Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
File: iBchKB_7pXE-nQUq9v5tGwQKKjk.mft (raw, json)
Hash identifier: zUHu1AZBCu1EIopK6eYbhYzcOcBsscJmWRk8iaKdOWo=
Subject key identifier: 18:80:8E:CC:24:16:8F:86:96:33:AC:ED:9E:85:73:DD:57:A2:B5:B0
Authority key identifier: 88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
Certificate issuer: /CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Certificate serial: 019750B3B1699CED04C361E6AD95A857A8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
Manifest number: 0A35
Signing time: Sun 08 Jun 2025 18:00:42 +0000
Manifest this update: Sun 08 Jun 2025 18:00:42 +0000
Manifest next update: Mon 09 Jun 2025 18:00:42 +0000
Files and hashes: 1: iBchKB_7pXE-nQUq9v5tGwQKKjk.crl (hash: l1wQa/1J4eToOOfbhEA1zfwmJK7cLl+xHBc8l/Dyd/w=)
2: tk_qFAvrX29-uLNm_lSuN6AijA8.roa (hash: mGb9xr+TCk1wk+Etvhw2sOsFkZGzXt2Ydi07lNAvV5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:b1:69:9c:ed:04:c3:61:e6:ad:95:a8:57:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881721281ffba5713e9d052af6fe6d1b040a2a39
Validity
Not Before: Jun 8 18:00:42 2025 GMT
Not After : Jun 9 18:00:42 2025 GMT
Subject: CN=18808ecc24168f869633aced9e8573dd57a2b5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:fd:c8:4b:6a:6f:76:65:ad:2a:93:07:fd:
a1:31:c1:97:c4:4c:6f:03:9b:25:4f:fb:d5:e9:9f:
ea:29:c9:d7:ab:44:19:2a:d4:f1:6e:29:8a:41:76:
47:a3:d1:fd:81:4f:83:e7:80:8f:02:5c:fa:6e:7e:
db:42:49:e6:ef:74:50:b4:22:d5:af:a4:29:d3:99:
35:dd:df:fc:2d:c3:39:c0:d3:b9:b4:5e:e8:a5:17:
96:76:09:2a:c8:e4:c2:72:05:b3:f1:85:c5:bd:e9:
ff:1f:35:17:51:3b:3f:79:80:93:4f:b6:45:c3:b8:
86:a4:a0:dc:a9:1e:e4:b7:3b:e4:48:ca:65:dc:22:
3e:62:79:6f:83:8c:6c:45:96:1b:79:9b:d7:ff:94:
6f:0b:32:d0:3c:f3:4e:65:36:9b:ec:9d:fe:0c:23:
52:30:6f:7d:93:bd:55:4d:07:65:0a:94:0a:3c:8c:
24:f6:2f:c0:8b:d9:20:db:94:4c:bc:48:44:31:8e:
1b:f3:5a:df:c0:db:75:00:fc:d3:08:64:a9:82:40:
df:e2:2a:c0:9d:f4:e3:f6:c8:b3:25:2f:c6:db:70:
52:51:17:56:fe:48:b4:be:fc:f8:cb:5d:16:5c:7b:
a6:4a:56:e8:b6:ad:56:ed:ec:fb:e3:3a:ac:3e:47:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:8E:CC:24:16:8F:86:96:33:AC:ED:9E:85:73:DD:57:A2:B5:B0
X509v3 Authority Key Identifier:
keyid:88:17:21:28:1F:FB:A5:71:3E:9D:05:2A:F6:FE:6D:1B:04:0A:2A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBchKB_7pXE-nQUq9v5tGwQKKjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c83fd-52b5-40bb-9963-48873baa69a7/1/iBchKB_7pXE-nQUq9v5tGwQKKjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:45:21:e4:d0:0a:cc:08:a5:0d:45:d4:6e:e5:50:37:02:ae:
6e:3a:c9:d3:de:e7:dd:3c:85:3a:f8:cd:d8:4a:01:59:d4:53:
cf:8f:28:4c:0b:e2:c3:6e:03:99:7e:35:05:18:22:09:d6:06:
c5:0a:14:b1:19:8f:41:fe:2c:7f:e1:75:fb:24:8e:2c:23:16:
6d:ac:40:41:8f:90:2f:a7:5a:c9:a8:6d:ee:ee:a3:da:9c:52:
96:58:13:1b:85:95:b0:44:2c:8a:3d:e1:53:5e:0d:c0:30:86:
69:4f:68:46:66:94:da:db:5b:b9:8a:f6:e2:29:c8:9f:a9:45:
d6:eb:c7:c3:b2:e6:ce:fd:99:ed:4d:71:91:e8:bd:a5:77:de:
39:dd:80:68:bd:20:8f:1c:4c:fb:f2:be:e7:40:fb:01:aa:cb:
78:3f:bd:f4:d8:1a:33:20:fe:dd:79:3f:fe:af:e8:e7:3c:1d:
e6:5c:32:68:15:8a:da:8b:1b:70:00:4a:02:cb:a1:2f:b2:33:
09:0e:55:72:01:f9:1d:3c:b5:71:03:c7:c8:f1:5a:4c:86:f9:
59:13:4b:ff:32:4c:a3:f7:23:f2:59:f8:91:3f:4a:9a:b5:b4:
08:4a:f8:e4:14:51:f9:ec:99:c0:e6:2e:3b:8e:b2:65:22:cf:
01:98:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:09 2025 by rpki-client