Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: gVgoCQc6d88lhE5Hq6iq+YxjdecCsIRPtDmpVc+EbCM=
Subject key identifier: C8:59:45:C7:1A:85:38:6E:CF:68:52:52:85:53:13:98:67:91:E1:11
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 0199FBEC1242DAAF371616B46A7270FDE259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 10CD
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: oeZ/wbFK4w+6Qb4/za1/zMi12xvLlL5cdA5z28hr/lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:12:42:da:af:37:16:16:b4:6a:72:70:fd:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=c85945c71a85386ecf685252855313986791e111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:5e:3e:f8:bf:d0:c2:60:c4:8c:06:78:d0:
98:d9:f6:47:2b:76:6a:3c:9d:08:00:8b:71:78:7c:
59:31:88:0c:3e:50:8e:ee:a3:96:d2:01:3e:5c:16:
f0:61:72:2f:74:5f:c5:8c:f5:22:69:b6:e5:5a:f9:
e7:01:b4:01:b4:e8:bd:64:d3:63:18:98:e6:14:a2:
91:08:95:3c:36:be:3e:dd:9e:d6:72:e4:97:79:42:
5e:58:f1:ae:d1:c1:e7:25:ab:46:69:44:77:75:86:
28:21:bb:eb:6c:8e:02:db:2b:23:ee:95:67:3b:4b:
1d:5a:da:dd:18:d5:59:69:94:14:0b:b8:1a:da:54:
d4:80:80:54:65:1f:3a:b2:52:c4:08:3b:ca:d4:26:
c5:3d:ce:ed:97:b2:95:3b:14:46:23:10:26:37:7d:
1d:10:c9:a4:74:e7:ce:18:d5:68:d6:ce:d2:a2:a2:
2e:16:da:76:73:bb:40:cd:57:5d:d9:15:1d:01:2d:
26:4a:db:83:b2:0e:27:f1:1c:68:4a:72:d8:9d:d5:
20:99:7c:2b:4a:67:25:ea:60:04:07:18:69:28:c2:
d2:53:73:23:81:5c:d3:70:f3:99:e7:a1:fe:fa:a9:
bf:25:8e:05:66:cf:98:87:c1:ce:88:71:28:85:c3:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:45:C7:1A:85:38:6E:CF:68:52:52:85:53:13:98:67:91:E1:11
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:69:77:94:67:97:15:80:93:5c:af:62:94:44:15:73:60:
12:83:0b:38:e0:18:94:bb:f3:8e:f0:10:c9:da:c2:ee:81:60:
27:ce:ce:ce:22:9c:1c:c2:b4:cf:e1:09:67:40:8d:0b:1f:93:
a1:9c:f1:8d:f5:8c:52:4d:be:17:1c:78:2d:6d:b1:f6:2f:c9:
ea:0a:0f:15:47:90:56:e5:12:47:42:e3:19:82:b6:df:14:a5:
99:e0:f1:3f:5c:20:57:1d:90:84:4e:40:46:8b:cd:d8:f5:9f:
c5:a3:70:2c:77:2e:f2:ea:ca:d1:5e:9c:3f:06:5e:d0:d1:b3:
0c:0b:0b:ec:68:fb:43:95:82:14:aa:02:3f:e1:38:14:49:3c:
ba:88:98:20:55:d4:8a:8d:a7:80:c0:db:65:bb:b4:01:ab:5a:
f6:a5:54:19:4b:88:0f:b9:d3:86:ac:22:c8:aa:78:c4:fb:8c:
1a:ae:d6:48:01:82:f1:ae:08:00:ff:ae:6f:bb:46:3c:0e:7c:
6d:32:e7:74:ac:2b:6b:25:ad:e5:92:f6:c0:e3:4d:ba:b6:c1:
19:94:a4:df:ed:8c:9f:54:09:bc:b0:27:81:ef:80:37:55:f0:
2a:29:f1:84:88:d4:cb:c2:b3:3a:0a:35:59:cd:3f:5e:16:70:
fa:b3:de:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BJC2q83Fha0anJw/eJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YmFmNWFmZjFkN2FhYWE1MmVmZTE0OGUwZTIzNDAzMTFk
N2MyOTQwHhcNMjUxMDE5MTAwMjU2WhcNMjUxMDIwMTAwMjU2WjAzMTEwLwYDVQQD
EyhjODU5NDVjNzFhODUzODZlY2Y2ODUyNTI4NTUzMTM5ODY3OTFlMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppNePvi/0MJgxIwGeNCY2fZHK3Zq
PJ0IAItxeHxZMYgMPlCO7qOW0gE+XBbwYXIvdF/FjPUiabblWvnnAbQBtOi9ZNNj
GJjmFKKRCJU8Nr4+3Z7WcuSXeUJeWPGu0cHnJatGaUR3dYYoIbvrbI4C2ysj7pVn
O0sdWtrdGNVZaZQUC7ga2lTUgIBUZR86slLECDvK1CbFPc7tl7KVOxRGIxAmN30d
EMmkdOfOGNVo1s7SoqIuFtp2c7tAzVdd2RUdAS0mStuDsg4n8RxoSnLYndUgmXwr
Smcl6mAEBxhpKMLSU3MjgVzTcPOZ56H++qm/JY4FZs+Yh8HOiHEohcOoYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhZRccahThuz2hSUoVTE5hnkeERMB8GA1UdIwQY
MBaAFIm69a/x16qqUu/hSODiNAMR18KUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMt
NDlhN2NmMTUzZWIwLzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wYzVhMmEtNmQ1Yi00NTg5LTgzYmMtNDlhN2NmMTUzZWIw
LzEvaWJyMXJfSFhxcXBTNy1GSTRPSTBBeEhYd3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8xpd5Rn
lxWAk1yvYpREFXNgEoMLOOAYlLvzjvAQydrC7oFgJ87OziKcHMK0z+EJZ0CNCx+T
oZzxjfWMUk2+Fxx4LW2x9i/J6goPFUeQVuUSR0LjGYK23xSlmeDxP1wgVx2QhE5A
RovN2PWfxaNwLHcu8urK0V6cPwZe0NGzDAsL7Gj7Q5WCFKoCP+E4FEk8uoiYIFXU
io2ngMDbZbu0Aata9qVUGUuID7nThqwiyKp4xPuMGq7WSAGC8a4IAP+ub7tGPA58
bTLndKwrayWt5ZL2wONNurbBGZSk3+2Mn1QJvLAnge+AN1XwKinxhIjUy8KzOgo1
Wc0/XhZw+rPeHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:59 2025 by rpki-client