Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: vlAksyFEBD3JdhIeiOQJt8O4NPVJ5UjsqAxif49ARKc=
Subject key identifier: EB:99:5C:8B:9E:36:C9:20:4F:E8:57:C1:2B:6F:AC:F7:E9:BF:F7:AB
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 01968210413FB72F3ED204723F6831F82C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 09CA
Signing time: Tue 29 Apr 2025 15:00:25 +0000
Manifest this update: Tue 29 Apr 2025 15:00:25 +0000
Manifest next update: Wed 30 Apr 2025 15:00:25 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: Kgj2VUhcwQ4QYIl0GLDanee2InbATl3X93gO7qa52Rs=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:41:3f:b7:2f:3e:d2:04:72:3f:68:31:f8:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Apr 29 15:00:25 2025 GMT
Not After : Apr 30 15:00:25 2025 GMT
Subject: CN=eb995c8b9e36c9204fe857c12b6facf7e9bff7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:df:7a:aa:ec:af:ff:34:99:09:72:5d:45:
6c:af:bd:fc:7d:54:a8:54:41:6b:a3:a3:82:b8:a7:
09:17:07:95:ad:d6:03:08:c7:32:f5:22:21:04:0d:
4f:3b:03:a0:0c:c1:05:ea:2e:82:a9:f0:7b:b4:b0:
c8:01:0c:59:0f:a8:f4:de:6b:af:b7:e8:5f:d9:0e:
32:1a:47:2d:58:ed:82:04:9b:79:17:be:20:fa:1f:
95:0b:1e:ce:f6:15:81:70:8c:92:70:f4:91:55:78:
56:c7:a5:db:09:c2:22:f6:28:03:f2:ff:62:7a:ca:
a3:54:8d:ad:d2:b8:61:db:0e:91:38:29:b1:12:29:
27:c3:f5:bc:e1:04:44:fd:62:67:e6:6d:c2:3b:d5:
2e:2f:26:22:a2:f6:17:8c:ee:7d:90:fd:92:37:22:
72:f8:72:f8:e4:59:52:d3:d9:73:2f:74:48:9f:4c:
e5:a5:59:d0:df:52:9b:aa:a9:60:4a:46:46:3f:ce:
98:bc:b4:3c:02:c6:af:71:40:06:b9:8b:b4:9e:2f:
8e:3d:02:0c:bd:bf:9f:af:a8:29:2f:cc:fd:53:9f:
78:f5:33:75:72:f2:5a:f9:d8:56:65:47:71:2a:fe:
01:97:00:3f:56:8f:42:93:2f:94:a5:c2:c5:96:f2:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:99:5C:8B:9E:36:C9:20:4F:E8:57:C1:2B:6F:AC:F7:E9:BF:F7:AB
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1d:4e:57:d1:8b:8b:6f:bb:ca:6f:68:a3:77:af:bb:85:57:
46:55:ad:00:7a:9a:e9:eb:59:83:32:85:24:03:4d:2c:3a:dd:
2b:b6:c4:0e:a5:ab:cb:49:57:0f:21:d7:68:7c:50:6a:70:24:
b1:e2:d4:72:1c:42:46:1d:3e:8f:6c:5b:a2:74:e3:15:84:e3:
e5:c8:37:b6:63:df:f2:a1:e5:8a:bf:90:96:c9:24:6d:45:25:
22:c3:8e:c9:83:79:83:85:cd:9e:f0:b5:68:11:0a:67:da:38:
65:3f:56:3f:10:d6:d9:48:46:f8:b7:34:bc:51:b8:74:cd:fc:
3c:c5:3d:5d:90:d4:cf:d7:82:78:d0:f1:94:3a:e5:e3:df:1f:
24:ae:c3:5d:73:c9:e7:60:31:b1:3a:61:fe:64:f9:95:e2:26:
27:30:1d:25:9d:4b:19:e7:2a:89:6c:13:51:d4:42:9c:b3:e5:
5b:d2:e1:90:12:db:5f:7b:ac:e3:c0:14:ad:58:7a:2f:de:17:
b9:26:22:fc:85:80:8b:d1:dc:21:c9:dd:bc:1b:0c:f0:d2:ea:
ea:67:61:f8:54:cd:b0:e8:bd:cc:a4:69:2a:a0:7b:84:4a:40:
1c:4d:b9:43:75:63:d3:9f:fa:ed:8e:95:3d:f1:e1:69:83:f0:
63:b9:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:34 2025 by rpki-client