Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: HXJSNf2+JcQMheAK6CYWSYbcJ+ovt0pL2vkvdtDsmSw=
Subject key identifier: 2D:D4:F7:A8:B0:9D:20:AA:98:E2:BF:38:49:8B:62:66:16:26:94:F2
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 0196587005E84B8630E35F649A02FA9319E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 11D8
Signing time: Mon 21 Apr 2025 13:00:58 +0000
Manifest this update: Mon 21 Apr 2025 13:00:58 +0000
Manifest next update: Tue 22 Apr 2025 13:00:58 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: Gr8f65e5wD3zS+0r94QweDGKOpkJy/ixoClZ10nBJkA=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:70:05:e8:4b:86:30:e3:5f:64:9a:02:fa:93:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Apr 21 13:00:58 2025 GMT
Not After : Apr 22 13:00:58 2025 GMT
Subject: CN=2dd4f7a8b09d20aa98e2bf38498b6266162694f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:bd:83:c4:bc:72:5b:07:16:42:4e:3b:88:
c8:de:8c:9b:9b:26:92:73:d3:80:ee:f4:d8:d2:bf:
2d:47:f9:9d:0a:fa:72:55:8b:d4:4d:61:4d:22:66:
3c:de:61:ea:2d:bd:08:79:50:65:4e:b6:b5:53:bb:
83:bb:65:be:fd:7d:77:5b:bd:c1:6d:e2:9c:57:9b:
9c:9d:e4:42:82:ee:0a:7a:f0:5b:ac:9d:80:04:82:
84:99:56:82:07:d0:0f:ca:90:8f:2b:4a:e0:45:d9:
bd:89:19:30:ab:a8:95:5c:c1:1d:28:db:e3:e1:27:
34:d5:08:ff:dc:43:33:36:22:d5:1e:a7:b8:d8:a7:
48:16:2d:bb:ab:13:b5:7c:18:80:67:9f:75:91:ba:
a5:e7:85:c4:d3:5a:64:9f:0a:80:88:11:c1:94:f7:
5c:fd:c2:9b:a6:5d:18:c9:fd:76:90:c4:08:a5:e8:
ff:12:31:80:55:b4:42:4a:c0:40:7a:fb:0f:45:cd:
0b:a4:78:3c:da:cc:4b:e0:29:66:f4:3b:ac:c3:63:
c0:27:a7:2b:12:e0:ce:46:4a:ba:c0:1b:bc:b1:27:
93:58:85:55:e7:f2:5a:7b:bd:f8:bd:7e:f6:f3:30:
87:0d:8d:ea:49:b7:0e:4a:ef:00:b2:66:21:f9:3f:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:F7:A8:B0:9D:20:AA:98:E2:BF:38:49:8B:62:66:16:26:94:F2
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:df:14:bc:3c:41:83:7c:46:bb:08:27:df:ea:c7:66:97:f1:
42:83:e0:78:69:25:13:9b:9e:e9:92:03:13:42:ce:f7:7e:13:
62:22:41:62:5e:bc:c3:56:65:f6:6f:7b:a8:81:aa:f2:76:df:
62:8a:4e:84:e0:15:a4:4d:b4:74:ff:85:21:79:e4:6c:45:d5:
05:87:3d:35:da:5d:e9:44:00:21:8a:3f:3a:f9:43:b7:f4:c3:
35:ac:11:21:ee:c7:c8:a4:8f:01:59:b8:ef:01:f1:69:75:39:
b9:30:1b:e2:b8:49:79:eb:af:a7:ad:25:f6:3c:b2:11:0c:c1:
1a:5e:3d:f5:7e:57:38:70:ee:67:3e:ef:07:e0:a9:de:67:62:
a7:3a:48:e9:f1:09:3f:d6:1b:a5:44:97:2f:44:41:0c:15:3b:
d4:5c:96:34:c6:c8:6d:7e:5d:65:d1:eb:d8:2e:09:0d:34:ef:
e6:30:c4:88:ef:ab:11:15:f3:16:24:ef:69:7d:41:12:49:15:
2a:67:87:c2:77:f1:9a:71:95:79:6c:f1:66:9e:e4:58:62:77:
23:9a:7f:87:6f:71:07:73:57:67:85:ec:ba:35:a4:3c:fa:5a:
c4:b7:2c:b6:60:8e:db:00:4b:e8:f5:13:33:ec:88:2c:0d:c8:
29:f1:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:27 2025 by rpki-client