Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: NOycZvKqUCQVF5QIt0TQfSpWOBlhoONBrL1mGAhhINA=
Subject key identifier: D4:8F:07:CC:00:55:DA:C6:A3:DC:08:30:C4:F7:FD:0B:C0:68:4E:51
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0197C4936B52AD11FAE0842558B7B1527AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0A71
Signing time: Tue 01 Jul 2025 06:01:24 +0000
Manifest this update: Tue 01 Jul 2025 06:01:24 +0000
Manifest next update: Wed 02 Jul 2025 06:01:24 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: fcZQgSxsUSH9LajgQeWenfGEUYhW/z5qgYHzPkTCCOE=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:6b:52:ad:11:fa:e0:84:25:58:b7:b1:52:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jul 1 06:01:24 2025 GMT
Not After : Jul 2 06:01:24 2025 GMT
Subject: CN=d48f07cc0055dac6a3dc0830c4f7fd0bc0684e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b1:4d:b6:b0:cd:54:37:a2:66:34:11:3c:a0:
19:fa:4e:88:ee:ce:93:9e:82:de:1f:8a:fc:9d:c3:
ec:6a:9a:ba:38:6f:aa:f3:2e:57:12:78:e4:8a:9f:
50:ab:70:a4:47:39:63:64:a2:3a:4e:fe:17:e4:3f:
b5:e9:34:5d:fb:bc:8b:66:58:6e:2c:90:1e:2f:9c:
81:35:cf:31:4e:a4:e2:3e:dd:7c:c5:9a:a1:45:ca:
64:97:79:02:a7:2f:8d:15:46:54:72:dc:61:c1:ef:
3c:f4:9e:96:f6:f0:95:9d:87:15:96:d0:e3:f0:33:
17:05:96:44:4c:c2:9b:48:f5:84:2f:a5:20:ab:f9:
2d:79:39:e4:e6:98:c1:b0:fd:fb:e5:2f:5f:d3:be:
6e:d3:45:c1:3c:49:04:e7:d3:9d:03:08:59:dd:7b:
d2:21:f8:09:43:7e:47:0e:24:59:be:06:d0:9d:f1:
8f:b4:9e:cb:62:f4:a2:e9:87:f7:f7:f1:47:a0:50:
d5:73:a4:68:4d:27:eb:c8:03:ec:39:ea:96:a3:63:
50:1b:07:26:e5:af:e9:a9:a9:d3:94:22:42:30:cb:
2a:a2:c2:76:90:ad:70:da:99:e8:d8:94:93:c1:5e:
ce:9f:42:82:d4:86:cf:8c:fb:3f:9d:7d:15:15:55:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:07:CC:00:55:DA:C6:A3:DC:08:30:C4:F7:FD:0B:C0:68:4E:51
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:92:ee:17:a6:45:dc:af:63:8c:45:5b:9f:51:92:03:a9:4a:
32:aa:ed:11:c7:ff:e1:46:d2:87:48:b5:c7:81:4e:e3:00:b6:
1d:04:61:9b:d5:9d:be:ad:c3:31:52:01:fd:98:85:43:ba:af:
95:6e:b9:0e:2a:9e:fc:fe:d3:df:a9:51:32:64:3a:b2:e3:b8:
ec:e2:5c:3e:4c:6b:d9:06:a1:c6:5e:57:f6:e5:27:65:f4:4e:
80:c7:f9:4b:bd:f5:b8:b8:53:ea:c0:35:d3:2e:8b:e2:0b:47:
66:e5:d7:66:1a:e7:c2:11:c3:c9:4e:76:b3:29:10:49:ec:c6:
ce:13:59:5b:c9:f5:ef:9a:02:b4:42:f1:2e:3b:40:e3:85:5f:
d1:09:99:56:71:33:02:ed:b0:d9:90:a8:0c:9c:54:22:e7:56:
b5:18:9b:9a:39:ab:db:62:67:b2:6e:1a:81:49:0b:48:82:58:
a2:6d:38:19:cf:8b:2e:4b:32:51:dc:fb:5c:ea:bc:07:52:2d:
04:4f:6b:99:03:a8:f9:5f:df:16:6a:fe:61:e1:dd:74:82:e1:
0c:5b:5e:53:b1:cd:6d:80:ec:32:8c:70:68:c8:60:3d:3f:db:
ce:95:0e:80:7c:f1:4f:2c:52:7d:95:20:81:05:55:82:a1:bb:
fc:01:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:05 2025 by rpki-client