Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: 94j3AdLEvOJoIQm2AJmXiE3aWAka4xdKpbydMVYZfBI=
Subject key identifier: AC:C8:09:FC:66:08:FD:DE:E5:4F:05:E8:DB:E5:73:FE:C1:B4:8B:96
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0196BA11B6A95D4C6663B3100ECFED9CFFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 12:00:45 +0000
Manifest this update: Sat 10 May 2025 12:00:45 +0000
Manifest next update: Sun 11 May 2025 12:00:45 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 4QZRZ48/209x3AxDYqedeDyqK8qtTjeo5hhjAOX2Yl8=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:b6:a9:5d:4c:66:63:b3:10:0e:cf:ed:9c:ff:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: May 10 12:00:45 2025 GMT
Not After : May 11 12:00:45 2025 GMT
Subject: CN=acc809fc6608fddee54f05e8dbe573fec1b48b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:69:83:24:91:ec:55:9f:11:2f:fe:86:6d:
e3:33:a3:31:72:ac:d1:83:e3:4d:2c:67:5d:34:c8:
ad:f5:7b:35:df:f9:95:0f:cd:98:7a:05:3f:9c:14:
2f:3d:a7:2f:09:4e:72:76:07:e4:2f:b5:f0:b8:77:
67:0c:84:5d:95:38:fe:0e:c9:74:0c:51:3d:9e:59:
52:e3:af:dc:fb:41:68:3b:9e:2b:79:fa:e2:e7:ee:
15:4a:a7:46:a4:14:1e:e8:43:68:3c:1e:14:4b:0f:
ed:5e:e4:13:1c:86:92:ab:13:6b:b3:db:09:6b:dd:
82:0a:b3:92:20:87:1f:49:1e:c0:5c:ac:3e:2c:e3:
cd:e1:d2:23:b3:b0:c5:51:b6:50:c0:17:40:04:71:
cb:78:c3:5a:a1:e4:36:1d:9e:0e:c3:92:4a:01:8b:
f3:28:a4:8a:eb:a3:73:16:16:d4:e2:d5:ce:7c:96:
27:8e:42:dd:54:65:a6:81:0f:a4:7f:3a:fc:f3:f1:
8b:97:82:19:a5:41:ef:fb:96:bd:52:f1:c5:99:9e:
ee:53:fc:2d:b4:00:98:32:11:b0:75:4b:77:74:53:
02:f9:ce:8d:b0:38:8a:62:59:fe:41:b0:8b:24:d4:
34:bc:bc:10:96:f4:14:ec:ec:48:1d:83:c5:8b:eb:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:09:FC:66:08:FD:DE:E5:4F:05:E8:DB:E5:73:FE:C1:B4:8B:96
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:09:2b:86:d0:66:98:da:77:23:a2:e3:fd:46:a0:48:bb:
84:bf:ed:27:81:fd:ef:d7:b3:49:a2:ef:90:00:8f:b0:93:5c:
e2:55:28:42:bf:8d:b3:5e:62:ef:c3:65:bb:28:c5:1f:f1:94:
c7:a3:5c:fb:df:af:14:dc:89:27:44:44:b5:71:2b:22:22:8d:
c7:50:5c:81:cb:8f:9b:45:e4:65:d5:73:bf:6e:5a:1d:36:01:
e6:d1:18:fc:ba:7b:10:a2:00:9c:31:56:82:2c:d2:ec:11:89:
f4:8c:05:0b:04:2c:62:a4:c7:de:8e:bf:a4:fc:d9:1f:fe:a0:
67:99:20:97:98:23:4e:fb:7d:03:9b:3f:da:78:cb:5c:27:09:
ea:22:24:1e:c4:d7:2f:f7:6b:3b:40:b2:80:67:6a:ff:a3:c3:
3b:b5:32:95:8b:a6:7a:24:8c:c5:cc:82:cc:74:15:47:e1:5b:
df:fb:49:17:b3:46:fe:39:51:43:b4:7a:fd:da:d8:f1:c3:4e:
ce:1d:b7:15:79:bb:85:41:3b:83:1a:f1:c2:86:0c:d0:44:8a:
29:79:94:83:c8:00:8f:05:cf:da:c3:df:52:bb:e6:53:c9:d5:
fb:8c:3c:d1:08:5d:df:05:03:dd:e3:b3:d1:1f:ab:5a:9d:28:
c5:47:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:33:57 2025 by rpki-client