Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: FENm9QmEKtwWLE/ThZrXHfP6oQEJ1TMn/ULeU36XzzM=
Subject key identifier: 9E:1F:D3:FE:96:8D:DE:C3:52:F4:DC:75:3B:1F:3C:60:DF:17:57:82
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 0196CB05AC15B145C9C1CD712C441248FCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 0F26
Signing time: Tue 13 May 2025 19:01:08 +0000
Manifest this update: Tue 13 May 2025 19:01:08 +0000
Manifest next update: Wed 14 May 2025 19:01:08 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: ZmrZluqgbdR44YUFdQyay2qhjWU07c7AQFSoE3dkeTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:ac:15:b1:45:c9:c1:cd:71:2c:44:12:48:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: May 13 19:01:08 2025 GMT
Not After : May 14 19:01:08 2025 GMT
Subject: CN=9e1fd3fe968ddec352f4dc753b1f3c60df175782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:e7:3e:9e:8c:84:05:d0:21:0c:74:93:41:
81:1a:ce:9c:1c:d3:4d:34:4b:03:ef:4f:a7:2e:6d:
8b:2a:f9:30:71:94:6f:5e:01:27:79:79:9e:44:11:
fa:8f:95:4d:b9:ae:a1:7e:4c:68:f9:85:45:e7:99:
ce:28:72:9f:6c:5d:53:37:60:2b:bd:ee:f1:eb:1b:
79:4d:26:2c:82:28:38:9c:4d:91:84:84:b0:fc:e3:
9d:81:49:6f:1b:45:33:f7:be:5c:5c:77:2d:92:30:
ba:0d:d5:2a:5b:98:5a:98:a8:96:ad:c7:35:64:49:
11:da:74:ad:7a:9e:39:13:c7:6e:f7:f6:e2:d2:1d:
84:88:47:fd:be:d5:b5:f2:4d:c0:39:99:f8:a5:f2:
ae:21:33:8f:52:0e:46:41:c5:6f:78:23:3a:7d:7d:
ea:d5:8a:fd:81:28:53:8a:dd:e9:0e:1e:e9:e3:e3:
63:27:b2:a2:3e:c6:9f:cf:14:91:98:d9:5f:20:4b:
7c:16:d7:92:09:46:f6:d1:f2:5e:15:53:69:d2:90:
27:8a:2c:c2:74:15:14:53:bb:a2:22:a5:40:fb:a0:
1a:83:f7:dc:46:b5:b3:9a:ed:5a:bb:a1:52:73:2e:
64:c6:48:fc:ff:58:25:3a:7e:a5:d0:6b:51:34:fd:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1F:D3:FE:96:8D:DE:C3:52:F4:DC:75:3B:1F:3C:60:DF:17:57:82
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:80:fe:cd:56:98:23:f9:4c:64:b9:59:dc:71:e1:4d:d3:
83:e0:fa:a7:3e:6d:15:ab:ba:1f:70:5b:dd:4a:84:47:cc:b5:
d4:9d:db:1e:c4:58:e8:92:e5:b8:30:f8:b2:09:68:e0:4b:16:
90:24:80:8c:47:83:2b:bd:2e:9f:f9:b6:86:a9:e6:f6:d9:ee:
a7:a3:36:31:c2:7c:dd:a7:06:65:ca:b8:5e:ae:01:22:79:cc:
34:11:32:0d:a1:b5:df:35:49:cd:5e:9e:d7:49:6f:00:84:73:
a9:77:82:46:79:c9:8a:94:d9:05:47:97:ee:77:e5:c9:38:41:
f8:7a:d9:d1:20:e5:e2:71:25:85:87:7d:77:1a:81:01:e8:1b:
d6:2e:a3:c1:f2:43:5c:44:59:e0:ae:5d:16:b7:d6:e9:4e:72:
db:2a:f4:e0:a1:27:ca:37:cf:64:29:86:d2:da:d3:97:df:9f:
02:42:51:9c:9d:df:a1:2a:bb:58:ec:c5:c5:a0:4b:bb:17:d5:
7b:32:59:ac:68:95:47:b7:3d:55:8b:6e:c1:af:9f:c2:01:17:
3f:44:57:d2:ba:00:27:b2:7c:78:40:f4:ed:a5:82:d5:af:d7:
52:3c:69:db:fa:6b:3f:b9:02:fd:56:1d:d2:f1:f3:4b:af:0a:
44:c4:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:51:47 2025 by rpki-client