Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: ms24vQ6bEK8320S/E7rBzbK2A+yfbVINyJYZjYLa2uI=
Subject key identifier: EE:3A:D9:DF:13:69:61:A8:76:B4:D1:E0:ED:64:3A:B4:D0:62:7D:4D
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 01967D8EA82449EAD7732207DFA607E459B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 18:00:23 +0000
Manifest this update: Mon 28 Apr 2025 18:00:23 +0000
Manifest next update: Tue 29 Apr 2025 18:00:23 +0000
Files and hashes: 1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: Teq/q9gM0uYsalEW7UNfN9bpumnv5uXl592KSztt5ic=)
2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:a8:24:49:ea:d7:73:22:07:df:a6:07:e4:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Apr 28 18:00:23 2025 GMT
Not After : Apr 29 18:00:23 2025 GMT
Subject: CN=ee3ad9df136961a876b4d1e0ed643ab4d0627d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:bd:3f:c9:5b:b8:69:17:4e:5b:13:72:3f:
bb:f6:15:9b:b0:05:85:e8:92:68:a2:92:6a:31:c6:
89:80:13:07:7b:f0:18:9b:43:ff:86:c2:db:74:fe:
55:bd:4e:f2:d0:c1:1c:bd:4b:f2:51:22:68:71:34:
18:96:9d:f5:13:8f:53:2e:ec:79:19:11:e0:64:92:
da:fd:fc:3f:ce:fb:e6:a7:cd:b1:5e:5d:ad:70:f8:
d0:18:f9:9f:ee:cd:b5:ab:94:24:8e:11:e1:85:01:
76:4c:df:12:8f:dd:2d:54:0f:44:2e:57:5a:68:0f:
72:1d:55:e3:01:bf:e4:67:ee:a8:a6:dd:8f:de:30:
b0:1b:ed:ba:f1:d1:1b:77:0d:52:92:df:51:f3:b5:
57:ba:96:b8:de:18:33:62:13:f1:4b:ae:a8:89:c9:
ad:60:ce:9e:35:29:a5:f3:8e:f8:7b:72:15:62:d8:
d1:ef:b2:8d:9c:2a:26:e6:6a:46:c7:d6:b0:a5:eb:
38:be:d8:61:43:9b:9e:af:f3:7f:05:f5:3d:40:f7:
2b:24:f3:73:0a:74:49:ab:ef:7c:67:68:f3:75:68:
15:6f:74:3e:0d:57:ab:dd:95:1f:56:38:1e:30:a1:
5f:d6:cf:57:09:b5:81:db:66:47:1a:23:c1:d2:e2:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:D9:DF:13:69:61:A8:76:B4:D1:E0:ED:64:3A:B4:D0:62:7D:4D
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a4:9a:13:04:01:69:f9:b0:06:01:2f:1a:7b:da:54:47:8c:
39:91:3d:bc:87:8d:1c:fb:11:16:71:5a:bf:41:7e:f8:1f:51:
c2:60:f3:1f:22:0b:f0:3d:4f:72:41:2b:8a:43:53:42:b0:c7:
fc:0e:b5:ee:f5:cc:d1:95:fc:a2:de:d3:55:44:db:26:b8:51:
20:a5:f4:2d:41:75:58:be:6e:d6:d2:f1:e2:fd:2c:26:ad:c2:
25:b4:5e:fc:58:3c:54:27:19:56:8f:20:9f:db:5c:8b:bb:cb:
0c:73:65:0e:93:16:c0:44:32:d5:30:8a:b8:58:1e:1e:25:73:
b8:a9:f7:65:2e:bd:40:69:65:1f:ce:0b:50:c6:50:cd:74:4a:
17:0a:52:f4:36:2a:8e:3f:a5:18:4c:13:fa:6d:01:86:1e:b6:
b8:11:b2:e0:f0:a8:3b:54:a6:51:c4:9b:c3:8e:17:cf:94:07:
e4:df:52:63:d1:5b:82:03:64:0e:ea:6b:12:e6:c2:fe:3e:8d:
23:04:64:65:9a:ce:e1:cb:98:75:b8:89:b9:62:76:72:bb:32:
5f:aa:b7:9b:09:4e:96:92:d1:04:7b:26:a3:4a:a4:f4:67:3e:
3a:b1:67:b2:d6:7a:62:80:03:ed:a4:a3:c0:b1:71:ab:cb:d2:
38:47:56:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:46:06 2025 by rpki-client