Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: mqdleQqK5aqjZ8Q0YTAg6gU/1tmTlbXrCG198IuEPKk=
Subject key identifier: 4D:46:97:3D:77:12:04:4B:BB:C4:70:58:28:F8:C9:F5:F8:D1:85:FA
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 01988D6AD1E3429A4A7AE5A0259FFFA70B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 06:00:44 +0000
Manifest this update: Sat 09 Aug 2025 06:00:44 +0000
Manifest next update: Sun 10 Aug 2025 06:00:44 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: iP6bVXpUn219Yv+clK9WQyvX/rf5DqNacQeV4EG1Its=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d1:e3:42:9a:4a:7a:e5:a0:25:9f:ff:a7:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Aug 9 06:00:44 2025 GMT
Not After : Aug 10 06:00:44 2025 GMT
Subject: CN=4d46973d7712044bbbc4705828f8c9f5f8d185fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:d5:5b:50:9d:14:92:41:e5:2d:03:e2:8a:
2d:d8:05:83:fc:1f:9b:9c:27:ce:57:09:e0:8f:e3:
16:31:32:6e:3f:ce:59:bf:b9:8a:10:a3:41:70:9f:
21:9c:85:0b:3d:01:ae:05:09:c6:71:7c:1d:6f:8f:
b7:3d:c9:f2:a2:f2:06:ce:d7:83:25:93:13:da:3b:
ed:33:1b:d6:39:e2:f5:10:88:e5:5f:73:a9:a1:93:
66:38:76:f9:8e:83:c2:c4:6c:9e:e1:2e:cf:26:e7:
47:fa:12:22:80:48:79:2a:d4:4b:1c:f8:3b:b8:9f:
6c:13:35:89:f9:ae:7d:2f:33:3f:fe:78:6b:63:56:
63:5b:55:cc:45:47:50:4c:54:25:c6:4e:ea:85:7b:
22:82:1a:bd:e4:93:94:7d:c5:87:22:13:bc:bc:21:
5d:fa:a5:e5:94:24:3b:b9:5a:8c:50:d0:71:c1:dd:
af:72:bb:c9:04:e6:2d:93:ee:88:4e:27:d0:1f:06:
f5:a3:50:e7:05:ad:14:14:da:d7:8e:0c:fd:66:65:
b1:4f:64:f2:9d:6a:d3:7c:62:42:8f:97:75:5c:1a:
40:da:d3:b1:9c:10:15:bc:b4:71:c4:b6:c1:78:6b:
a9:88:ea:a9:a6:1a:61:80:a0:d3:35:6c:87:c9:5a:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:97:3D:77:12:04:4B:BB:C4:70:58:28:F8:C9:F5:F8:D1:85:FA
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:13:9f:26:0a:5a:a5:ca:5c:76:a2:0c:b0:00:83:90:83:98:
c9:fd:8c:79:27:d7:7f:a5:70:eb:6a:a3:c0:f8:c9:91:b9:52:
3d:be:fb:f9:59:be:ea:49:f8:cb:b6:00:62:db:75:34:3f:28:
21:fa:b0:13:da:41:f9:03:b5:a8:f4:35:21:05:f0:13:86:fa:
cb:5f:87:79:7a:9c:d4:1c:6a:ab:6e:42:b8:5e:18:34:a1:1d:
9f:9a:2f:f2:1d:e7:c0:a8:0a:4d:02:01:f1:98:7c:07:5f:5a:
09:23:62:ad:36:5b:81:9d:93:21:c9:d0:1a:34:4c:8b:34:ea:
22:b8:ea:94:06:16:9b:93:24:55:35:1a:55:5d:f9:06:ff:41:
22:9e:cc:f8:24:8e:56:9d:f1:f1:6a:3b:ed:df:35:45:5a:09:
85:16:6b:d2:e2:28:0f:76:5e:75:5f:c7:63:c9:62:7b:35:a2:
d9:9a:be:64:62:fb:f0:10:66:ce:cd:5d:c4:8b:9b:1a:50:d4:
b7:ea:8c:2a:c7:2c:c4:dc:2d:6c:fc:d9:26:bc:5e:64:84:aa:
10:49:a2:93:b4:96:ff:c1:00:b2:9c:c9:33:80:e5:4b:29:5c:
f1:13:75:b4:69:2d:0d:b0:de:b4:7e:ab:d9:2a:f2:78:12:e0:
9c:d4:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:14 2025 by rpki-client