Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: i4F3yzPfCtaAVulTrT52/6RwWEeWLPYLZXuwt9465uk=
Subject key identifier: DE:82:BD:C3:DB:6F:12:FD:CF:02:1D:3C:1D:E7:DB:EB:99:DF:50:19
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 019917641F6231BDDE0FCC96B2EEC00A1A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 1344
Signing time: Fri 05 Sep 2025 01:01:01 +0000
Manifest this update: Fri 05 Sep 2025 01:01:01 +0000
Manifest next update: Sat 06 Sep 2025 01:01:01 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: wdtssyjzHGlQjECMawSo/OFKOdw75ELoGR1dIfGVYhw=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:1f:62:31:bd:de:0f:cc:96:b2:ee:c0:0a:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Sep 5 01:01:01 2025 GMT
Not After : Sep 6 01:01:01 2025 GMT
Subject: CN=de82bdc3db6f12fdcf021d3c1de7dbeb99df5019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:b9:17:40:43:c0:60:30:5a:b0:76:d8:f3:
8e:2f:77:ab:76:99:1d:e7:8f:d7:35:4d:13:34:35:
0b:15:8a:4d:5f:ee:f6:0d:33:43:70:4b:e7:8e:fe:
2d:db:40:ee:2a:40:83:af:b5:3b:c5:ae:07:d6:a2:
41:2a:16:7a:a1:6c:4c:d0:27:a3:74:f1:9a:65:1c:
40:5b:5a:6d:5b:07:96:f1:a5:45:58:9b:b5:10:34:
8e:1b:a4:24:b6:37:3d:05:44:b4:24:08:c5:a7:62:
75:8a:82:2b:c2:2f:c9:34:87:c9:e2:05:17:59:91:
65:3f:50:f4:5e:71:5a:97:4d:6d:f6:79:35:1d:a7:
88:c8:ad:28:cc:bb:c5:c2:62:08:c8:cb:64:de:e5:
4b:e5:66:63:77:22:e9:3a:44:19:4d:f1:75:7f:ac:
00:e0:f9:fa:be:61:81:ed:98:71:1a:54:2d:5a:34:
94:ba:37:52:b6:0e:61:04:0d:4a:70:3c:a9:a6:09:
01:5e:2b:c0:46:94:94:c5:30:f0:db:55:30:24:78:
4d:d3:7c:fd:4e:f0:60:78:e2:75:37:f6:68:51:a0:
ad:67:2a:00:ff:62:9d:1a:75:09:c9:96:7f:4a:0e:
fc:32:13:a3:de:9a:e8:f5:fe:9f:79:76:d3:bb:2e:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:BD:C3:DB:6F:12:FD:CF:02:1D:3C:1D:E7:DB:EB:99:DF:50:19
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:8c:56:f2:ed:77:30:f7:76:b8:05:e4:4a:ee:9a:32:a9:
5b:c7:f9:1c:d6:d0:ba:7c:29:dc:75:a3:20:a0:25:79:e5:ad:
1f:53:e1:a2:e5:59:01:dc:bf:54:31:5b:48:a2:99:2a:24:4c:
21:f9:c0:70:0b:a9:a3:73:84:8a:27:8b:34:fd:bf:40:78:1a:
17:a8:d9:97:22:2d:50:74:52:9e:9a:eb:e4:36:d6:72:71:63:
b8:ad:d5:e6:33:f2:da:37:49:11:84:82:0b:22:07:f0:14:13:
ca:be:3f:73:9a:16:be:0f:f8:f6:a2:09:65:03:57:10:40:fd:
46:70:d0:75:27:02:81:d7:d3:3a:95:cf:35:bc:27:09:54:48:
96:26:28:fa:be:48:02:9f:95:88:b3:db:58:b2:30:90:23:6e:
52:39:1b:46:05:18:52:c5:fc:01:01:aa:9a:96:cb:0b:6e:15:
a3:c1:66:d3:33:c0:2e:03:8e:5c:21:44:e4:d0:98:4f:2e:b3:
d3:fa:9d:df:a4:c0:8e:40:73:74:60:40:30:52:4d:18:be:f9:
23:11:72:83:1a:ce:48:34:ad:7c:65:2a:29:3e:3f:5c:8e:77:
d1:8b:c2:10:82:47:65:f8:df:66:48:fc:e1:ea:ed:fc:aa:74:
45:34:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:19 2025 by rpki-client