Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: WWfTeEFlJgEULY5n3rdG3PYHj/0naJzjSiWJAPvNQFY=
Subject key identifier: E0:25:82:3B:F6:1B:93:3E:7A:9E:7E:89:B9:62:4A:C6:07:0B:9E:6B
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 019A73010D49148DEF88094FE75251C0B699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 13F8
Signing time: Tue 11 Nov 2025 13:00:40 +0000
Manifest this update: Tue 11 Nov 2025 13:00:40 +0000
Manifest next update: Wed 12 Nov 2025 13:00:40 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: FO90qxpR41fCSKzBzq2NUNMmGjTl/ftevqH8j6lB0GE=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:0d:49:14:8d:ef:88:09:4f:e7:52:51:c0:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Nov 11 13:00:40 2025 GMT
Not After : Nov 12 13:00:40 2025 GMT
Subject: CN=e025823bf61b933e7a9e7e89b9624ac6070b9e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:39:17:02:ee:0a:42:3f:27:b0:94:e2:20:
8d:b3:43:2f:55:00:70:dc:e1:4c:ee:b4:fa:9e:2d:
9e:05:4f:33:3a:ce:61:dc:90:62:de:94:fa:a1:6e:
82:be:b7:46:95:6c:87:7d:c1:c4:f7:53:c9:74:31:
1f:48:b2:38:89:da:d3:92:27:2c:66:24:89:7a:e2:
e1:6b:a6:58:22:4a:43:aa:11:18:5e:e6:40:39:de:
ca:77:f4:f6:39:14:c9:34:37:15:9c:31:2e:00:cf:
e5:72:d1:b4:de:4f:45:44:c5:69:bf:c7:ee:d1:34:
21:47:58:db:fe:b0:40:50:62:d9:e8:73:82:10:2a:
ff:bb:87:2c:d6:cf:e7:37:e5:45:c1:5d:45:38:f6:
6c:7f:97:03:ef:06:21:f2:b2:0d:4b:1f:35:b0:29:
67:de:2f:ea:94:9e:6c:ce:3e:48:a1:f3:b0:3e:7f:
cc:89:a1:b6:48:0c:05:96:f0:4b:17:f5:bc:28:62:
3c:6a:db:b9:59:26:50:4b:da:89:c1:fc:ad:c7:c2:
7f:d8:cc:76:c2:5d:95:16:54:4b:7d:33:3a:3a:f0:
1b:99:ca:0a:6e:9d:82:f0:9c:68:49:96:f7:5b:40:
f1:3e:5d:32:60:f7:d4:2d:e1:62:71:75:de:6b:bb:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:82:3B:F6:1B:93:3E:7A:9E:7E:89:B9:62:4A:C6:07:0B:9E:6B
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:8e:00:41:42:8f:fd:bd:3f:ff:99:1e:f5:88:ef:56:84:
62:31:23:bf:5a:b9:b7:91:1a:61:ff:f8:40:1f:5f:36:f6:90:
40:51:b4:4c:b9:fc:29:bb:25:3b:b2:f1:b5:34:58:e2:5c:30:
31:44:3b:da:31:17:34:28:ef:0c:32:22:cf:1f:18:76:9c:02:
77:f5:f2:66:9f:c6:d3:70:88:22:1e:dd:53:83:26:c6:40:d1:
bd:c1:71:55:ec:85:87:6c:69:85:48:3f:c6:dc:5f:59:ee:18:
dd:5c:7f:82:e0:43:7d:57:b1:02:c4:9d:bc:0a:c0:76:d8:21:
40:6d:8a:0a:b6:21:4f:2a:07:fe:d0:84:f4:93:09:5e:da:51:
a2:2c:8d:c3:14:43:96:0b:82:4c:c4:f6:1a:86:57:d0:41:67:
fe:a6:fc:be:b9:13:3a:66:5e:b1:f0:c7:51:80:cd:2d:4e:d4:
8a:89:96:55:b6:85:0c:07:f9:59:e1:de:08:45:02:c1:4c:42:
11:f7:5d:1c:6d:3f:bb:36:39:49:aa:6e:b0:f3:5c:7b:fb:2d:
8f:ef:38:14:7d:ea:54:d0:93:7c:12:62:97:31:d4:18:db:24:
c1:57:21:d9:eb:ea:96:e1:20:ea:6c:21:ae:9a:f2:08:2c:7e:
45:ce:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:25 2025 by rpki-client