Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: WC9z0uoH//JbJDM2aUHF/g3Wa1g6SZBmHP8hJFbN/ZA=
Subject key identifier: BF:5E:D1:44:70:74:3D:80:48:73:AE:86:C4:F0:AA:FE:16:08:2E:4D
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 01987CE4F6024335D8FBE4F7697F3F5E72AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 12F4
Signing time: Wed 06 Aug 2025 01:00:36 +0000
Manifest this update: Wed 06 Aug 2025 01:00:36 +0000
Manifest next update: Thu 07 Aug 2025 01:00:36 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: 5FZK8Hjx7KiVpjsQecPfm5eOxBB/9mA2GuBHdAxo2jY=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:f6:02:43:35:d8:fb:e4:f7:69:7f:3f:5e:72:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Aug 6 01:00:36 2025 GMT
Not After : Aug 7 01:00:36 2025 GMT
Subject: CN=bf5ed14470743d804873ae86c4f0aafe16082e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:eb:79:5a:26:81:38:71:6e:61:87:b1:41:
c8:68:ca:f9:94:58:9b:d4:80:8e:97:c8:fb:7b:6b:
93:8f:4e:40:19:b4:53:99:04:e7:99:a9:5e:55:25:
31:f8:8f:60:93:04:cc:7b:0a:6a:e4:2f:04:97:27:
5e:93:74:f3:85:cd:6a:4f:71:bb:f9:32:b3:13:a2:
c6:4f:25:3f:69:e3:21:7b:be:77:68:ae:0f:af:cd:
79:6d:a2:49:08:e2:d6:95:66:96:8d:6a:b6:01:3b:
da:53:3c:e5:7e:4e:52:8d:90:d0:be:e9:36:2b:13:
60:1c:9d:75:27:86:9a:d1:3c:04:82:0e:bd:3d:a0:
10:b4:e2:0b:31:95:af:1b:01:73:76:d0:f9:b0:da:
f4:1b:4b:79:21:ee:62:5d:00:ae:ff:30:29:38:38:
94:48:b3:c7:f9:a7:27:3b:f2:b4:c9:a8:fe:a8:17:
02:d3:24:25:00:6e:be:6e:67:84:db:7b:44:00:9f:
79:18:a4:b6:88:27:f5:0e:59:90:61:06:09:38:40:
28:26:ad:b6:53:27:3a:9c:14:42:82:3c:6c:f0:4d:
f2:d6:9e:61:de:07:29:1a:fa:88:f1:7f:f3:77:56:
ec:a6:ce:25:e9:43:dd:8c:45:1f:ed:7f:54:01:55:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:D1:44:70:74:3D:80:48:73:AE:86:C4:F0:AA:FE:16:08:2E:4D
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8f:c6:62:43:16:08:91:ae:82:2d:ed:38:9e:15:5f:34:b2:
f5:16:4e:b2:02:55:45:78:a7:32:7d:f4:5c:37:c7:a5:35:5f:
e9:97:aa:f6:45:ba:25:9e:77:0a:91:8e:9a:b2:f7:7a:cc:c1:
14:80:77:a9:f8:ff:e6:09:58:1c:78:88:5a:04:be:01:9b:61:
ed:e1:ea:f2:72:f9:5a:ee:96:65:65:d6:37:18:4e:0c:1a:0b:
72:45:b4:95:9e:92:21:a6:6b:53:77:c5:95:82:47:ae:5d:65:
74:10:f6:6c:53:52:dc:77:99:c2:fd:03:7a:71:2b:de:13:27:
46:f5:54:74:92:35:d8:a2:6d:b5:3e:b3:e0:0b:a9:89:48:b1:
6d:ff:a4:9d:43:3d:14:a8:01:a5:6a:36:80:32:89:8d:e7:5e:
93:4e:5c:99:e3:33:69:cd:d1:f2:85:8e:74:f5:7c:3d:a6:e6:
f0:e8:a6:38:6b:0f:c6:e8:66:a2:e1:46:a4:4f:5f:44:84:8a:
85:b2:f5:2f:1b:59:07:09:63:bb:39:51:f5:1b:53:78:87:b3:
4d:3e:c8:be:53:99:f9:52:46:a6:1a:e5:b7:3c:86:9b:3b:2a:
2d:8b:e0:c4:45:ba:83:ca:09:00:34:f0:b1:bf:1f:99:fd:50:
fa:30:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:56 2025 by rpki-client