Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: vE0E/apqgub/bQbv+z1VCHt2aUI9aafiehepH9/JDv0=
Subject key identifier: 52:57:9F:4C:3D:0A:EE:1F:8D:AB:1D:8B:EC:9D:8C:26:7E:2D:DA:7D
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0196BBFF92146DF34F0DE5C022FB251AA368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 09E8
Signing time: Sat 10 May 2025 21:00:10 +0000
Manifest this update: Sat 10 May 2025 21:00:10 +0000
Manifest next update: Sun 11 May 2025 21:00:10 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: k0LBeIXDiVZSlsIoKYt3RrjLltzqkbCwUCnNDVpdobc=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:92:14:6d:f3:4f:0d:e5:c0:22:fb:25:1a:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: May 10 21:00:10 2025 GMT
Not After : May 11 21:00:10 2025 GMT
Subject: CN=52579f4c3d0aee1f8dab1d8bec9d8c267e2dda7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:a3:fb:b9:72:92:c4:54:a9:2f:c9:15:55:
f8:1f:95:d7:b3:7e:c1:67:f0:f9:83:1d:d9:56:d0:
a3:1c:23:48:04:a5:4b:81:ab:e5:51:46:be:d4:98:
5c:32:96:6c:47:fa:15:0f:1b:e6:a0:00:e6:42:df:
aa:c6:d0:59:d6:34:f4:8e:1b:78:cb:8a:ef:71:db:
74:d4:30:f6:1d:53:44:5b:ad:c8:02:76:76:74:ea:
2e:7e:8d:c5:1b:88:a7:58:2c:98:a9:35:ff:9c:10:
0d:e8:13:c4:53:7c:29:f3:93:8b:54:50:85:d9:77:
ba:80:a6:4a:ef:e2:d6:ac:c8:02:05:58:de:3a:13:
98:5a:91:02:12:1c:22:e2:83:3c:24:24:d4:15:74:
0e:c6:60:ee:6b:fb:89:22:38:02:f3:d4:8b:be:5e:
fb:3a:0f:dd:ec:63:f8:08:0a:14:1f:a2:50:94:42:
eb:d3:90:da:4d:34:49:33:c3:3f:2e:07:09:09:a1:
fb:95:7e:db:03:f3:43:5b:87:36:c3:ab:42:26:b3:
1b:17:a7:28:e9:09:ce:7b:56:d3:9a:04:1e:53:bb:
74:27:e4:e0:9b:58:12:46:1e:d6:14:c5:9d:eb:72:
dc:2d:7f:9f:fb:9b:ff:47:16:b3:b0:bc:aa:77:e0:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:57:9F:4C:3D:0A:EE:1F:8D:AB:1D:8B:EC:9D:8C:26:7E:2D:DA:7D
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5f:db:7b:37:67:5c:cc:95:d8:8a:38:c9:18:0a:75:9c:84:
d0:f4:fb:fb:41:ff:8c:19:3c:42:64:87:e9:07:2c:e3:df:d5:
eb:fc:32:30:b8:78:32:94:35:5e:ee:f9:1f:e3:69:88:7c:24:
3c:98:1c:c5:d0:51:19:1c:32:21:06:25:7e:77:e8:6e:ba:66:
17:23:c1:0b:21:4a:c4:87:e2:fa:5a:6d:cb:56:05:e6:7e:f6:
03:a6:2b:a1:2c:4d:81:1d:f0:28:78:d7:8b:8f:ff:a7:33:4d:
bf:90:20:6c:80:a7:d7:aa:28:4e:7f:56:f0:24:72:70:f4:ef:
8b:7e:92:dc:14:c5:9d:65:b8:f6:a0:95:68:d2:d2:6e:be:26:
33:c3:d0:f0:c8:b4:53:d5:c6:7b:be:13:73:71:e7:6d:0b:b2:
05:01:6e:03:e2:fc:3e:be:15:8e:94:2c:a1:75:cd:55:f9:5e:
db:48:d5:4c:df:61:04:c6:10:fe:20:d6:7f:67:33:b5:55:5a:
30:fc:04:2a:5a:c9:b7:bd:8a:8f:f9:0b:f7:97:20:ce:46:ea:
4a:63:26:13:6d:98:1b:a9:3d:f4:74:24:81:8d:88:45:cb:3f:
f9:8a:cd:6a:fb:63:b1:3d:18:2d:c2:fc:57:d8:77:99:ce:9f:
29:78:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:09:48 2025 by rpki-client