Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: SerqiUKxB4T5P+mTsb9X+ONjeASd1XlJ9tPJp42heHc=
Subject key identifier: 11:74:7D:12:84:13:A5:A4:AA:D4:A3:2C:DB:17:AF:0B:FA:65:33:9A
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 01974A7AC9565BA788164C5FFEC812CB59DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 03DB
Signing time: Sat 07 Jun 2025 13:00:50 +0000
Manifest this update: Sat 07 Jun 2025 13:00:50 +0000
Manifest next update: Sun 08 Jun 2025 13:00:50 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: 2bmW1d/zfwTpi8bSdcJnfZQnGUtqgsSotTvAW1UI1hM=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:c9:56:5b:a7:88:16:4c:5f:fe:c8:12:cb:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Jun 7 13:00:50 2025 GMT
Not After : Jun 8 13:00:50 2025 GMT
Subject: CN=11747d128413a5a4aad4a32cdb17af0bfa65339a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:16:46:89:b1:68:b7:d5:72:e6:49:85:92:
3f:fe:78:26:4c:b6:3c:36:4d:c0:c9:58:bd:75:08:
62:30:8f:8d:19:f7:17:0c:8d:34:86:50:c9:82:91:
6f:bc:44:58:17:ca:1c:3e:1d:d3:e1:6f:c3:e4:dc:
ae:19:5a:68:fa:7a:3f:7d:9b:a4:62:bf:31:a1:0d:
db:4e:ac:91:13:29:81:ab:a2:ef:33:3b:9a:de:c5:
d9:e1:8f:45:71:64:14:92:11:26:7a:28:70:0b:36:
40:be:8e:6a:32:a7:46:1d:48:21:e1:cc:e9:c2:ae:
44:a9:93:50:8b:db:04:e3:2b:3c:df:3c:a9:8c:22:
7e:05:ef:a7:96:5c:9e:c8:8c:d9:a5:32:28:f9:a2:
f8:27:3b:54:47:f5:33:bb:78:c4:90:e2:83:96:6e:
00:fc:6c:d5:37:a4:08:cf:bd:5a:4a:ea:82:0f:ed:
a0:35:fd:5e:0a:2e:54:fa:d7:f6:18:52:e4:8c:01:
15:d0:52:4d:dd:c4:76:71:04:e6:ba:02:6a:d6:fb:
15:57:3f:6d:79:07:f4:82:24:5c:92:31:50:24:ae:
aa:31:19:20:16:63:0a:ca:d6:3b:26:4b:33:ad:7e:
93:0b:d3:4e:f6:29:d8:5d:41:df:e1:e6:e0:da:05:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:7D:12:84:13:A5:A4:AA:D4:A3:2C:DB:17:AF:0B:FA:65:33:9A
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:37:8e:fc:92:77:93:48:f1:58:42:6b:c3:8a:92:20:77:10:
07:c4:de:4b:66:e7:4c:b4:0f:50:de:8e:f5:7a:25:da:85:ae:
82:08:b2:0f:fc:f3:c3:9a:52:9f:16:5c:09:d9:e8:18:58:d9:
be:8b:d7:b5:4a:7b:c8:46:6f:98:09:f1:a2:44:26:8c:3f:ce:
d8:00:92:5f:2f:23:fa:c7:6c:41:47:0b:9b:32:03:c9:16:4d:
17:3a:aa:ec:41:39:2f:cd:84:9b:3a:15:e3:fe:c9:a5:d2:6e:
23:79:d0:0c:3f:fc:76:18:84:a8:84:ed:1b:ee:fb:3a:d9:69:
c1:f9:3d:24:db:52:69:2c:a8:8f:19:2d:27:af:a0:a0:97:e1:
f4:7b:fc:6c:fe:a5:30:5a:41:ee:10:45:eb:85:cc:a3:8f:52:
95:9d:08:2e:b1:12:30:68:8e:9f:1d:5e:16:83:69:2a:2f:1c:
fe:93:f6:70:81:fa:4a:e9:f9:c0:db:1f:ec:c8:27:42:1c:e0:
ff:75:9b:13:c3:37:5f:fc:08:7b:8a:fc:f6:e4:f7:a9:7d:86:
df:05:bd:e7:ea:7b:99:0e:71:2e:3c:05:29:00:85:3a:46:e0:
2b:58:f2:b3:bb:1c:2e:24:15:2a:db:52:0a:31:b1:f8:09:ce:
99:4f:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:38 2025 by rpki-client