Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: 9wvM6yoVoziEfnegzM8+Bu3DzS5dgQ4Brbux851TMF0=
Subject key identifier: B2:05:75:04:39:8D:21:C5:4F:ED:2D:FF:44:6F:4D:CA:B6:6E:36:E9
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019A533EEB6B26FE25D93D4EE33C5D3D8208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0BC4
Signing time: Wed 05 Nov 2025 09:00:23 +0000
Manifest this update: Wed 05 Nov 2025 09:00:23 +0000
Manifest next update: Thu 06 Nov 2025 09:00:23 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: FYQFbaAEHUBKYYDYu+Eb64/Cih8MznL+HXgEsmwwOxo=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:eb:6b:26:fe:25:d9:3d:4e:e3:3c:5d:3d:82:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Nov 5 09:00:23 2025 GMT
Not After : Nov 6 09:00:23 2025 GMT
Subject: CN=b2057504398d21c54fed2dff446f4dcab66e36e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:52:6e:21:59:d8:ea:89:46:d5:ef:ef:9c:
cc:30:9d:9a:c3:d9:0f:e6:1a:ba:b6:28:b5:e7:38:
cf:6f:51:48:d2:96:86:de:6e:ea:8f:f3:ca:92:a3:
0f:93:09:75:39:cd:01:2e:ae:b1:85:e2:4f:5b:a0:
5a:da:5e:ac:7c:2a:d5:8b:e2:b4:c8:ea:44:fa:a6:
99:30:14:4c:fa:c5:18:f1:53:ae:d4:2a:c2:52:c7:
4f:77:de:c3:05:a9:e2:6e:4c:d5:9d:c5:7a:3e:0d:
b3:d6:ea:5f:4a:3c:0d:b0:b1:6c:2a:f7:a3:d4:f8:
77:01:91:9e:81:58:82:aa:34:87:0a:ec:da:04:89:
50:39:f8:a9:0b:5f:bf:aa:75:47:ce:d7:ad:a0:6b:
d6:41:77:49:42:2e:ff:b4:3a:60:39:bf:68:72:67:
c8:b6:91:04:52:75:f6:a4:28:67:88:6e:6d:11:3c:
bf:ac:49:42:3d:da:ff:99:44:9e:bc:75:0c:39:a3:
fd:81:07:7c:f3:d1:9b:08:64:6d:41:45:f1:36:82:
22:09:d4:69:3f:48:aa:3e:7a:8a:5d:66:0b:66:96:
73:71:49:2a:79:f4:08:fb:70:cf:d9:74:95:bc:ba:
16:69:81:ab:07:25:08:a0:c6:48:16:f6:e4:2e:a5:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:05:75:04:39:8D:21:C5:4F:ED:2D:FF:44:6F:4D:CA:B6:6E:36:E9
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:16:c4:ca:e1:10:e9:05:33:7f:35:f6:90:bf:bf:3a:f9:
f7:5c:86:19:6d:1a:e1:06:fe:7a:a7:8c:9c:70:e2:f9:6b:7e:
f0:e7:71:2a:6f:cb:72:b4:b3:b8:86:6a:a4:f2:f1:d8:9f:e1:
6a:c1:bd:c7:28:b2:e3:eb:aa:f4:0d:6e:de:eb:75:c2:bc:88:
e1:5f:a1:b0:24:a1:fe:f6:37:ec:62:8d:61:4e:25:d0:03:4f:
da:3e:45:8e:e2:69:41:c9:2f:df:a0:de:d1:b7:c5:a7:31:f4:
71:ba:e7:01:b9:db:c3:5b:96:52:7d:9a:54:2e:96:e2:ce:37:
74:f5:37:95:6c:26:f0:64:88:c3:9b:a1:38:a7:73:48:c0:77:
30:a2:c2:13:f9:20:e0:de:87:c5:9c:1b:eb:47:2d:69:b8:48:
47:4a:c1:9a:0d:1b:2c:a9:44:ae:3a:e0:f4:56:53:51:15:cb:
3d:7f:1f:78:52:2e:7c:e0:e4:b6:2a:ef:68:6b:a1:34:57:16:
97:12:41:2b:f3:6a:0f:5a:13:24:d0:a5:2c:f8:16:66:61:7f:
45:67:c0:af:31:53:1b:6f:c2:ab:cb:32:21:d1:0f:16:8a:7d:
a5:05:01:b5:0c:3a:8b:c1:e2:92:7d:11:28:f6:53:26:be:52:
60:b9:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:23 2025 by rpki-client