Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: AKVwAx0N3wRsPWWUJJM4MCBF7i/fovuvucO9KvWrfBY=
Subject key identifier: EB:C0:6E:73:C2:39:22:E8:0E:CD:DC:4F:DC:A5:DE:0A:4B:4A:0D:D5
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 01958F2A26CF4F57BC518AEC5457384BC364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 116B
Signing time: Thu 13 Mar 2025 11:00:59 +0000
Manifest this update: Thu 13 Mar 2025 11:00:59 +0000
Manifest next update: Fri 14 Mar 2025 11:00:59 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: O2PHT7Gj3KCa25xxmtjl2c0BBxPHPqBuz/MMbOmNnfs=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:26:cf:4f:57:bc:51:8a:ec:54:57:38:4b:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Mar 13 11:00:59 2025 GMT
Not After : Mar 14 11:00:59 2025 GMT
Subject: CN=ebc06e73c23922e80ecddc4fdca5de0a4b4a0dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:ba:e6:50:6c:f9:04:a9:86:6a:b9:09:f1:
cd:c3:08:cd:dd:40:c3:5f:d1:0f:de:bf:ce:7e:40:
4f:69:96:de:46:59:d8:9e:c8:55:c1:2f:9e:bb:3d:
3c:b2:c1:f0:ac:df:10:29:68:cd:8f:de:67:62:74:
59:e8:d0:6e:1a:08:2a:ca:02:9a:24:08:8e:51:90:
6a:b9:4b:5a:86:fe:8f:53:1d:97:ed:c8:f0:80:06:
b7:60:78:46:62:7a:26:6f:3f:83:4e:4b:62:2e:c8:
06:bc:9e:8c:4a:be:52:a5:bb:64:b9:df:1f:31:57:
29:22:5d:e8:cb:a2:bf:16:e7:95:3b:ee:46:a4:d6:
34:52:83:98:12:98:d1:5d:fa:0a:4d:0c:bf:44:c6:
0a:87:5b:89:f8:a1:08:a8:87:2d:d6:17:77:3b:e4:
92:72:b3:fa:98:36:9b:57:c1:38:4b:22:7f:0a:3d:
7d:93:7d:a3:ba:9e:91:01:b5:4f:98:aa:a1:ed:5e:
2d:b7:60:ca:37:e1:bd:61:a8:3c:cc:66:2e:9e:5e:
c4:c9:52:8e:10:ae:0d:43:fd:8d:8e:73:73:af:39:
15:15:00:cc:30:1f:df:15:b4:14:7e:87:33:39:e8:
ca:4f:e1:c7:7e:7f:70:04:4f:67:bc:8c:3e:43:84:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:6E:73:C2:39:22:E8:0E:CD:DC:4F:DC:A5:DE:0A:4B:4A:0D:D5
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:27:23:d1:cb:35:17:04:34:f4:7e:95:fd:69:c1:5b:da:
de:95:57:6e:1f:78:c2:a2:eb:96:d3:55:c0:59:ce:56:3c:32:
f8:76:d3:15:24:0e:9f:91:62:fd:cd:e4:1f:0e:66:c0:20:77:
1d:6e:b1:60:da:29:89:37:7e:ba:58:98:55:d3:59:a6:27:aa:
85:61:10:41:6a:8a:01:cc:bc:35:80:a2:84:fb:26:a3:20:e9:
78:7c:bd:53:41:3c:6b:5f:68:79:f8:5d:41:ad:f4:be:58:4d:
17:60:55:8a:1c:00:1c:76:a5:55:86:ec:ab:85:25:9a:04:d5:
09:ca:b3:c9:ce:93:af:94:9a:71:1c:38:81:32:dc:45:2b:f7:
84:b0:cc:9a:91:f7:2c:fe:d3:9f:d4:2d:f2:66:96:2a:08:75:
d9:2d:dd:c6:83:14:a2:98:30:c1:36:95:32:3f:d8:2c:77:54:
df:0b:3f:a4:1d:0b:48:88:1e:21:60:2f:e0:47:15:89:f9:af:
4b:f7:66:35:b0:0b:6e:19:e7:32:ba:e4:f2:b5:1e:c0:54:61:
09:b3:5c:01:29:4d:7f:3f:31:4f:44:b5:61:ea:d0:97:58:40:
c9:e8:7e:18:82:80:6c:b5:f1:59:52:c7:1c:d0:ae:b7:28:91:
2a:b9:ed:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKibPT1e8UYrsVFc4S8NkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz
NGQwYTEwHhcNMjUwMzEzMTEwMDU5WhcNMjUwMzE0MTEwMDU5WjAzMTEwLwYDVQQD
EyhlYmMwNmU3M2MyMzkyMmU4MGVjZGRjNGZkY2E1ZGUwYTRiNGEwZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4W65lBs+QSphmq5CfHNwwjN3UDD
X9EP3r/OfkBPaZbeRlnYnshVwS+euz08ssHwrN8QKWjNj95nYnRZ6NBuGggqygKa
JAiOUZBquUtahv6PUx2X7cjwgAa3YHhGYnombz+DTktiLsgGvJ6MSr5Spbtkud8f
MVcpIl3oy6K/FueVO+5GpNY0UoOYEpjRXfoKTQy/RMYKh1uJ+KEIqIct1hd3O+SS
crP6mDabV8E4SyJ/Cj19k32jup6RAbVPmKqh7V4tt2DKN+G9Yag8zGYunl7EyVKO
EK4NQ/2NjnNzrzkVFQDMMB/fFbQUfoczOejKT+HHfn9wBE9nvIw+Q4SNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvAbnPCOSLoDs3cT9yl3gpLSg3VMB8GA1UdIwQY
MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct
ZjdkYWJiMGQyNzg3LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3
LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAInI9HL
NRcENPR+lf1pwVva3pVXbh94wqLrltNVwFnOVjwy+HbTFSQOn5Fi/c3kHw5mwCB3
HW6xYNopiTd+uliYVdNZpieqhWEQQWqKAcy8NYCihPsmoyDpeHy9U0E8a19oefhd
Qa30vlhNF2BVihwAHHalVYbsq4UlmgTVCcqzyc6Tr5SacRw4gTLcRSv3hLDMmpH3
LP7Tn9Qt8maWKgh12S3dxoMUopgwwTaVMj/YLHdU3ws/pB0LSIgeIWAv4EcVifmv
S/dmNbALbhnnMrrk8rUewFRhCbNcASlNfz8xT0S1YerQl1hAyeh+GIKAbLXxWVLH
HNCutyiRKrntUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:59 2025 by rpki-client