Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: rlXjUwy90fKZo0WxfpdF6jTHBPxwZU1g4mLna00V03Q=
Subject key identifier: BF:72:CC:75:C8:56:D5:7A:16:FD:DD:9F:FB:C5:1B:68:70:5E:7C:E0
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 01988D6AE0C2C164FC0233AD20C456D04EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0AD9
Signing time: Sat 09 Aug 2025 06:00:48 +0000
Manifest this update: Sat 09 Aug 2025 06:00:48 +0000
Manifest next update: Sun 10 Aug 2025 06:00:48 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: ZVcw6ZxCLmIf2xrah7V3Sc5oZ7zJaialrASEYz1nzRI=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:e0:c2:c1:64:fc:02:33:ad:20:c4:56:d0:4e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Aug 9 06:00:48 2025 GMT
Not After : Aug 10 06:00:48 2025 GMT
Subject: CN=bf72cc75c856d57a16fddd9ffbc51b68705e7ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:d3:00:58:77:41:77:a3:a2:e7:a4:d6:52:
3c:f3:69:68:1c:c4:1b:ff:10:34:ce:59:f9:2a:c5:
04:2c:40:23:a9:e9:8e:8c:a9:33:23:57:3b:a7:41:
08:1d:f5:18:05:1e:62:81:ac:a9:17:85:c9:18:c3:
3e:38:20:cb:6d:c5:5f:d8:53:df:76:28:0d:c6:03:
0f:2e:1a:5e:aa:0a:69:e6:6d:1b:d8:85:57:42:95:
20:84:f6:5a:2f:b1:33:07:0d:99:9d:85:e6:9a:df:
05:2f:14:3b:eb:7f:53:71:2b:32:80:88:5f:11:3a:
62:b6:96:2e:82:fc:e6:0e:ff:13:ab:87:99:29:87:
7f:88:2d:1c:8f:55:4f:59:bc:cb:16:4f:44:06:cf:
90:49:19:13:39:02:54:b0:d7:c4:9b:a7:a5:49:a3:
38:46:e6:18:81:26:48:49:fd:d7:54:d5:f2:a7:fd:
df:48:f6:b8:b3:8d:65:95:a3:8f:c5:04:43:1f:b4:
73:de:b8:7c:17:07:2c:64:70:36:51:78:88:3f:e0:
d5:9d:17:70:0b:8e:17:de:55:2b:86:1e:0b:e1:e5:
e3:9b:c3:b5:23:96:65:89:54:61:99:3d:c5:36:06:
90:26:31:9e:94:c9:67:0b:33:c7:39:54:d6:ad:ec:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:CC:75:C8:56:D5:7A:16:FD:DD:9F:FB:C5:1B:68:70:5E:7C:E0
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:df:25:83:b0:38:7b:ff:8a:c7:f3:46:d8:42:7c:5f:ef:36:
f1:22:7d:e1:c3:0e:01:ae:d2:00:48:f2:77:9d:62:ac:f7:b6:
1b:9c:94:d1:5d:39:59:be:c5:29:f6:b2:da:5b:18:78:70:d0:
bd:f4:9a:8e:82:32:04:ec:71:e3:08:fc:da:4a:37:45:0f:de:
d4:18:8f:3e:8f:d3:e0:d5:d6:79:aa:43:0a:67:ad:71:1a:06:
18:55:81:45:ac:fc:2e:0d:64:ed:7e:94:7e:f9:6a:9c:fd:9b:
f7:e1:77:da:5f:e5:0c:b3:59:8e:8b:cf:9e:39:4f:0e:78:76:
fc:92:ea:cb:25:e7:ac:37:83:be:3d:40:f2:29:d3:81:f3:bd:
fb:05:41:60:2b:e0:d0:69:6d:42:46:75:bb:3d:fe:af:5c:f0:
64:09:71:32:8a:3b:74:79:6d:a8:79:9d:0c:5e:22:29:5e:9e:
7a:29:32:e4:09:b5:1e:e8:50:bf:fc:25:1b:44:79:9f:65:68:
54:64:70:81:a9:91:de:0b:b0:70:af:c1:33:4f:b7:5a:e1:d6:
74:bb:3b:36:6b:88:63:14:ff:2f:22:f9:f2:d2:f6:0d:a9:d4:
0b:c7:e0:7b:24:95:a0:30:d7:f9:c9:3c:31:50:43:94:75:e2:
ac:3a:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:48 2025 by rpki-client