Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: QIM7tgZ9dvxLeOC2bRQkwzDKHb8MsWHCTTq1qhKoHfA=
Subject key identifier: 33:0E:E6:1D:C2:E7:3F:58:C6:10:25:39:9E:8E:15:1A:AB:2A:E5:CB
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0199FBB36F2ADB29F68A448F92778CEE8BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: 9gq8mW5Nx4cgzIMgvJXEQpyQL/hUMWPwqyxfzNLiqzc=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
4: MDLnzRvtVaDNauKZ3YaGSLWMKyM.roa (hash: MMQjB7y3IaNNZ21WEqRPVuCFVd1+Iw0iUNXJdEC5KBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6f:2a:db:29:f6:8a:44:8f:92:77:8c:ee:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=330ee61dc2e73f58c61025399e8e151aab2ae5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8a:7f:f1:20:de:0f:bd:89:5c:8c:ce:c4:aa:
28:ec:ca:4f:14:d1:bd:9f:4b:3d:b6:a2:c9:56:4d:
c7:40:ab:8f:9c:3e:93:6d:95:48:47:9e:5a:ad:7a:
7e:51:4c:ae:4e:33:e3:99:a8:e8:d6:f5:b4:06:07:
c4:49:c8:8c:b0:3b:19:93:ea:2f:b9:0b:24:6d:1b:
a9:db:2f:bb:a9:9a:63:97:af:06:39:7d:f0:80:3b:
49:82:3d:09:ca:04:86:43:22:55:4a:e0:b2:40:20:
02:a7:2c:62:cd:e7:e2:c7:32:e0:3c:a3:b7:e1:7c:
5b:b8:21:df:32:d9:52:75:0c:f4:2f:7f:64:d9:f8:
9a:e0:6e:44:e5:c1:89:c5:eb:a9:c2:41:4f:88:1f:
9d:69:fc:67:66:51:59:b1:45:46:28:5d:09:c8:9f:
02:cb:20:5f:76:c1:89:29:1d:d9:46:b7:00:ca:20:
82:85:a6:35:0a:b3:96:8c:4e:b3:ea:a8:90:7e:8a:
74:7d:b1:de:b7:89:61:ef:b9:0e:86:20:b7:f3:61:
4f:8d:76:1b:17:f7:91:a7:8e:94:b7:8b:3a:3d:6b:
9c:b2:f9:3e:5d:68:5c:bc:5a:29:56:88:0e:9d:40:
9a:1c:dd:a7:bd:f3:58:8e:88:fe:73:eb:36:47:5a:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:E6:1D:C2:E7:3F:58:C6:10:25:39:9E:8E:15:1A:AB:2A:E5:CB
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:cb:bc:ed:2d:83:30:04:b0:92:a4:f8:88:a0:00:c7:12:
68:48:d3:06:41:19:f4:8d:eb:02:f0:31:74:77:4b:82:41:63:
5c:25:01:88:a7:a9:9e:da:66:47:72:f2:6d:2a:4b:db:8f:8a:
6c:14:1a:68:79:a7:b5:82:f1:35:3f:60:e4:4e:9a:87:42:e5:
a5:3a:13:78:da:d5:18:46:e1:58:be:f1:56:05:07:75:48:b0:
0b:24:e3:20:85:4d:47:fc:a4:ac:07:6d:89:62:c6:ba:bb:02:
c5:27:62:af:63:e5:18:67:3b:c1:7f:2b:7d:c6:68:ce:5c:bb:
b0:cb:bc:fa:c2:cc:df:8b:63:d0:c0:cb:65:07:3a:12:b4:d0:
55:bf:ce:8c:b2:ec:06:ca:79:3d:8b:fb:f9:43:df:97:6e:51:
a1:dc:05:48:cd:3f:d1:a0:ee:6e:b8:4d:78:30:48:85:9e:84:
6d:06:1c:a7:89:a0:d7:05:e7:59:a9:b1:4f:16:32:84:32:ca:
70:4b:29:ab:3f:d8:5c:9e:89:90:b5:b7:56:ba:a9:aa:d2:e6:
14:93:7f:7b:63:fa:a1:3b:01:e9:bb:c6:dd:b2:a0:83:d7:43:
0c:1f:80:a0:01:79:63:ab:85:e1:a6:90:c1:3a:99:17:ac:07:
93:0d:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:45 2025 by rpki-client