Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json)
Hash identifier: EPOTPLq8Gz2/Bn1bp4xzC64lSIkCuRi+iyYFE9ON95I=
Subject key identifier: DB:43:E6:75:5C:19:8D:16:BC:0D:D9:30:75:9A:9C:76:A2:7C:E4:D2
Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Certificate serial: 019A503E47C819AE4F24C20DEB5158DAF98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
Manifest number: 13E6
Signing time: Tue 04 Nov 2025 19:00:50 +0000
Manifest this update: Tue 04 Nov 2025 19:00:50 +0000
Manifest next update: Wed 05 Nov 2025 19:00:50 +0000
Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: YKWZdp/Qt9x/b+bx4aoCUSRoKM14rG31SsSUZuaf8ZI=)
2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:47:c8:19:ae:4f:24:c2:0d:eb:51:58:da:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd
Validity
Not Before: Nov 4 19:00:50 2025 GMT
Not After : Nov 5 19:00:50 2025 GMT
Subject: CN=db43e6755c198d16bc0dd930759a9c76a27ce4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:67:a3:8d:6a:5e:6e:4c:6f:2c:a7:f4:2a:
cd:e4:fc:bf:11:02:1c:b1:a8:12:7f:bd:3f:85:4b:
aa:5e:cd:8d:95:30:8b:07:9e:b9:27:0b:d3:48:d3:
e1:4b:b9:b7:bc:72:d9:f1:06:08:5c:79:03:f3:0b:
d7:34:9f:ca:a6:17:b6:5e:e5:f4:75:64:e9:9f:66:
9e:0a:ed:d9:a6:7b:df:77:58:b5:60:d0:0e:43:19:
f1:ef:06:a0:87:da:54:22:2d:b9:31:f8:67:02:fe:
4a:08:4b:27:74:9b:8c:58:80:b0:96:b6:bd:0e:b8:
29:10:dc:38:26:fe:bd:a8:c9:78:ee:5b:47:ea:81:
1f:c1:30:83:61:34:6a:61:49:9f:6c:4d:4f:bf:84:
8c:83:ff:11:68:1d:93:df:7e:b5:d1:c0:cb:ba:87:
63:5e:94:0c:14:14:2a:f7:57:72:96:02:5e:d8:e2:
00:76:70:ac:2b:b5:c1:1e:d1:f6:86:61:7a:26:0c:
3b:5c:9c:a5:bd:36:90:90:02:63:cb:9e:4d:48:e6:
bb:31:f2:a9:f7:83:1d:49:d4:1e:25:89:c1:8f:de:
eb:3f:1d:9e:fb:ea:01:a2:fd:b6:7f:99:14:9c:3e:
5c:fe:67:7a:75:82:76:c7:cd:cd:1d:30:11:7d:18:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:E6:75:5C:19:8D:16:BC:0D:D9:30:75:9A:9C:76:A2:7C:E4:D2
X509v3 Authority Key Identifier:
keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4e:be:4a:8c:20:29:c1:6d:a5:2e:22:f9:c5:89:a0:89:c2:
5a:66:f8:54:1f:a9:76:21:42:56:ad:19:b5:08:f2:3f:66:b0:
ea:ec:47:46:0b:09:9e:a7:6f:51:b2:6e:de:a1:69:d1:6a:79:
f2:2e:aa:31:a2:68:b0:15:98:55:00:81:10:b7:ca:bf:cc:cd:
1b:74:11:57:dd:4d:86:90:e9:8b:f6:f2:e3:14:10:bd:8f:69:
5f:32:3a:14:da:c3:a1:87:d1:53:f3:8a:f9:9f:a2:65:0a:58:
26:23:b3:41:ec:40:0c:b2:8c:a6:dd:6e:f3:79:d8:c0:3a:77:
36:01:7f:19:22:4f:a8:be:5f:8b:3c:aa:b4:14:a6:7f:5b:de:
81:b9:23:c1:f4:35:14:ca:0c:66:1a:e8:6e:5a:d1:08:74:64:
32:00:87:a4:6b:02:6b:6c:a9:6e:6c:d6:62:f7:cb:d7:f2:cd:
68:a9:7c:f3:55:f6:44:cf:99:8a:1c:cd:dc:0a:21:a6:74:50:
5d:bf:a8:5b:7e:8a:09:25:a2:2e:c5:bc:c4:c8:89:f6:39:18:
97:b4:ce:37:6a:e4:0a:59:e4:f7:af:b2:da:ef:d2:ee:61:32:
b3:8a:2a:22:fc:69:6f:af:ff:bf:14:6c:59:00:94:8b:a4:7f:
a9:e7:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:24 2025 by rpki-client