Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: 2YkBOIiTOY7FPvgtBy1U4Y6J5bIugZ24P+66leV7HdQ=
Subject key identifier: E8:C5:81:9D:89:D3:56:3A:74:28:84:9D:64:45:DC:10:47:DB:5B:92
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 01967868271CE0C70A8EC28143A44F2890F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 18:00:13 +0000
Manifest this update: Sun 27 Apr 2025 18:00:13 +0000
Manifest next update: Mon 28 Apr 2025 18:00:13 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: LLvump6iONiK2Ku4HaP+1DRr0Vt1iPR+x1A78KEMa4o=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:27:1c:e0:c7:0a:8e:c2:81:43:a4:4f:28:90:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Apr 27 18:00:13 2025 GMT
Not After : Apr 28 18:00:13 2025 GMT
Subject: CN=e8c5819d89d3563a7428849d6445dc1047db5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:11:e2:d3:5b:8b:00:91:c2:11:03:ce:f8:
1a:c6:fd:65:41:3a:62:89:5f:29:2e:a4:d1:ae:01:
66:58:40:82:ce:03:35:63:a3:5b:d0:57:c8:73:1b:
f6:ac:2b:1a:e4:2c:98:6b:9e:4b:a7:23:44:50:27:
d2:dc:4b:67:dc:52:2f:94:9e:f3:4b:ea:1b:c8:a4:
f4:65:cf:d6:8a:c1:e7:31:92:5f:b1:21:cc:46:04:
6a:ab:32:44:c8:60:1d:b2:24:3c:3f:81:ae:aa:0d:
7a:f0:07:ca:ba:7b:a4:48:ff:24:c5:52:c9:7b:3f:
19:ed:e9:24:06:38:70:7f:2c:51:6a:2b:d5:43:85:
1a:76:00:c6:c7:64:a7:61:2f:03:3c:2c:b2:aa:da:
7e:89:86:ce:ab:c4:a4:39:cc:13:09:d0:9f:c0:1e:
7f:5c:62:07:15:83:39:98:06:65:25:c3:a4:03:54:
14:5e:c5:17:ed:e3:88:83:7d:8a:56:a5:c8:ef:55:
84:97:d9:3d:ed:21:f0:63:30:16:3e:b6:0d:ef:c1:
8a:2a:48:54:c3:37:e5:e0:83:98:86:c6:11:df:63:
23:62:e1:7e:05:e4:f0:9d:d1:11:fe:1f:fe:b1:e9:
5d:0c:21:f3:75:ea:6d:e6:92:02:0b:4c:1d:16:6e:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:81:9D:89:D3:56:3A:74:28:84:9D:64:45:DC:10:47:DB:5B:92
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:79:ad:89:24:84:8b:0e:c6:30:f3:6d:d3:b5:94:38:8a:37:
0f:aa:23:00:12:8c:51:d0:f9:c4:63:77:2f:28:ac:7e:8a:66:
11:63:48:4b:c8:18:1f:60:a6:89:fe:7b:40:d7:90:13:8a:a1:
fe:af:86:cf:57:0f:dd:87:41:87:96:c1:7a:4b:c0:52:43:b5:
47:3f:06:5b:c9:5a:d8:86:be:b2:a2:ba:e7:64:26:ab:14:c9:
c9:25:dc:9c:fb:00:ea:23:93:e6:f6:9c:20:c7:ad:ad:18:b6:
1a:51:2b:9a:23:e1:c7:de:d6:1e:26:95:08:e3:8f:54:ba:86:
a4:4b:82:e6:d5:cd:3f:8d:e3:37:c2:5a:bd:04:1c:86:8c:e4:
a7:8c:92:4e:6a:7e:da:85:b2:9c:77:8b:cf:df:6f:1e:b8:23:
da:5a:aa:f8:6e:8b:bb:33:4d:af:93:a6:44:62:a6:23:8c:e4:
a3:23:ca:80:3a:f0:55:af:09:00:ea:84:15:ad:77:de:ed:0c:
f8:db:61:e8:b7:f2:44:db:36:2a:9c:7d:72:54:fc:74:92:57:
2e:87:d1:41:0b:2a:09:f1:96:1a:0a:b4:5c:b6:8f:b0:74:16:
9f:1f:4b:40:25:d9:17:3b:f7:c8:3d:95:71:c7:12:d5:b4:30:
b8:4f:20:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aCcc4McKjsKBQ6RPKJD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZjEwZTM0NDIxYmFmZjE3NGQ2MDY3OGYzMmZhNWUzNWNk
Zjk1N2UwHhcNMjUwNDI3MTgwMDEzWhcNMjUwNDI4MTgwMDEzWjAzMTEwLwYDVQQD
EyhlOGM1ODE5ZDg5ZDM1NjNhNzQyODg0OWQ2NDQ1ZGMxMDQ3ZGI1YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQoR4tNbiwCRwhEDzvgaxv1lQTpi
iV8pLqTRrgFmWECCzgM1Y6Nb0FfIcxv2rCsa5CyYa55LpyNEUCfS3Etn3FIvlJ7z
S+obyKT0Zc/WisHnMZJfsSHMRgRqqzJEyGAdsiQ8P4Guqg168AfKunukSP8kxVLJ
ez8Z7ekkBjhwfyxRaivVQ4UadgDGx2SnYS8DPCyyqtp+iYbOq8SkOcwTCdCfwB5/
XGIHFYM5mAZlJcOkA1QUXsUX7eOIg32KVqXI71WEl9k97SHwYzAWPrYN78GKKkhU
wzfl4IOYhsYR32MjYuF+BeTwndER/h/+seldDCHzdept5pICC0wdFm41FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjFgZ2J01Y6dCiEnWRF3BBH21uSMB8GA1UdIwQY
MBaAFCHxDjRCG6/xdNYGePMvpeNc35V+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTct
OWE5ZWQxZWYyZThkLzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zZTc2NTQtNTEyNC00YTZlLTk0OTctOWE5ZWQxZWYyZThk
LzEvSWZFT05FSWJyX0YwMWdaNDh5LWw0MXpmbFg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3mtiSSE
iw7GMPNt07WUOIo3D6ojABKMUdD5xGN3LyisfopmEWNIS8gYH2Cmif57QNeQE4qh
/q+Gz1cP3YdBh5bBekvAUkO1Rz8GW8la2Ia+sqK652QmqxTJySXcnPsA6iOT5vac
IMetrRi2GlErmiPhx97WHiaVCOOPVLqGpEuC5tXNP43jN8JavQQchozkp4ySTmp+
2oWynHeLz99vHrgj2lqq+G6LuzNNr5OmRGKmI4zkoyPKgDrwVa8JAOqEFa133u0M
+Nth6LfyRNs2Kpx9clT8dJJXLofRQQsqCfGWGgq0XLaPsHQWnx9LQCXZFzv3yD2V
cccS1bQwuE8gWQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:52:42 2025 by rpki-client