Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: ZHFxCH4F+t+AQHUFQvsq91ISALDXpcRTTtuR3rn20QA=
Subject key identifier: 2B:44:7F:90:2D:ED:99:21:8F:CA:5D:E6:72:15:36:AF:44:41:59:1C
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0199FA69D501EFBCD3FFFBBCAFAA35FC1F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0B96
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: mqtkkXm5E4ODmI+QVM1xs2vJZNlQIq175a0Bjqe8+WQ=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d5:01:ef:bc:d3:ff:fb:bc:af:aa:35:fc:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=2b447f902ded99218fca5de6721536af4441591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:72:ee:41:aa:d0:1a:92:1e:4f:96:f5:d6:
80:20:a5:e4:12:46:c4:2e:80:fb:88:df:a9:3a:4d:
8f:8b:ae:f4:e1:47:dd:03:cf:99:32:d6:53:bd:57:
84:79:d0:a9:a3:d2:73:25:13:14:2b:af:af:b4:94:
2e:17:99:bb:86:94:50:36:78:84:d2:ec:f4:bb:92:
7b:44:66:d1:23:b0:2e:60:a5:1f:09:81:5b:7a:17:
73:cc:30:94:c5:d9:74:5a:bf:e8:89:8a:47:99:cd:
51:25:9c:41:82:f0:4c:3f:14:bf:75:7c:d3:c9:61:
b2:8c:7c:5f:6b:26:56:71:43:84:7e:29:8d:ca:49:
a9:d0:e0:21:9d:96:9e:bb:34:d3:fa:a3:53:6d:8c:
77:32:a6:cc:b4:ed:de:df:da:0a:50:a8:fe:27:09:
22:09:13:95:fc:f7:11:aa:40:68:ef:f5:4c:94:01:
8b:11:a2:bd:e7:29:b6:4d:d8:89:b0:bd:6e:7e:ee:
2e:36:63:07:9e:d3:8e:bf:82:a6:53:da:4f:41:75:
68:7d:87:36:ff:b3:7f:68:41:e4:86:5b:96:97:86:
85:32:2e:18:d3:02:46:df:aa:a1:c4:79:42:26:6e:
fc:60:f1:44:b4:35:83:a7:a9:23:59:93:18:21:98:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:7F:90:2D:ED:99:21:8F:CA:5D:E6:72:15:36:AF:44:41:59:1C
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:7b:2d:55:e0:5e:35:58:bd:b7:4f:c0:74:6d:d1:9e:4e:
16:dd:4b:10:d8:84:b6:62:17:2c:77:49:b9:af:e1:62:1e:e8:
b1:6d:57:e2:10:4a:9e:02:27:5e:5d:56:3e:af:a6:1f:f8:f5:
7f:59:b8:f1:19:fb:c1:25:da:59:63:a8:f5:e0:4b:32:9b:2e:
b9:07:6e:7e:72:f3:2c:fe:48:b6:e8:20:66:60:88:66:ee:46:
a1:8d:be:f7:72:ee:80:c4:ab:46:b1:2b:41:4e:ef:d6:f9:7f:
a2:0b:5b:eb:0c:a1:6b:60:c9:28:23:d9:13:ff:e9:24:8f:d1:
1f:6f:ff:2c:71:77:73:c7:e7:0a:cb:68:21:0c:eb:7e:62:c6:
85:e2:b1:6d:5a:58:7e:68:ea:3d:10:13:c9:61:7b:c4:9e:4a:
45:90:09:e6:c4:00:51:76:97:21:91:34:f3:8c:53:f6:a0:ce:
59:22:7c:3c:cf:6e:b3:f2:b1:0f:2f:83:95:3d:db:6b:26:0d:
a5:e2:c0:d5:cc:28:60:69:46:8e:a1:1d:b3:57:6d:2d:7f:58:
5f:38:d5:38:df:35:9e:d8:92:4c:27:b9:8d:3c:f6:c6:98:21:
f0:e8:21:e9:f5:80:30:12:97:1d:e1:27:3a:f8:c1:90:2e:fc:
b9:0d:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:04 2025 by rpki-client