Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
File: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft (raw, json)
Hash identifier: Kb4ZCjGVE+4+RFf9/ig9iUlfGttPu3K+DSWrUUtU+Iw=
Subject key identifier: 46:C6:C9:73:0D:8A:A2:22:D2:B2:7B:05:6B:0C:B7:F9:FA:AA:A8:90
Authority key identifier: 89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
Certificate issuer: /CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Certificate serial: 01965914E3FF1D3AA36CADC6074D0B670CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
Manifest number: 0EEB
Signing time: Mon 21 Apr 2025 16:01:03 +0000
Manifest this update: Mon 21 Apr 2025 16:01:03 +0000
Manifest next update: Tue 22 Apr 2025 16:01:03 +0000
Files and hashes: 1: ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl (hash: ObhuRUf9S7nTDtbjHPJ24CSYRWn7PZ6Bam5qaLr2Qwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:e3:ff:1d:3a:a3:6c:ad:c6:07:4d:0b:67:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89baf5aff1d7aaaa52efe148e0e2340311d7c294
Validity
Not Before: Apr 21 16:01:03 2025 GMT
Not After : Apr 22 16:01:03 2025 GMT
Subject: CN=46c6c9730d8aa222d2b27b056b0cb7f9faaaa890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:66:b3:2a:ba:d9:38:b4:97:de:68:3f:f6:
b6:f2:2e:a0:1e:a9:68:c2:7f:62:18:c0:f1:2c:02:
78:9d:78:19:e6:c4:26:e2:eb:44:df:17:eb:cd:71:
91:f1:59:e0:6a:c4:10:ab:80:4e:b7:20:c1:b2:9d:
68:6a:ae:27:a6:a8:90:27:2c:65:ad:a3:91:46:2f:
7f:8f:59:f6:b6:11:a4:cc:3c:3e:28:7e:ca:92:b0:
36:b5:a8:10:8f:16:95:b5:4b:f0:12:8d:38:7b:9a:
54:db:1f:5f:69:ea:8b:b0:40:09:bf:a5:af:8c:4f:
92:90:5b:c0:66:bc:37:7e:f2:8c:a8:30:57:f5:5e:
8b:54:f5:dc:1a:24:ed:e6:a7:22:87:37:d1:50:7e:
9b:a1:11:ea:b3:6f:e1:ea:e6:b1:15:93:d5:0d:64:
fe:91:f5:65:be:b3:a2:3e:a0:f9:b1:90:65:bc:da:
df:72:da:fa:fd:63:7e:15:e9:99:76:5f:02:fb:51:
c0:6a:a4:b8:cd:6d:8d:44:61:61:f4:85:66:41:f9:
42:2e:1e:5f:17:48:97:85:9d:6b:85:0d:a1:43:f8:
cc:ab:40:10:ae:9e:6e:54:2b:d1:da:70:32:5b:15:
27:cc:25:82:12:ee:6f:9a:64:11:ea:61:36:8e:28:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:C9:73:0D:8A:A2:22:D2:B2:7B:05:6B:0C:B7:F9:FA:AA:A8:90
X509v3 Authority Key Identifier:
keyid:89:BA:F5:AF:F1:D7:AA:AA:52:EF:E1:48:E0:E2:34:03:11:D7:C2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0c5a2a-6d5b-4589-83bc-49a7cf153eb0/1/ibr1r_HXqqpS7-FI4OI0AxHXwpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:0a:27:69:0c:06:aa:ec:dc:95:d3:1c:84:fb:a3:58:e4:
ca:04:fe:8e:82:a6:46:10:ab:de:99:7c:e7:bf:f4:06:b5:96:
be:21:8f:58:87:b9:28:8d:56:45:6e:24:74:7c:32:a3:bf:3b:
ca:bb:2e:42:ac:73:c2:3a:5b:1c:13:bc:2c:ee:e5:7b:13:01:
64:aa:e9:8e:c8:1e:2a:af:1c:b7:89:60:40:2f:a1:05:8d:d6:
b2:b9:c6:03:a9:dd:ff:e4:3d:92:9a:9b:3b:49:92:6e:cf:07:
a1:4c:3c:cb:46:b2:e1:56:11:ac:9f:4c:88:d8:1e:13:77:24:
64:9b:c2:d5:5c:11:af:62:42:18:42:dc:db:94:35:be:79:fa:
de:e6:63:3d:f7:4d:c0:af:2a:ad:c7:11:76:d9:78:d4:38:f2:
5d:43:4a:28:8f:e0:d8:3f:9e:e2:3d:c9:47:a5:c9:9a:a5:5d:
3f:11:02:3d:ee:e2:41:7c:75:21:dc:3b:50:b5:28:aa:ac:5d:
c7:d3:c8:ac:71:70:30:6e:1f:f0:ff:af:d8:7b:e0:e6:27:6f:
b6:9d:04:0b:47:30:53:80:21:86:48:c2:fe:43:5c:a8:65:d2:
08:02:2d:80:67:c8:0c:3e:83:15:08:f4:af:36:f3:92:bf:20:
52:34:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:27:15 2025 by rpki-client