Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: ByZJluPG6YyvAQ2jliDvqnQX2qdS1bwPt+DytPK7BNA=
Subject key identifier: 32:EE:C7:C9:67:C5:E9:1F:CC:39:09:0A:94:96:B8:42:D0:F6:FB:65
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019777536623D5244BE55CB53CDA61851BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0A49
Signing time: Mon 16 Jun 2025 06:00:43 +0000
Manifest this update: Mon 16 Jun 2025 06:00:43 +0000
Manifest next update: Tue 17 Jun 2025 06:00:43 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: gDrfKWw3lszuf3nc76YOv9nN5zid7m9/sgoyaF6RqNU=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:66:23:d5:24:4b:e5:5c:b5:3c:da:61:85:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jun 16 06:00:43 2025 GMT
Not After : Jun 17 06:00:43 2025 GMT
Subject: CN=32eec7c967c5e91fcc39090a9496b842d0f6fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:b3:51:55:f2:a1:30:fc:c5:d9:57:12:cc:
e5:ea:42:91:df:16:51:4b:ad:fa:74:57:fa:1d:be:
3e:21:27:c0:d8:ec:98:e1:20:e6:cc:10:79:20:9a:
09:ee:7c:2c:3f:a5:09:f1:09:ad:fb:d1:af:8e:5a:
61:23:fd:39:c7:83:64:31:71:30:87:ff:be:cd:f7:
a2:3a:eb:9e:a5:89:2b:9f:c0:ba:a1:4a:6b:4b:1a:
8d:8b:9e:ae:93:ec:ef:4f:2d:ed:f2:f6:41:f8:be:
20:d8:97:1d:67:9b:4e:5a:ca:43:ac:6b:a7:c7:86:
ff:28:8c:51:48:e5:a1:3a:98:f0:5e:65:5c:a2:c2:
46:6b:59:4a:92:05:b7:3d:48:1f:a8:9c:af:b4:cb:
ac:55:fc:58:13:50:c1:54:18:af:8c:f0:40:27:cf:
6d:ef:d4:cd:ea:4f:e0:4b:96:8a:f4:dd:79:0f:14:
ad:5e:0d:3e:24:48:61:64:9e:e5:ee:da:7b:2a:94:
ca:eb:7d:69:b5:06:77:6b:98:55:0f:1a:57:4c:ba:
86:46:80:3e:dc:cc:dc:3f:dd:a1:95:c1:f4:8e:34:
2f:05:a4:ea:0f:a7:ad:fd:04:a1:1c:c0:4c:6f:a2:
d1:54:6f:e8:16:5e:53:0e:f7:83:66:aa:50:27:4c:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:C7:C9:67:C5:E9:1F:CC:39:09:0A:94:96:B8:42:D0:F6:FB:65
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:25:fa:ec:02:83:48:ef:08:7b:fd:30:9c:a8:85:10:9e:
88:d9:8b:81:9a:1a:f1:8c:86:bf:e8:68:12:57:7f:b8:53:46:
52:72:23:1a:29:ea:11:ce:aa:57:97:bf:9f:23:bc:95:5d:91:
95:68:9b:0a:53:33:bc:b3:77:1f:e2:bf:70:f5:bb:a1:e5:e4:
10:ea:c3:0c:2f:15:4f:3f:13:a8:69:60:1c:0a:a5:71:30:1e:
e3:19:1c:df:75:a5:ab:f5:c9:6a:33:cd:69:52:c6:f7:6f:1b:
09:ae:5d:24:b9:99:70:e9:e6:48:38:d5:9a:fa:cc:d3:d6:35:
40:ec:94:fc:11:d1:6e:3e:d4:80:33:ed:6f:c4:03:49:e3:32:
de:e0:46:46:27:20:02:85:0b:d1:df:5a:da:58:ce:19:45:fa:
c5:6c:6c:96:ac:25:f0:db:11:e7:67:65:6c:6b:42:95:81:c4:
4f:f3:fd:a6:d3:0e:5e:80:48:e6:b0:20:5d:17:1f:6c:60:01:
f1:bb:32:11:99:86:41:75:3a:10:85:63:80:ad:61:5c:6e:f8:
cb:6e:ff:e5:4b:4d:ad:1e:24:13:c4:fd:56:b3:fe:04:3d:6f:
3c:a4:f5:ad:27:86:dd:7c:e8:2b:0d:12:65:ab:db:3e:ad:79:
a8:06:80:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:21:08 2025 by rpki-client