Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: QRxPxPOri/NsLWoVqMerMASV/tT9K9NOH4i+6jbRSJk=
Subject key identifier: 4E:1E:65:70:29:2E:F4:EF:F1:7D:0C:3A:9E:F1:97:01:C7:F7:33:7C
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 01988CFD5D8AE3CD56D510F95892C933C7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 100F
Signing time: Sat 09 Aug 2025 04:01:11 +0000
Manifest this update: Sat 09 Aug 2025 04:01:11 +0000
Manifest next update: Sun 10 Aug 2025 04:01:11 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: FXEXalShA/42a9+9a69TkVIBVPHm02xg47rLhRTjrZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:5d:8a:e3:cd:56:d5:10:f9:58:92:c9:33:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Aug 9 04:01:11 2025 GMT
Not After : Aug 10 04:01:11 2025 GMT
Subject: CN=4e1e6570292ef4eff17d0c3a9ef19701c7f7337c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:dd:46:2c:26:43:f8:28:66:ef:23:12:58:
81:3a:22:04:71:5c:fe:49:98:2e:93:e0:7a:ca:89:
46:87:75:4b:82:79:e6:12:7c:fd:d0:d1:c2:09:db:
d0:5c:4c:c0:ca:2e:f8:29:95:fe:af:ec:88:45:ba:
49:3d:2a:5c:83:39:e5:f1:b6:62:13:80:f6:cb:04:
23:e9:1a:08:b4:d4:13:2b:16:87:e4:29:3f:bd:3a:
ef:20:60:45:21:51:2e:64:f9:2a:88:60:7c:c5:df:
6d:db:a4:1f:82:42:94:d1:8e:44:65:59:43:02:6d:
26:92:d4:18:13:21:89:26:2a:bd:88:f2:05:09:82:
73:4e:d0:32:c6:04:0d:8c:a5:a8:8e:98:61:84:29:
ce:2f:c2:80:11:9e:73:ed:1d:03:c8:44:b4:69:9e:
3e:b1:ee:b5:12:fe:90:5a:9a:71:fc:74:9b:72:c7:
6c:78:8b:9c:a6:f5:f2:72:68:2e:3d:56:e3:26:9a:
90:73:41:9e:da:8b:84:4b:da:d6:35:64:23:c9:e1:
01:30:7b:c9:63:9c:56:76:ff:9b:79:d6:77:e4:89:
9e:a8:61:d5:e9:6c:d0:d3:19:1c:91:8d:ad:c0:eb:
19:f7:e2:6b:a2:43:20:fe:4e:22:9a:a1:8b:b4:5f:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1E:65:70:29:2E:F4:EF:F1:7D:0C:3A:9E:F1:97:01:C7:F7:33:7C
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4c:06:0d:35:79:3d:6f:a3:46:97:f1:1f:5f:14:84:75:78:
ec:ea:7d:a2:57:13:78:4a:a2:b8:47:cd:20:fc:fc:60:c1:91:
01:a6:66:7d:59:5a:69:ff:9f:29:6e:f8:a2:e8:27:d0:34:64:
4c:8f:28:82:d4:3a:f9:e6:d3:f9:fe:8b:e7:14:e1:25:3b:b0:
6b:63:75:b3:9a:25:14:ab:5f:f0:64:3a:a9:0d:63:62:5b:de:
2e:06:43:2d:89:34:80:0f:23:6f:4f:5b:cd:2a:fb:4a:d6:35:
b1:1e:fd:42:2e:58:7b:06:cf:70:ed:2f:52:38:a2:bf:47:3f:
17:d1:30:9d:7a:fb:8f:be:e9:6a:fe:76:bc:b4:e3:54:96:da:
aa:6e:e7:52:67:bf:eb:57:5a:23:ce:82:92:9d:93:e9:2a:d7:
c5:31:48:14:c2:ea:47:69:78:35:3b:43:4e:2c:6c:49:dc:36:
b6:bb:ae:92:74:73:8d:ca:b2:fe:ec:7c:93:2b:71:2f:4a:46:
cb:a7:53:5f:22:30:1e:48:86:96:95:b9:16:02:af:5c:e3:3f:
57:47:79:33:1e:71:80:0c:d7:51:35:93:bc:74:e2:f3:18:4c:
d2:e8:e3:c2:4e:2a:dc:a9:81:07:82:97:dc:5d:0e:a2:8e:df:
2a:15:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:37 2025 by rpki-client