Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: rm9boxLqBkNM2jCL979Vg8xVGrbXCf9SKcqTuX1HuaA=
Subject key identifier: 34:97:E8:27:A3:05:2F:50:AC:5B:33:F9:84:63:04:CE:F3:FA:45:14
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0198402B1B047D76DC269AE5255B3714D830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 06:00:23 +0000
Manifest this update: Fri 25 Jul 2025 06:00:23 +0000
Manifest next update: Sat 26 Jul 2025 06:00:23 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: tZF+Nz5YJ0/+SRUf+pdU00GAIo1WfaOmLgBqpLaCj/0=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:1b:04:7d:76:dc:26:9a:e5:25:5b:37:14:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jul 25 06:00:23 2025 GMT
Not After : Jul 26 06:00:23 2025 GMT
Subject: CN=3497e827a3052f50ac5b33f9846304cef3fa4514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:f9:fb:60:0a:5f:29:9f:61:f2:3e:22:60:
d4:0a:24:6b:17:45:e2:f5:f3:3c:87:29:23:bf:20:
43:b1:e6:44:23:6c:ac:04:e5:13:00:67:34:ce:4e:
f8:b9:e0:4e:cc:aa:c1:02:56:ff:91:3a:77:16:32:
95:dd:ce:61:70:e5:5f:81:9e:be:b1:b1:7c:2b:c4:
1f:5d:4c:fa:91:99:e4:59:41:0e:b3:17:0c:97:22:
c7:1d:38:29:2f:f8:7b:5b:b6:ed:cb:af:42:a4:4a:
30:37:3c:48:9c:fb:8e:e0:82:b7:9d:4d:a4:94:0c:
af:be:f9:01:2a:88:fe:e1:b9:4b:48:41:4b:da:fb:
95:11:86:46:7e:b7:9a:d3:53:15:f3:14:6c:81:61:
73:36:45:47:ce:07:80:d8:30:b2:5e:be:88:d7:41:
31:41:08:0f:b6:a9:3a:04:f5:c7:a8:31:51:40:c5:
af:a1:a6:19:de:80:58:cf:b7:02:cd:1f:98:a5:4f:
92:6f:ce:99:5c:e6:83:be:09:86:92:b6:52:88:38:
13:5b:e8:34:b9:16:a6:e1:0e:37:53:15:e9:4b:00:
9d:b7:6f:e0:80:a4:9c:38:21:1f:8e:91:64:cb:44:
48:1d:00:23:cc:7e:8c:02:c4:6b:92:be:9d:62:cc:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:E8:27:A3:05:2F:50:AC:5B:33:F9:84:63:04:CE:F3:FA:45:14
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:75:e5:70:da:2e:f7:0e:0d:68:0c:49:53:41:b8:fd:85:
d7:da:e9:39:d2:a9:93:58:e7:1b:f4:fc:7f:a6:e8:d3:3f:39:
b4:7f:74:ec:97:3f:8e:74:be:12:09:eb:5c:22:f7:65:bb:8f:
cf:72:ea:0b:6f:f8:d8:4e:c9:e3:2b:1c:11:92:06:2f:ff:3c:
c7:81:e5:54:f3:67:70:ef:9a:d1:89:6d:51:e2:d1:f3:d6:8b:
02:c5:82:af:d6:11:96:fe:f4:30:a4:11:45:3d:c1:f0:87:ed:
a1:52:93:6c:19:68:0c:e7:3a:53:3a:0a:aa:d7:b0:3d:fe:b4:
e7:0d:35:35:8a:41:4b:97:7b:2c:0b:dd:4a:cb:e1:a1:53:ca:
43:07:82:6b:a1:92:fe:ae:cb:73:f6:98:dc:29:95:76:b6:4d:
31:6c:b5:ba:ed:d2:04:5b:de:02:53:fc:fb:4b:f4:23:a6:af:
f4:6a:f9:aa:64:3e:01:53:29:23:a6:ed:b6:71:4e:ab:32:59:
78:f5:23:c2:bb:44:d3:f4:ae:5d:d7:57:67:2b:8a:51:11:e5:
24:1e:54:c1:11:59:da:0c:09:2b:3f:31:18:bb:fc:e2:3f:c7:
74:90:aa:0c:4e:32:42:5f:fe:1b:31:c2:6c:b9:35:31:da:9d:
8b:3a:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:01:54 2025 by rpki-client