Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: dJWzAh8cN0ePf5oliXx2mvfIoBoPRdhoncc8O/thQT4=
Subject key identifier: 55:01:1D:E6:4A:91:BE:1A:72:97:24:AE:94:5B:3D:ED:F8:E8:78:3F
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 0198D4E0068D83490E52FEE8D44866356E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0AFE
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: OV0d2Dd2/JQA2JC+taaLNYPPIT6/dcq+FJoz9D+xPTA=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:06:8d:83:49:0e:52:fe:e8:d4:48:66:35:6e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=55011de64a91be1a729724ae945b3dedf8e8783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:c3:6c:75:bb:b4:25:9c:8a:2a:3a:82:1c:
17:01:96:bc:74:88:47:d3:72:0a:57:96:d6:84:f6:
29:a0:f2:29:a6:43:94:b6:0c:ea:6d:3c:ff:6c:60:
d6:21:38:ae:4c:ce:69:fa:d0:cd:4c:ca:5f:0e:3b:
9d:20:64:1f:a8:04:3f:d8:e7:53:b5:e0:68:fb:19:
61:a7:6e:89:13:d9:28:e0:73:e5:4a:ee:34:24:6d:
33:80:55:26:37:43:94:be:e6:04:50:b6:88:0c:19:
ae:b5:1d:1b:15:ac:aa:5b:8a:1c:91:3c:99:d6:e8:
f3:56:31:6e:8d:89:e7:d2:0e:e2:e0:99:8f:cb:e2:
81:5f:39:76:04:09:82:4d:e7:ca:d4:36:2d:7f:a2:
1a:62:d3:91:92:62:b0:14:03:08:26:69:54:08:05:
f8:6f:fd:35:fd:fb:0d:a4:6b:30:25:c4:f1:99:29:
a0:68:03:a0:24:10:2b:ac:f9:0c:a3:6b:6e:b5:1e:
6f:bc:3d:95:ef:60:fa:42:e1:00:b2:64:44:b3:99:
b3:84:3a:23:5e:85:28:1f:23:93:82:79:36:0f:66:
91:66:57:df:ad:8d:59:9c:30:ab:0b:71:e2:9f:8a:
a3:3c:b2:ca:42:df:b6:fa:d9:63:3f:19:24:2f:60:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:1D:E6:4A:91:BE:1A:72:97:24:AE:94:5B:3D:ED:F8:E8:78:3F
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:53:1d:43:17:e9:7e:6b:e5:1c:36:c1:48:ee:50:8c:ac:
35:da:45:0b:bf:9f:57:1a:22:d2:cc:59:95:f8:a8:6b:20:36:
e3:dd:b3:95:07:90:eb:1b:23:dc:19:09:38:b5:74:97:da:36:
1b:a2:ae:8d:0c:a5:a3:24:16:4e:bd:d9:78:60:2a:22:35:2a:
0b:06:10:b2:7a:8f:3a:4d:c7:3f:87:11:07:0b:fc:4b:d3:6d:
b4:a0:00:3d:a4:33:05:e1:0f:f2:e4:dc:f2:57:b4:be:e5:90:
24:78:f6:b7:c1:84:af:b5:9e:f4:77:70:c6:5b:7e:cb:5d:ff:
1c:7a:79:0f:3d:8a:17:dd:11:ea:36:e4:e1:6d:8d:ed:d7:4f:
c7:eb:1b:90:d7:68:fc:c1:d9:23:ed:9a:6b:aa:95:52:58:a4:
bf:eb:ff:5c:93:84:d2:12:11:47:30:07:cd:c6:3d:88:1c:f7:
83:db:7e:23:6e:9b:2d:65:33:e7:07:c0:56:cb:77:b4:65:77:
1f:6f:79:ac:be:d6:9b:4e:3d:6f:d1:55:1c:3b:ef:2c:4d:a6:
cd:2b:51:03:91:7d:8c:3a:b9:66:d5:62:25:6c:bb:f6:ad:fc:
30:52:0d:1a:92:f3:6f:e1:d8:20:a0:5b:66:02:37:0b:59:a2:
92:75:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:02 2025 by rpki-client