Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: oFtPP0at/GZw0dqKuvSQK1qdfogfdX3+okDcij63sQc=
Subject key identifier: 00:64:8B:1D:BA:1F:3B:EF:E0:92:3B:CF:CC:5C:14:68:8E:60:B3:5E
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019A725CE2F8241F4F421CF102F25313B84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 13C0
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: TJZ2+tPBu0ktCk+ePu8vqT3Nf3UY6Fesqy7gSheBHWg=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e2:f8:24:1f:4f:42:1c:f1:02:f2:53:13:b8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=00648b1dba1f3befe0923bcfcc5c14688e60b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:aa:01:88:b1:63:12:60:4a:1b:9e:77:59:e6:
d3:4d:c6:33:72:ac:4f:f7:b5:0f:0a:6e:ac:24:8f:
e4:44:bb:91:5a:76:be:72:f9:27:fb:8b:bc:bf:8c:
bb:bc:89:e8:e7:65:65:99:32:92:ce:39:a3:0e:e0:
75:4d:22:4c:71:ff:08:4d:94:fb:c9:47:36:f6:5a:
17:08:2d:1c:1f:1b:34:89:b1:d3:7e:ec:de:e9:42:
4c:77:e5:e6:80:4a:c9:96:cd:0e:09:44:88:a3:cd:
4a:10:99:26:a2:35:38:34:e2:41:b1:04:7b:21:15:
94:f3:37:cd:45:71:dc:1f:e9:9d:12:67:1b:da:92:
72:93:b9:79:02:38:09:28:4e:3d:70:a5:df:be:10:
7c:30:33:c0:7d:63:c8:60:dc:69:90:40:2b:0f:00:
a5:45:c1:a0:d0:a8:a0:aa:80:14:d4:e3:18:43:ba:
26:2c:10:e5:77:84:bc:14:ab:06:b9:e7:51:e8:49:
43:66:4d:64:2b:c1:95:bd:05:14:8f:42:c7:f5:27:
83:2c:ad:5f:a2:a1:e1:08:62:6d:86:42:9c:d2:bb:
12:81:a6:ad:eb:a7:13:ce:73:9f:46:87:44:ae:04:
e2:18:2c:6d:34:ac:fc:f5:96:00:0b:28:eb:4d:94:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:8B:1D:BA:1F:3B:EF:E0:92:3B:CF:CC:5C:14:68:8E:60:B3:5E
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ce:ac:d1:5b:11:06:e1:39:93:10:56:f3:f7:0e:92:d9:fc:
47:b5:ed:13:4f:a4:f9:a4:d4:26:d1:a4:c1:e7:d5:74:46:84:
92:b2:4e:4f:c8:83:36:26:10:3c:8d:ca:9d:b9:d6:f0:bd:27:
50:f8:d0:b9:87:3f:f7:78:fb:30:93:67:3b:c4:6c:53:e1:7b:
c6:9d:72:da:10:6e:43:6e:80:6e:71:f7:22:e8:10:f4:ac:e2:
cd:3d:af:1a:bb:27:2c:33:89:79:8e:00:d8:27:d6:f2:89:1b:
29:50:e1:d9:85:4f:47:be:ce:8c:ce:b7:e9:c0:f2:50:58:57:
70:8a:82:7e:a9:7c:68:28:66:4a:de:b4:9c:73:2b:c8:05:41:
eb:4d:02:d9:54:83:65:b9:f6:4d:81:bf:f9:79:d8:ab:5a:f4:
31:30:3c:01:ba:da:73:57:25:ee:fb:6b:cb:1c:54:b7:cb:26:
ff:c9:7c:8e:b7:09:fe:0c:7a:8b:86:f7:1c:8a:51:26:21:bb:
6b:e9:3d:0f:c1:48:0d:61:87:a1:a4:41:fa:ff:4e:c1:11:96:
42:d3:f8:1a:ea:6a:60:31:5d:ac:ad:e8:8d:12:6e:dc:b6:b3:
bb:ee:30:5c:31:3a:f5:0d:ee:e4:d2:25:54:c6:a1:2a:e9:f6:
db:df:c2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:53 2025 by rpki-client