Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: 2Y0YN9Dw7xLmWvZ3m/NxK0TI8EW6VA0Rk8T90ETWiq4=
Subject key identifier: 2E:FF:11:E3:D7:C2:26:FD:BB:53:7D:5F:57:13:AA:73:0B:A2:D4:50
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 019A71808A9606FDDCF2B6A49DCA36CEB360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 6AzA6XmiSIakge5mYp4Ok+JCcxHoUFbYAwlkudMybb8=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
4: MDLnzRvtVaDNauKZ3YaGSLWMKyM.roa (hash: MMQjB7y3IaNNZ21WEqRPVuCFVd1+Iw0iUNXJdEC5KBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8a:96:06:fd:dc:f2:b6:a4:9d:ca:36:ce:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=2eff11e3d7c226fdbb537d5f5713aa730ba2d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:ed:67:9e:09:25:22:58:0a:11:1d:9c:8d:
6c:b4:bd:5a:41:9e:86:b6:bf:ad:35:2a:2f:26:ba:
d8:73:81:9d:2e:72:33:49:26:f7:a5:f1:eb:03:ae:
f3:03:26:6c:d9:48:31:50:1d:29:df:8c:6f:f9:d2:
9f:22:43:bf:a2:6b:ea:b5:cd:35:eb:bb:be:f9:14:
ed:78:db:ac:59:82:83:c1:76:88:3d:8d:18:32:75:
a7:d4:7b:86:88:32:50:ae:46:fb:1f:ff:25:b4:a7:
82:3e:64:0b:ee:7d:af:d5:69:b9:0e:52:bc:b7:0d:
f0:f5:9c:b2:dc:7f:44:11:6d:3f:e7:ff:e4:ac:1c:
ef:a1:17:28:7f:c2:92:68:e6:4c:c9:02:ef:e6:00:
7a:30:94:6a:2d:38:a0:b1:2a:f7:93:ee:4f:17:5f:
2c:08:35:a9:f5:e1:5d:b8:e9:6a:ea:f3:5e:8f:e6:
97:59:a3:27:f9:ff:fb:2d:b8:8d:4d:fc:c6:04:86:
1c:16:8e:3e:b1:e0:19:29:18:da:78:59:02:02:99:
63:7f:95:36:12:fc:9f:c6:bb:d0:21:61:55:6e:96:
00:55:bc:c0:c5:10:d8:8d:bc:a1:cf:24:3c:56:ab:
fe:54:e0:3d:78:90:df:36:6f:21:af:e1:08:e4:59:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:11:E3:D7:C2:26:FD:BB:53:7D:5F:57:13:AA:73:0B:A2:D4:50
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:26:96:8f:97:b7:a2:21:2b:6e:df:a4:f3:f5:4f:2b:17:80:
47:51:f5:9f:91:ea:ba:e0:d1:0f:11:b6:43:11:49:12:d2:41:
4d:40:8f:ab:59:d2:d6:61:46:fd:92:b6:83:d9:90:d3:37:99:
3e:a8:a9:3f:d3:76:47:da:79:76:15:8b:22:6e:70:c5:f5:f8:
dc:94:cd:d2:ce:5d:68:b4:a4:5f:24:6a:53:9a:d0:55:91:6a:
b7:e9:a7:8d:ab:a9:49:cf:10:01:79:93:ed:00:99:7b:7e:24:
71:f4:a0:ad:99:27:67:72:61:04:fc:a1:a6:35:28:57:23:64:
8b:87:fe:19:73:55:20:ad:23:2d:a1:a2:79:4f:8f:70:65:fc:
2b:bc:c5:24:98:f6:33:b7:7a:18:86:77:f6:1c:62:24:b8:51:
1c:e3:a1:8d:e3:9d:12:ab:76:14:5d:c2:27:9c:21:c9:f0:a7:
5b:63:27:c7:58:80:63:4e:48:21:a1:2f:ec:70:46:37:56:28:
90:66:82:0e:73:86:bb:03:a0:bc:b4:63:4b:33:3c:fa:65:e4:
ab:d9:fd:f0:c9:a2:09:e0:ed:b3:a4:57:bd:db:63:8a:e5:0b:
51:d1:bb:6c:71:25:36:29:5c:4b:de:15:90:cc:56:34:24:19:
6e:11:cb:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIqWBv3c8raknco2zrNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk
Zjk1N2UwHhcNMjUxMTExMDYwMDQwWhcNMjUxMTEyMDYwMDQwWjAzMTEwLwYDVQQD
EygyZWZmMTFlM2Q3YzIyNmZkYmI1MzdkNWY1NzEzYWE3MzBiYTJkNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2artZ54JJSJYChEdnI1stL1aQZ6G
tr+tNSovJrrYc4GdLnIzSSb3pfHrA67zAyZs2UgxUB0p34xv+dKfIkO/omvqtc01
67u++RTteNusWYKDwXaIPY0YMnWn1HuGiDJQrkb7H/8ltKeCPmQL7n2v1Wm5DlK8
tw3w9Zyy3H9EEW0/5//krBzvoRcof8KSaOZMyQLv5gB6MJRqLTigsSr3k+5PF18s
CDWp9eFduOlq6vNej+aXWaMn+f/7LbiNTfzGBIYcFo4+seAZKRjaeFkCApljf5U2
EvyfxrvQIWFVbpYAVbzAxRDYjbyhzyQ8Vqv+VOA9eJDfNm8hr+EI5FnSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7/EePXwib9u1N9X1cTqnMLotRQMB8GA1UdIwQY
MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct
OWE5ZWQxZWYyZThkLzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk
LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiaWj5e3
oiErbt+k8/VPKxeAR1H1n5HquuDRDxG2QxFJEtJBTUCPq1nS1mFG/ZK2g9mQ0zeZ
PqipP9N2R9p5dhWLIm5wxfX43JTN0s5daLSkXyRqU5rQVZFqt+mnjaupSc8QAXmT
7QCZe34kcfSgrZknZ3JhBPyhpjUoVyNki4f+GXNVIK0jLaGieU+PcGX8K7zFJJj2
M7d6GIZ39hxiJLhRHOOhjeOdEqt2FF3CJ5whyfCnW2Mnx1iAY05IIaEv7HBGN1Yo
kGaCDnOGuwOgvLRjSzM8+mXkq9n98MmiCeDts6RXvdtjiuULUdG7bHElNilcS94V
kMxWNCQZbhHLKA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:54 2025 by rpki-client