Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: mIrzurGIHDznbJYBwHvTPJoGk0bQ9E3VsN2yBRSMw48=
Subject key identifier: B3:2C:4C:88:71:CF:26:DF:04:7E:DB:7D:C3:A7:35:09:D3:52:98:64
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019653B70F1C19C7F568E2A4FE08745A08C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 09B2
Signing time: Sun 20 Apr 2025 15:00:27 +0000
Manifest this update: Sun 20 Apr 2025 15:00:27 +0000
Manifest next update: Mon 21 Apr 2025 15:00:27 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: SqcTLtr/u7HB2KK52CPRYHXwvu5KjMImvYCziNfxllQ=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0f:1c:19:c7:f5:68:e2:a4:fe:08:74:5a:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Apr 20 15:00:27 2025 GMT
Not After : Apr 21 15:00:27 2025 GMT
Subject: CN=b32c4c8871cf26df047edb7dc3a73509d3529864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:3c:c5:be:00:3a:06:e6:2a:6d:38:f9:e4:
6b:81:15:d3:75:14:16:99:ad:95:03:9d:3d:43:5c:
25:a0:3c:0d:c2:56:9d:fe:b1:97:75:39:0c:a3:ba:
ed:59:3f:06:04:cb:a9:47:97:cb:67:d5:50:0c:d2:
0c:58:8d:99:c7:27:2f:f3:b0:94:7c:b1:98:7f:36:
12:28:06:f7:2c:80:a4:3e:c8:26:cc:8a:db:47:3a:
1d:35:7e:2b:42:0d:ae:be:e5:64:81:88:dd:c9:47:
6e:aa:f0:98:74:4e:39:0b:9b:60:1e:6b:8a:df:93:
51:2d:b2:64:a0:3b:fa:f0:90:5f:28:57:c7:9c:3b:
e9:87:56:e8:95:56:be:db:eb:5d:04:07:04:4d:33:
f5:25:b7:92:c4:a3:48:7b:9c:dd:ec:48:77:b0:69:
69:5f:b1:5a:57:26:53:39:74:c6:86:25:54:39:1e:
02:8a:a0:81:b2:59:65:63:27:36:5f:b2:e6:b2:57:
fa:0a:be:9a:66:7d:e2:e9:92:9a:f9:b9:4a:9a:6a:
e4:99:8d:88:41:64:6b:7e:ae:0f:d9:8a:22:da:07:
18:78:18:70:19:5f:56:b3:74:5d:bc:8b:ce:ae:68:
8e:b4:3e:b7:35:eb:8f:84:8e:ff:0a:f4:68:6e:14:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:4C:88:71:CF:26:DF:04:7E:DB:7D:C3:A7:35:09:D3:52:98:64
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:03:64:e9:56:34:c8:73:20:3e:e8:9d:84:02:d7:46:ca:
bc:82:27:d8:93:f1:4c:50:cb:12:45:8e:e1:35:08:c1:41:5a:
4a:8b:f3:90:df:7e:40:3a:05:07:05:cd:f9:cc:2e:8f:f2:cb:
42:0d:f0:7a:e3:11:f5:eb:53:d1:74:79:af:fc:06:93:04:04:
d0:d3:15:df:f4:b0:55:be:71:7e:ff:b5:66:23:d8:3a:74:91:
66:62:07:2e:ae:80:7b:a9:a1:ee:37:0d:bb:57:ed:ed:52:62:
b9:b4:4a:10:e8:9b:fb:67:14:b7:cc:47:36:93:98:81:3c:32:
ff:7f:40:6b:ec:cc:fa:31:d7:f6:d2:3b:37:3f:e9:ef:3d:5a:
47:eb:61:fe:af:fd:f3:41:af:3c:50:97:c1:24:a0:7b:e2:33:
c0:ca:9c:6a:62:57:95:ff:42:e7:26:0b:20:eb:a3:47:2a:f2:
26:7f:79:b8:3b:19:5d:55:ce:84:12:61:a0:c3:64:7a:ed:76:
18:ff:0a:5d:1f:c7:62:48:31:5e:82:24:a6:9c:20:3b:4b:fc:
d1:b7:50:64:f1:bf:2a:83:ad:6f:ba:78:17:94:b4:63:ef:77:
df:79:57:ae:8e:5a:24:d3:84:9b:1e:b8:04:b7:91:54:40:9e:
5e:45:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:15 2025 by rpki-client