Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: RmTYqPwE1mwKwVo5eqjcJ+ImB9ZZGIGu4d7IEEECofI=
Subject key identifier: 2A:73:4D:C1:C0:E6:05:C7:D6:B4:89:89:E4:68:77:A3:21:2A:6C:0F
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019590AB9784412588A831CD4475E569C31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 094D
Signing time: Thu 13 Mar 2025 18:01:59 +0000
Manifest this update: Thu 13 Mar 2025 18:01:59 +0000
Manifest next update: Fri 14 Mar 2025 18:01:59 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: WG7ATBIZuVu3GMZMGwlM9S+uKc+GYI2j8JZVMFmUsjU=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:97:84:41:25:88:a8:31:cd:44:75:e5:69:c3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Mar 13 18:01:59 2025 GMT
Not After : Mar 14 18:01:59 2025 GMT
Subject: CN=2a734dc1c0e605c7d6b48989e46877a3212a6c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:11:eb:27:c1:9c:85:12:46:8a:29:45:78:
16:8e:b4:f9:d2:c0:29:12:e2:71:b8:40:a2:98:f4:
00:64:7d:dc:7f:59:2b:d7:35:ce:6d:4d:67:c3:70:
39:8d:40:b6:cc:bb:57:61:32:54:3c:9e:71:5d:d4:
c5:3e:83:18:a4:51:82:d7:34:12:88:b4:93:2c:db:
2b:81:f5:68:fc:7e:d4:81:0e:b2:b4:d0:d4:8b:85:
77:78:84:80:f3:4f:9e:59:47:e1:cf:2d:b8:b3:91:
00:3c:6c:b3:02:4f:3e:0f:d7:69:09:f4:05:97:66:
e4:0e:c9:f1:54:54:ae:d0:65:55:1d:38:e3:9f:ac:
00:79:cc:81:da:78:bb:c0:69:ba:63:fa:7c:06:00:
c8:e8:01:08:7a:88:44:34:e3:df:21:80:84:12:b2:
d7:4f:56:8a:61:1a:b6:af:c5:7d:94:5d:99:55:04:
b0:87:dc:1f:fd:9c:0c:26:97:0f:5d:bd:f9:de:2f:
3a:00:3a:b1:1c:d2:d9:cd:c6:8e:33:56:8a:c6:76:
c0:d9:e8:6c:75:54:52:fa:1b:85:34:74:c6:96:8c:
b2:10:7a:5e:e4:4e:6d:a5:2a:f9:0c:64:8a:09:80:
ce:7b:5c:5d:eb:b7:98:6b:1a:31:b9:5f:80:12:e4:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:4D:C1:C0:E6:05:C7:D6:B4:89:89:E4:68:77:A3:21:2A:6C:0F
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:c8:c9:9a:83:06:90:65:68:b4:5c:8b:9a:dd:3a:e3:19:
1e:9c:13:f0:40:75:3f:73:04:57:35:d2:33:c0:44:9c:3a:0f:
f0:af:32:4d:29:8b:5c:4b:9e:b4:11:b1:be:15:49:f4:2e:23:
02:3b:00:81:bc:b1:b0:ef:32:47:79:8b:2d:3b:a1:20:26:30:
2d:d9:e1:81:83:be:dc:02:1c:4e:89:da:fc:b0:6a:c3:5f:71:
47:a3:50:c8:cd:5b:34:d5:6a:81:10:57:fd:32:a3:cf:75:18:
bf:b8:14:91:94:36:5d:52:8a:35:4d:fe:a1:42:ba:2b:e5:05:
53:f4:1f:03:68:1b:b1:00:c0:de:27:65:c4:21:84:7e:90:ed:
63:80:b0:1c:66:a5:51:7e:1c:55:19:f9:e9:10:36:f1:5a:d8:
7d:5e:69:fc:97:4d:c7:10:19:d8:c6:d8:be:22:d8:85:3f:56:
e9:8b:94:3d:d6:a0:fa:30:f3:fa:4d:71:de:68:86:19:40:ea:
d0:5e:9f:75:54:27:01:6a:e5:28:7f:01:b3:37:b2:43:0a:3e:
73:4d:7c:bd:63:cc:45:6e:37:a6:4e:38:86:3e:c0:6e:b4:b0:
fe:0b:37:ac:17:3d:d1:4a:35:f5:d4:f8:8b:9c:d4:0b:e1:97:
44:2a:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:01 2025 by rpki-client