Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
File: ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft (raw, json)
Hash identifier: 5TxmZYwSwndMXcW9MUMjgaPCOdrv6cCuF8KXJo23UEU=
Subject key identifier: 97:0D:BF:24:3E:90:86:2E:7F:C6:71:6F:49:C7:4B:D1:4C:14:87:65
Authority key identifier: 89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
Certificate issuer: /CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Certificate serial: 0197B77CAC42510323A460BFF5BD4C8A3759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
Manifest number: 0EB2
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl (hash: KNsiO9fZod4B87oXxUPdUotd2/PGZeBa4xDu/1rr/a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ac:42:51:03:23:a4:60:bf:f5:bd:4c:8a:37:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b98b1dbc4db0fbd8656d2b2b8a53e2c3dca6ab
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=970dbf243e90862e7fc6716f49c74bd14c148765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:b2:2a:a7:24:a0:34:c3:80:eb:e1:22:8f:
94:1c:84:61:0b:61:0a:47:ed:f4:91:ee:5b:a2:5b:
0e:bb:d8:f9:99:52:5f:e3:b4:d7:e6:a0:ca:08:22:
f2:34:47:fd:47:eb:dc:05:63:15:5f:07:ef:77:87:
bd:f5:ac:ea:7b:49:c3:be:6a:19:21:f0:34:02:1b:
d5:29:4f:ad:7c:63:ee:12:5d:b6:04:ea:96:61:50:
36:92:93:81:3e:25:9c:bb:a5:ae:c3:a3:a5:aa:cd:
9a:72:3c:a9:52:cb:f4:49:b5:6f:21:d4:8d:03:cd:
e5:cc:91:28:63:65:90:20:3a:53:5d:2a:65:75:fa:
58:a7:8a:cf:40:10:56:a0:9b:2c:91:04:82:db:72:
79:52:43:ca:1c:c2:58:bc:bb:24:83:49:21:ff:72:
ba:70:95:5e:46:dc:40:e6:fb:f8:86:a8:bd:4b:8b:
01:06:b4:36:90:b1:46:6c:01:a1:58:bb:36:13:b0:
71:30:10:9f:f2:27:eb:63:1d:bd:bb:2c:c9:0e:04:
28:f9:6e:28:79:f3:16:2e:c1:85:32:2e:a1:06:bc:
41:0f:f6:70:1c:0e:b2:3a:b5:32:11:88:c1:c6:3f:
95:2a:4c:ea:1f:62:6e:c7:03:82:84:db:de:79:0c:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:BF:24:3E:90:86:2E:7F:C6:71:6F:49:C7:4B:D1:4C:14:87:65
X509v3 Authority Key Identifier:
keyid:89:B9:8B:1D:BC:4D:B0:FB:D8:65:6D:2B:2B:8A:53:E2:C3:DC:A6:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibmLHbxNsPvYZW0rK4pT4sPcpqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b600-47a7-4707-9a9e-4da54471762e/1/ibmLHbxNsPvYZW0rK4pT4sPcpqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:88:fa:79:01:26:df:73:c2:a7:77:3d:0d:d4:2a:7d:4f:
ea:e9:da:e4:c8:19:24:11:5c:5b:d5:e0:35:20:1d:e5:79:f7:
15:3a:44:58:91:70:4e:6d:3a:50:33:ca:1d:07:15:94:2f:96:
8e:ec:df:c7:3d:30:d4:e4:f3:45:0e:93:5e:56:a2:82:6b:d6:
33:34:22:dd:ca:ef:99:ca:13:7d:ad:cb:59:a5:1e:31:32:a8:
fd:2a:3e:17:6a:9a:87:24:41:35:d4:66:57:bb:f4:8c:d2:f6:
92:0e:2d:d9:8a:db:09:9f:32:38:b1:81:4c:94:07:44:f2:e4:
0b:80:f2:a2:b2:f3:f4:f4:82:0d:e1:5b:2e:9f:fa:56:5d:15:
83:a2:c1:48:ad:25:bd:b3:fa:7e:36:6f:11:6d:e7:2c:e5:3c:
14:4e:8d:c6:c8:6d:e8:09:a8:e2:66:17:7a:ac:04:37:81:b1:
df:2d:55:46:c6:86:fa:21:6d:07:ca:ab:8c:3f:89:70:e2:f9:
b3:5e:29:63:f4:5e:87:83:6b:d0:93:42:6c:be:f0:a1:f8:3d:
9b:d5:fb:a6:16:3b:4b:97:70:ed:06:ff:a1:a1:9a:21:e6:09:
31:de:94:7f:2c:80:e8:3f:21:19:ed:52:d9:98:84:bb:53:3c:
01:d2:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:35 2025 by rpki-client