Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: MLCKg5LGlM7D2qjZU6bgBSPBHUr039xnOWxxTHeV9pQ=
Subject key identifier: 51:48:1F:E2:21:C9:86:D4:A1:49:30:B1:CE:5E:B2:4D:66:50:56:13
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 01968B4B54DCC6019B2BDFBD75B16E39B8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 0F05
Signing time: Thu 01 May 2025 10:01:32 +0000
Manifest this update: Thu 01 May 2025 10:01:32 +0000
Manifest next update: Fri 02 May 2025 10:01:32 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: tv8vwykdcyH9WeXv6FzuxMIOxKbqzUrDt1jhDRCXEeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:54:dc:c6:01:9b:2b:df:bd:75:b1:6e:39:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: May 1 10:01:32 2025 GMT
Not After : May 2 10:01:32 2025 GMT
Subject: CN=51481fe221c986d4a14930b1ce5eb24d66505613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:ef:82:8d:ab:51:0a:d9:22:7d:26:0a:cc:
6d:4a:ad:e0:26:f9:84:ce:82:63:2a:20:b9:17:26:
ba:b7:97:f3:4c:8c:62:15:61:21:0d:b8:fd:f3:7f:
a5:53:31:45:9e:a4:8e:f9:e2:9c:3a:fc:b6:27:11:
df:e3:9e:5f:1c:b3:a7:4e:b2:6d:23:52:7e:a1:2d:
07:f2:7e:8b:a0:6e:e9:ae:1e:1e:65:74:25:9a:76:
7b:bf:30:06:ae:b1:45:87:61:bf:79:4e:b3:ba:f0:
73:36:d4:3c:de:50:67:54:96:2f:b7:9e:30:53:c3:
fe:77:11:e8:b3:2f:3d:62:49:70:bf:43:36:38:c9:
60:95:b3:d5:e9:9f:06:85:4d:c6:47:53:6b:d1:a2:
d0:6d:35:8c:79:b8:7c:d4:bb:5a:ae:3f:d8:1c:e4:
37:2f:e6:38:17:dd:73:2e:f2:4a:80:9e:27:da:ce:
9f:f6:a2:1f:8c:4e:45:87:45:cd:de:12:0b:3e:1e:
51:da:94:fd:40:6f:71:c8:2a:dc:22:57:57:3d:05:
2f:3f:be:7e:57:6e:a4:2b:d0:05:cb:74:cb:1a:d7:
33:49:34:c0:b9:b3:15:12:95:63:da:8b:48:7a:f4:
be:fd:a1:87:0b:81:63:0a:84:1c:b8:93:1f:cc:b2:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:1F:E2:21:C9:86:D4:A1:49:30:B1:CE:5E:B2:4D:66:50:56:13
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:26:13:a5:f8:b2:92:47:46:9f:34:aa:6d:13:7e:8c:2e:09:
cc:db:a9:04:7b:61:ed:b8:91:b5:9a:ab:6a:a2:bb:47:01:c4:
ac:1a:9b:c6:af:59:f8:0e:6a:52:73:a4:4a:85:8c:47:24:4c:
de:58:44:49:7a:4a:b9:fb:ac:c9:06:19:be:d6:22:d2:9a:26:
c9:42:37:4f:23:47:48:5c:17:42:74:d7:f7:c8:6e:7f:07:06:
cb:46:a7:36:ee:3b:2b:93:1b:05:7f:43:48:c3:06:29:ec:fc:
8e:a3:b9:f1:b8:f0:73:d4:59:9d:47:b1:71:4b:16:f9:d8:ce:
e3:79:0f:2d:1c:2f:99:03:ac:54:eb:dd:31:59:79:7d:58:c0:
a8:b1:38:55:01:6c:71:0f:a2:de:c4:03:12:74:99:a6:2b:ed:
de:ea:f7:86:fc:e7:0e:b7:b9:28:4b:f9:f4:f8:59:17:1a:8d:
6e:9b:10:57:d9:8c:5a:7d:d2:20:55:9b:55:d0:39:c1:37:b2:
9a:b4:ec:7d:11:86:40:ec:e1:f5:f6:b9:9a:bc:7d:b9:6d:a3:
5e:0f:90:44:08:f2:a8:aa:7f:0d:b8:b2:96:d1:e8:86:98:b9:
7d:3d:59:3f:31:6b:fd:68:5e:09:fa:6c:b1:24:1a:1d:1f:50:
2e:10:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:04:54 2025 by rpki-client