Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: O2+XiP9NBg5jKXlBQsIOYv/tu6LElDsEC7dA69hUcnk=
Subject key identifier: D1:35:D5:BE:33:B4:5B:0A:04:DC:ED:33:10:3C:4D:B0:81:A1:AC:2A
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 019A1AD0447DAB8D501AE61F8DD27177C91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 10:00:47 +0000
Manifest this update: Sat 25 Oct 2025 10:00:47 +0000
Manifest next update: Sun 26 Oct 2025 10:00:47 +0000
Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: aNWiP6c5ufa2UirUeAxD3btjRXnw6W3rbSa2IicoEJ8=)
2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:44:7d:ab:8d:50:1a:e6:1f:8d:d2:71:77:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Oct 25 10:00:47 2025 GMT
Not After : Oct 26 10:00:47 2025 GMT
Subject: CN=d135d5be33b45b0a04dced33103c4db081a1ac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:b8:9d:78:5b:bd:ef:ed:9a:4c:ba:1d:76:
68:83:9e:0e:bd:02:06:59:77:ce:84:67:31:a3:01:
7c:55:c7:4e:3a:c6:48:13:b1:aa:dc:c4:57:cb:bf:
b7:c7:bf:98:39:fd:af:a2:7c:13:2d:66:57:24:23:
29:2c:60:3d:6b:1d:65:8c:cc:bf:a7:90:d0:67:1f:
1c:73:c4:53:04:37:d7:ee:3c:13:79:a3:aa:ab:ee:
9b:15:33:4c:b9:9e:41:6d:b4:8b:8e:33:0d:1d:c3:
d4:61:c5:0f:46:39:ba:77:b3:06:2d:06:8c:27:9a:
ee:b6:c6:a6:f4:a0:9e:ed:ae:fa:1c:79:50:7d:be:
cd:8c:a4:05:bb:e0:fa:65:ee:c9:47:78:39:4a:db:
df:b3:54:3f:1d:83:7c:ca:7a:bf:f5:00:a7:cf:2f:
de:f4:81:d6:9b:b0:88:2a:dd:5f:a1:42:66:a2:20:
39:68:c9:84:db:06:b3:22:f9:3a:a7:08:de:55:6a:
85:92:ea:16:94:16:6a:6a:c6:eb:13:89:56:68:0f:
42:4b:74:d2:e6:14:1a:fe:02:2d:b1:6a:e4:50:0a:
d2:c1:de:73:6a:82:41:10:ae:b9:da:7f:61:70:df:
9f:62:54:1f:27:ed:cd:1b:3c:7e:73:1b:55:f9:ae:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:D5:BE:33:B4:5B:0A:04:DC:ED:33:10:3C:4D:B0:81:A1:AC:2A
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c6:01:10:2b:21:48:fc:f4:74:ce:29:e6:aa:bb:2c:0c:36:
5c:c3:3c:c1:eb:4e:d0:f0:bd:76:e7:b0:ee:a1:b9:c7:1e:04:
11:75:1b:a2:95:4c:e2:32:b2:19:26:9f:1c:ff:e1:61:11:12:
08:ca:e4:76:50:5e:db:92:4b:51:40:02:7b:23:28:37:d8:62:
d8:02:81:7e:49:f3:d2:79:46:44:f4:d4:b6:3e:c5:d8:f7:e9:
c4:ad:46:0e:80:65:4d:f5:ea:df:6c:a4:52:12:5e:b3:80:c2:
d8:0a:c2:e2:6a:bd:32:e7:64:12:ef:fd:ad:c1:c4:4d:d0:f4:
46:74:39:91:84:de:a4:ab:0a:9a:79:72:92:91:51:cd:0e:a5:
15:a4:1d:bb:f9:a2:d5:6f:78:3a:38:0c:1a:b5:01:c8:a6:0d:
be:16:ec:dc:77:75:d2:60:8f:18:27:af:3a:f3:03:f8:13:f2:
eb:77:e5:9f:eb:20:67:23:d0:e7:75:dd:0a:51:0d:d3:d2:a7:
cd:30:3c:a0:5a:74:82:44:a2:d1:36:02:6c:fa:4f:cf:33:0f:
52:94:6d:76:e4:bc:c4:3d:f0:53:02:e5:f7:25:ec:a7:ff:e6:
71:47:e0:ae:1b:86:a6:fd:48:0c:b2:50:5e:0a:30:a5:0b:a3:
0a:ad:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:09 2025 by rpki-client