Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: QI6KrVIeZwZ9GHMyE+Aw/PfbHoUVdmS+C9I0j7FPGi4=
Subject key identifier: 9E:D4:92:96:69:A9:47:72:4D:62:CA:65:50:55:4B:B3:14:05:C9:A3
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 0197827BD986F89C716197B610B9851C00AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 0F85
Signing time: Wed 18 Jun 2025 10:00:44 +0000
Manifest this update: Wed 18 Jun 2025 10:00:44 +0000
Manifest next update: Thu 19 Jun 2025 10:00:44 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: eD3vkOCdGknCQP66loPU6R+NWRW44UQGhn6a/UND71A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7b:d9:86:f8:9c:71:61:97:b6:10:b9:85:1c:00:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Jun 18 10:00:44 2025 GMT
Not After : Jun 19 10:00:44 2025 GMT
Subject: CN=9ed4929669a947724d62ca6550554bb31405c9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:4f:c6:f9:9f:ab:2e:c4:97:f0:35:db:a9:
3b:bd:c9:09:74:87:e3:4d:f1:98:e1:8c:89:ab:3a:
0e:99:0d:1c:e9:44:41:cb:90:b1:0b:0f:9d:99:18:
67:a5:58:e3:a7:f9:cf:06:d6:be:dc:2c:70:60:06:
7f:f1:08:f7:06:47:54:b5:00:c2:53:8a:4e:e5:61:
e8:a2:a7:f9:df:2f:92:c0:aa:71:cf:ee:93:8f:c7:
e6:fe:17:29:7e:c1:56:1c:b7:56:a5:7a:92:94:51:
6a:bd:e7:ab:d4:73:77:9c:79:85:43:d6:5c:ef:9e:
30:c6:e1:bf:9e:df:50:bd:ea:bd:22:24:a1:b6:80:
b9:32:f6:72:5f:14:bd:c1:d3:73:40:55:bf:77:80:
13:82:b2:6e:e1:c6:2c:fa:1b:9a:bd:8b:a8:81:e9:
9f:1a:84:a0:31:a9:6a:b9:d2:c1:00:46:e6:3f:af:
ca:4b:f6:89:eb:4a:fd:5e:ad:b6:45:41:63:e8:ca:
6c:b9:41:0b:20:75:e4:6f:9a:c1:4a:a2:fb:fa:93:
ff:22:84:3f:01:53:78:22:f4:17:86:c8:16:67:07:
b1:6a:60:51:0e:57:9e:ac:89:38:d4:ca:3e:51:50:
fb:5f:81:0f:be:9c:fd:81:f7:d8:51:6e:7f:a0:91:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:92:96:69:A9:47:72:4D:62:CA:65:50:55:4B:B3:14:05:C9:A3
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:db:d5:72:6d:5c:4c:cd:21:a0:ed:5c:a3:45:f1:88:4c:
34:65:8d:76:89:1e:1b:52:48:4b:89:89:74:85:27:e4:50:65:
26:34:39:b1:16:85:09:46:10:5d:6f:84:ca:6c:a2:d8:50:21:
89:96:84:b5:11:49:b8:7f:2b:bb:c2:ef:8f:49:78:de:5e:b1:
6d:53:53:27:ef:73:35:08:61:cd:20:4d:a1:ac:4f:33:01:00:
ae:7a:f8:82:79:fb:fb:ba:7d:2e:2f:08:b2:02:bf:79:57:2e:
d8:23:79:7a:82:18:bf:ee:f0:55:7d:9b:5d:f5:6c:fb:65:35:
5d:1d:23:26:a6:f1:72:45:89:f5:5b:c3:c9:49:f7:a9:71:df:
75:cc:c2:c2:ff:8e:80:89:f3:56:5a:d2:a5:30:af:c6:bb:4c:
63:d0:f6:2d:17:7b:8e:61:6c:7e:6d:a6:d5:ee:f6:04:3c:c4:
12:26:4b:16:53:59:6d:5c:40:b1:e0:7d:f4:a5:cb:f0:6e:4d:
fd:53:a6:57:c7:11:27:6e:6e:b2:86:68:0f:36:6c:81:7d:ca:
e2:26:41:9e:e9:20:a5:2f:4c:88:c1:1f:dd:25:cc:ca:5b:c2:
03:21:15:a7:b3:e6:d9:a3:3f:e4:2d:9e:13:4f:c3:ae:b2:90:
85:f7:b0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:40:29 2025 by rpki-client