
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: d5zmfHpJCJG9Tq+dZaKxZ8NrZq8IJ8ZqSbY6a1nXQ8g=
Subject key identifier: EC:66:94:28:39:A2:AB:FE:5D:B1:12:9D:F0:E3:AD:28:86:88:F0:84
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0198D4E08BCD9370587CA8455302CB236EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: rLCMrhNgbPrV9hOyvD1gZCzR4dHaGNg4Jr0+73S8JQY=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8b:cd:93:70:58:7c:a8:45:53:02:cb:23:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=ec66942839a2abfe5db1129df0e3ad288688f084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:89:fc:30:f4:51:90:a4:b7:26:19:16:b0:
ce:a1:ad:39:37:f0:a2:b2:63:27:6c:f8:7b:52:99:
85:7e:9b:e6:bc:ac:7c:58:f0:8e:71:28:f9:7e:f3:
bc:e4:ef:40:f7:b4:9a:bc:ae:ad:a7:90:81:04:20:
44:ab:6a:08:1d:b4:3d:93:df:e0:ac:95:31:da:51:
aa:9e:33:23:bd:e2:00:da:27:fc:ab:ab:d7:87:ea:
7b:a2:3a:6c:55:02:ee:4a:39:d8:45:e1:a8:45:ad:
93:61:48:f5:9e:34:97:6b:02:af:41:e1:d3:ba:af:
c8:60:b3:86:a1:b2:70:29:5d:16:4a:2d:a0:91:77:
4b:8a:fc:02:7f:f4:cd:60:1f:e2:c0:3c:c2:5d:68:
f5:92:ce:2f:d0:30:5c:17:03:8a:ca:3f:65:89:52:
6a:a0:e4:88:5b:e2:6d:f4:84:a9:1a:81:a1:a0:df:
0d:d7:f7:9e:b1:15:d6:74:d8:27:43:b6:c7:7d:35:
a5:bf:bd:04:5f:31:fe:9a:dc:1e:b2:6e:01:b9:32:
d8:11:e9:f9:c9:be:f9:12:53:69:d4:67:1f:ed:ab:
d7:6d:1d:3d:47:75:4b:66:01:ec:79:f7:99:89:22:
18:2b:c7:e2:e1:03:0c:5b:c0:0b:94:37:a3:9c:29:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:94:28:39:A2:AB:FE:5D:B1:12:9D:F0:E3:AD:28:86:88:F0:84
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7d:57:8a:31:f0:93:49:29:84:81:ce:ee:cf:0d:57:30:91:
35:36:31:4c:d9:ef:fb:fc:9e:22:44:bf:53:86:bf:0c:c7:69:
40:f5:8b:f0:f9:97:72:43:e6:26:76:fc:f4:24:72:9e:f9:c3:
43:c6:79:71:af:11:46:18:96:67:cb:2b:78:d7:09:cb:5a:06:
a7:68:91:90:23:cb:90:c4:73:1d:6f:ab:99:cf:7d:7b:95:b1:
b5:de:02:59:6c:27:38:ab:cd:89:6c:83:d7:6f:1f:03:1b:f7:
91:e8:98:7d:20:09:19:b2:6a:4e:94:cb:78:3f:d0:e3:30:ad:
d3:66:b9:0b:33:b0:5b:95:90:5a:36:05:ad:3b:ab:6f:58:fa:
ea:b5:d4:0b:20:0b:69:bf:a1:92:c4:e6:a9:cd:10:33:a8:2f:
bd:3e:43:05:a2:9d:1b:5c:8d:f7:5a:ac:81:44:d5:55:f4:59:
4c:ed:35:9a:fd:b8:74:d1:ea:2f:3f:9c:0e:8f:b1:7c:33:ac:
69:3b:e7:7e:c0:5e:13:01:89:26:f3:46:b4:ed:4a:16:93:1a:
13:ec:d0:11:14:69:87:87:4a:6e:10:f5:02:22:81:0f:a7:a8:
80:64:a4:56:38:30:e2:25:a6:09:0e:da:af:4f:f3:4a:7a:04:
bd:6e:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:36 2025 by rpki-client