:78:57:e9:75:72:
e4:76:74:f5:03:46:b7:7d:d4:4e:d2:78:4e:3e:3a:d3:94:34:
fb:2c:85:d7:c2:49:13:f7:a7:ea:a8:5b:91:d5:e9:2c:dc:25:
21:1f:55:f7:85:db:d4:91:f8:14:d4:b3:ca:cc:72:a9:28:aa:
6a:68:60:76:2b:0d:bd:c2:c0:fb:4a:ab:7e:52:6a:76:00:eb:
2f:7c:77:25:54:0b:c5:5f:87:21:e6:05:1f:9e:63:87:d7:54:
9a:b9:a3:92:14:24:e7:4c:05:81:39:ce:c4:3f:39:7c:5e:32:
54:fe:e1:fb:33:58:cb:9a:3c:42:86:5e:52:1f:56:d4:39:3e:
6d:be:16:e4:49:6d:9d:15:a7:db:b1:a8:37:4e:08:67:d3:67:
81:47:39:d5:f9:b4:8e:6f:d0:eb:0a:29:9f:8d:49:25:70:c9:
39:21:43:01:22:c7:fd:c1:bc:8f:11:fd:10:c1:05:7a:42:cd:
92:14:81:81:40:79:80:37:af:02:94:9c:2e:6d:9a:e8:0d:1c:
8a:ee:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 15:57:56 2025 by rpki-client