Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: gua6JOWXfgqDcEf+9mFtBZJabEjOhz4rZLGrf2XAvl0=
Subject key identifier: 8D:6C:A2:41:32:04:F0:2B:26:F7:22:49:70:58:11:E4:7F:43:FF:13
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019653EDFF00285FB69DE9BFAA1509B11943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 119E
Signing time: Sun 20 Apr 2025 16:00:28 +0000
Manifest this update: Sun 20 Apr 2025 16:00:28 +0000
Manifest next update: Mon 21 Apr 2025 16:00:28 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: 9ExhCwxabprYqxV9J2qJRX0vBEQJmKbxGfFZURz3+XQ=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ed:ff:00:28:5f:b6:9d:e9:bf:aa:15:09:b1:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Apr 20 16:00:28 2025 GMT
Not After : Apr 21 16:00:28 2025 GMT
Subject: CN=8d6ca2413204f02b26f72249705811e47f43ff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:64:6f:9e:d1:c3:10:d3:b4:4a:87:61:c3:
e9:a2:ba:6d:20:ef:bb:82:24:d1:bf:c4:2c:7e:24:
88:76:92:0d:0f:70:bd:7f:b0:15:e2:a7:b9:e8:92:
80:bf:48:a9:4d:ae:67:51:40:63:64:72:d0:89:35:
10:0c:ee:ec:5a:c9:79:ac:8e:20:35:9d:9c:69:13:
ba:f5:c0:0d:ef:9b:e4:fd:fb:f8:42:6e:2b:52:73:
74:7b:62:79:56:56:61:8a:61:f4:96:f9:81:7c:25:
55:67:af:1e:fd:ed:18:8d:93:c6:d9:ed:0a:e2:e9:
b6:56:38:9a:c7:e1:e4:7c:96:ff:91:8f:95:c7:3f:
e3:ac:74:e5:ee:0f:3f:75:19:4d:4d:1c:2c:82:99:
33:af:07:16:cb:86:fa:f8:61:4d:92:b8:ad:27:04:
43:4f:fe:e3:ce:6c:67:6c:5b:6d:ab:c7:2e:de:8f:
20:bf:c9:0b:0f:60:10:5c:ba:38:55:be:b6:00:71:
7f:ab:a6:f7:be:0c:04:ed:3c:60:f7:52:fb:60:ed:
38:7d:d2:14:24:16:da:15:d3:2d:f3:5e:3a:e8:10:
d8:1c:ea:67:07:47:c4:91:61:97:ed:cd:03:a5:9e:
14:20:37:cd:02:ac:d5:84:10:e3:ec:d6:4c:6e:8a:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:A2:41:32:04:F0:2B:26:F7:22:49:70:58:11:E4:7F:43:FF:13
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fb:bf:c2:37:86:1d:82:23:21:e0:76:cc:14:5c:f7:0a:fa:
52:82:be:05:2b:89:f3:05:a0:d5:12:66:b3:a8:6a:ce:b2:eb:
de:ef:09:36:63:07:3e:be:25:11:af:bd:41:da:77:1d:41:07:
8e:96:dc:7b:5c:c2:7f:f4:7e:10:7e:56:d3:d5:28:d0:6f:de:
6d:22:25:41:99:3e:ed:46:8b:9c:85:22:97:0b:fa:45:26:d2:
6f:07:a8:3a:c2:30:14:8f:bb:4c:8f:86:c5:3c:2f:dc:e3:2f:
85:2e:fa:23:c1:16:39:51:6c:32:ad:a4:e5:16:47:8e:e6:b4:
01:24:5d:d6:9b:68:3c:2f:ab:25:9f:4b:84:80:92:e7:58:e1:
e8:eb:17:c9:7c:08:4a:09:be:c4:18:bd:13:18:76:80:f8:0a:
79:67:ff:b0:1b:2f:26:5c:83:8f:b3:3b:f1:90:02:17:da:7d:
45:a5:ff:6d:1b:b0:f5:7f:ed:4e:bf:f4:fd:ff:28:d4:b1:3f:
16:b4:19:cb:28:e0:dc:bb:24:77:82:fb:4b:b0:75:16:1a:d1:
6e:ad:a9:72:6e:a9:ea:3a:85:d2:47:0f:c8:ce:75:66:6d:23:
f2:9a:1f:68:ff:92:42:f5:f0:1e:7b:51:3c:93:fe:61:ca:bf:
4d:4b:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:43 2025 by rpki-client