Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: QrtNZEnAKqJ7XDlsvJpCuq5cIX5LE8V+N3yC3+M0EOw=
Subject key identifier: 33:68:AE:B4:4B:D6:F3:B4:2A:E3:72:ED:D8:3C:16:DE:6E:02:A4:F1
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 01967D20A2999FC8C21E8B4D49F8A372B9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 11EB
Signing time: Mon 28 Apr 2025 16:00:12 +0000
Manifest this update: Mon 28 Apr 2025 16:00:12 +0000
Manifest next update: Tue 29 Apr 2025 16:00:12 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: wM+fPL9C1O6mSeuZWh+d+kTRdXhsvkkp7p7Zd0HQGq8=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:a2:99:9f:c8:c2:1e:8b:4d:49:f8:a3:72:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Apr 28 16:00:12 2025 GMT
Not After : Apr 29 16:00:12 2025 GMT
Subject: CN=3368aeb44bd6f3b42ae372edd83c16de6e02a4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:71:22:27:6c:8d:43:b6:cf:96:bf:91:ef:
32:3a:58:e1:72:e5:7f:18:f3:89:64:48:e7:c1:1b:
84:68:44:1e:4d:90:95:06:20:b8:68:37:c6:21:32:
9f:85:2b:89:41:97:01:a9:22:ab:64:d2:f7:19:28:
a1:d9:04:21:20:1b:4b:07:ca:ea:6a:8b:56:b7:84:
13:de:63:35:11:0f:d2:1d:a2:2d:00:f5:59:90:96:
11:ab:ad:77:e0:f4:fa:15:d8:12:93:f9:da:54:25:
d4:ed:18:d9:33:a3:b4:7f:63:45:b3:43:c1:7d:ce:
95:33:c2:ab:a8:55:b1:f9:90:eb:6f:c6:79:78:db:
ea:f7:16:09:d2:2d:fd:a8:19:b4:f9:e2:e2:d5:9c:
0e:0f:9a:b9:3a:91:dd:d2:ab:61:bd:46:27:10:7b:
18:9b:56:f2:6d:41:0e:c5:84:75:88:3f:ad:c3:4d:
e4:48:e2:1d:b7:ac:29:c1:28:13:10:88:6f:b5:29:
de:b3:15:90:e6:f3:0f:4a:af:1c:23:c1:28:fb:e6:
28:31:e9:b3:c9:b9:32:bd:c4:ee:0f:b8:34:19:ef:
38:7a:46:41:2a:94:6c:88:54:db:4e:5d:7f:d2:5c:
4b:e8:f8:36:a2:78:d5:f2:4a:f7:f2:fa:d8:38:03:
43:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:AE:B4:4B:D6:F3:B4:2A:E3:72:ED:D8:3C:16:DE:6E:02:A4:F1
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:75:8e:8d:e0:91:76:7b:8e:50:cc:23:fd:2e:00:52:8d:df:
74:a8:cd:d8:55:87:bf:6f:f6:cb:33:d5:ba:65:41:9c:ca:45:
0e:f9:ef:9d:23:c8:4d:9a:8e:42:a6:7e:ce:f1:9c:af:08:97:
5a:bd:45:4e:b3:3a:52:26:97:d0:23:57:c5:c5:0a:92:95:b2:
4b:89:4f:cb:60:e8:15:46:19:3b:5b:9c:98:dd:1e:ab:35:a7:
91:a7:a5:19:f3:2a:9a:1b:dd:32:b9:c9:b2:5d:c2:e1:74:4d:
ff:b6:e4:d8:91:dd:65:a9:df:ee:67:d5:b0:01:56:7e:8d:a3:
be:41:f0:a4:d2:ef:af:3e:ad:2b:f2:97:d8:0f:e6:dc:c6:b5:
89:59:e1:36:96:3b:6e:ea:02:11:91:7f:b0:0a:33:da:9d:09:
40:d5:db:0e:23:04:ab:e5:61:ee:d5:34:51:33:cf:b0:0e:14:
99:34:24:f6:b8:5d:6c:07:42:9b:ec:c3:62:de:e7:fa:97:c2:
b0:71:a5:3b:c0:75:08:fb:62:14:ef:1c:a5:ed:e9:d6:67:57:
8b:9c:09:f3:94:13:e7:07:26:e1:96:8f:7b:94:9f:4b:f5:0f:
37:21:dc:b6:ad:f1:f2:59:c5:c5:a6:3a:4c:a7:bd:a8:3a:19:
1e:0c:79:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IKKZn8jCHotNSfijcrnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5
ZjlkZGQwHhcNMjUwNDI4MTYwMDEyWhcNMjUwNDI5MTYwMDEyWjAzMTEwLwYDVQQD
EygzMzY4YWViNDRiZDZmM2I0MmFlMzcyZWRkODNjMTZkZTZlMDJhNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pFxIidsjUO2z5a/ke8yOljhcuV/
GPOJZEjnwRuEaEQeTZCVBiC4aDfGITKfhSuJQZcBqSKrZNL3GSih2QQhIBtLB8rq
aotWt4QT3mM1EQ/SHaItAPVZkJYRq6134PT6FdgSk/naVCXU7RjZM6O0f2NFs0PB
fc6VM8KrqFWx+ZDrb8Z5eNvq9xYJ0i39qBm0+eLi1ZwOD5q5OpHd0qthvUYnEHsY
m1bybUEOxYR1iD+tw03kSOIdt6wpwSgTEIhvtSnesxWQ5vMPSq8cI8Eo++YoMemz
ybkyvcTuD7g0Ge84ekZBKpRsiFTbTl1/0lxL6Pg2onjV8kr38vrYOANDvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNorrRL1vO0KuNy7dg8Ft5uAqTxMB8GA1UdIwQY
MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt
YWFkNjE2MzlkOWQ2LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2
LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA43WOjeCR
dnuOUMwj/S4AUo3fdKjN2FWHv2/2yzPVumVBnMpFDvnvnSPITZqOQqZ+zvGcrwiX
Wr1FTrM6UiaX0CNXxcUKkpWyS4lPy2DoFUYZO1ucmN0eqzWnkaelGfMqmhvdMrnJ
sl3C4XRN/7bk2JHdZanf7mfVsAFWfo2jvkHwpNLvrz6tK/KX2A/m3Ma1iVnhNpY7
buoCEZF/sAoz2p0JQNXbDiMEq+Vh7tU0UTPPsA4UmTQk9rhdbAdCm+zDYt7n+pfC
sHGlO8B1CPtiFO8cpe3p1mdXi5wJ85QT5wcm4ZaPe5SfS/UPNyHctq3x8lnFxaY6
TKe9qDoZHgx5+w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:45 2025 by rpki-client