Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: d7PepR4e7E2hrwflC8M7Y+1Q1UR0LmMqy1kS9fwRV4s=
Subject key identifier: 08:A1:AD:9A:D6:06:E7:93:D8:8E:48:66:6D:02:C7:DA:35:2B:88:7B
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 0198D473D09D3A63EAE085C1D7A9A56FA016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: SlJFQf+WHnTMLtrrm7g/jqwVR8u7pB5/FVSBCmF7jY4=)
2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d0:9d:3a:63:ea:e0:85:c1:d7:a9:a5:6f:a0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=08a1ad9ad606e793d88e48666d02c7da352b887b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:66:e1:da:96:c7:00:92:59:73:91:ce:bd:
26:2a:02:38:4e:21:77:f7:a6:90:48:fa:e9:9a:86:
b2:5f:3c:50:8a:6f:87:9e:c4:b7:ff:8a:5a:ba:51:
4e:fa:a4:21:8b:cc:fc:c8:4d:a8:87:bd:2a:24:d4:
56:1b:ce:11:33:40:9a:0d:87:fe:b2:8a:48:ff:23:
01:17:15:ba:c4:b4:d8:c0:73:f8:b9:1b:30:23:83:
0b:23:38:8a:f2:a2:89:67:f3:2a:be:4b:e2:4a:ba:
36:66:7f:8c:73:27:6e:39:b4:c5:12:94:80:64:a5:
bc:7f:24:7e:9e:d5:e0:30:64:5e:87:06:99:89:5c:
5b:9d:73:65:a6:a6:ec:3b:51:c1:1e:fb:2e:34:d6:
3f:d9:b2:73:f2:db:0c:50:66:b6:b6:df:c4:c0:30:
a7:8d:b1:23:cd:ab:eb:2b:bb:3d:b6:9b:1b:f9:5b:
ed:19:39:63:66:aa:1f:2e:53:bb:dc:1d:cb:ef:f5:
34:e3:c3:41:54:f0:a4:c1:50:81:0c:7b:16:70:3b:
8f:d8:1d:c8:56:3d:27:3a:3e:51:97:17:08:b2:3c:
1c:31:7a:9b:8f:57:37:53:70:21:b0:39:aa:05:13:
1e:a4:d0:a7:40:65:5a:e8:19:59:36:f8:6e:20:32:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:AD:9A:D6:06:E7:93:D8:8E:48:66:6D:02:C7:DA:35:2B:88:7B
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8b:df:0b:2c:4d:cf:3f:c2:46:4a:c2:d5:95:66:fd:e1:4c:
53:4d:73:52:9d:06:7d:cd:e3:7f:1b:f6:30:22:85:54:06:83:
b9:06:b0:a9:64:0e:01:22:6a:02:79:f9:f6:6e:09:4a:18:9d:
32:c1:50:17:13:15:83:e1:73:08:e0:a0:28:f1:fc:c7:d3:6d:
40:d5:57:2f:7d:ff:5f:5a:86:33:33:de:2a:fa:82:25:90:bf:
ae:f2:ff:43:aa:8e:c5:f7:b0:91:1c:b4:19:fd:64:93:f3:d5:
cb:d5:3e:82:c1:9c:5f:55:60:89:ac:a7:e5:81:43:16:bf:a6:
7c:87:e9:18:86:c1:5f:d3:36:8c:20:e5:1e:e3:1f:20:ff:f2:
f5:33:61:65:a6:dd:5b:b3:a8:ec:15:6b:1a:f2:82:74:04:7a:
ef:a7:fa:d1:d0:b4:98:a4:cb:56:3c:36:73:eb:d0:73:f3:54:
b7:18:b2:e5:73:74:51:2b:2b:11:e2:1d:d2:dc:0b:09:63:7f:
26:8b:fe:df:ca:4e:36:a3:ef:75:ff:8c:93:dd:42:99:1f:dc:
dc:22:ce:61:9f:5c:fb:74:8d:72:9a:90:ca:a3:2c:03:5e:3d:
80:d0:cf:a3:a3:f6:c4:18:28:f8:92:fc:8b:99:46:eb:53:79:
a8:97:97:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:09 2025 by rpki-client