Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: mC9v1K0ORlETD8Bktp9OES5Esw4HRmigDB7W+vgRvf0=
Subject key identifier: 7A:BB:3F:CA:DF:A1:51:54:27:3C:3A:3A:68:CC:90:3D:98:B1:6A:1A
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 0198D66071946A6F95747E698371BB308909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 04A8
Signing time: Sat 23 Aug 2025 10:01:41 +0000
Manifest this update: Sat 23 Aug 2025 10:01:41 +0000
Manifest next update: Sun 24 Aug 2025 10:01:41 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: Q3e1fHu15O9VWZ4kPSNUw1+kH4RNbtfJKSPqlJEiY+0=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:71:94:6a:6f:95:74:7e:69:83:71:bb:30:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Aug 23 10:01:41 2025 GMT
Not After : Aug 24 10:01:41 2025 GMT
Subject: CN=7abb3fcadfa15154273c3a3a68cc903d98b16a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:21:9c:76:e5:91:08:19:9d:bc:30:ec:bb:
94:44:59:f6:2e:5f:73:65:3d:c3:b0:95:96:58:4a:
97:49:c2:82:c3:ae:e1:24:b1:10:05:b3:22:53:30:
c4:56:d4:c6:dc:0c:8b:d1:28:ab:ac:f3:44:b0:5b:
a0:b2:c0:02:25:9a:c2:94:88:99:a3:da:93:0a:92:
e6:8b:9f:c6:7b:c6:c9:00:3a:a5:32:a6:bb:dc:53:
84:2f:18:c5:09:a0:05:7d:40:c6:b0:87:4a:15:ec:
dd:db:42:21:36:af:ee:f9:62:f4:8d:06:3c:6d:f0:
55:31:76:78:b5:f2:53:45:47:d0:0b:a7:27:07:ba:
89:9d:3a:6d:22:f8:c4:c2:32:11:b0:47:6f:0f:fd:
34:5b:39:ae:8e:b2:ed:f2:5a:a6:c7:7d:e6:5f:5b:
cf:65:4f:26:fb:74:b3:fa:f2:6b:e4:bb:6f:7f:ce:
89:d1:c3:d1:44:a8:70:64:a3:a7:bd:fd:b2:99:b6:
9e:e5:c0:ca:16:81:55:4f:5a:94:af:82:64:d9:d2:
4f:90:8d:39:7d:f8:59:ed:3c:6b:1c:42:58:87:78:
f8:1f:3a:dd:60:24:a4:27:18:46:3a:79:5d:9e:f7:
b8:84:7c:60:47:03:eb:2c:1a:af:21:d6:43:41:0f:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:3F:CA:DF:A1:51:54:27:3C:3A:3A:68:CC:90:3D:98:B1:6A:1A
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:8d:60:45:b1:96:2a:20:5f:d6:3c:a2:9d:78:d5:ba:39:cb:
ca:10:c3:2a:eb:61:08:79:9e:ba:3f:26:6c:52:76:23:8b:5f:
04:c1:79:b5:52:94:e6:c5:b1:ab:1e:36:05:60:26:95:86:e1:
07:56:a8:32:81:d9:93:f7:f7:21:14:89:75:db:fb:99:db:d6:
7c:e7:75:00:97:8e:1c:d4:8c:50:7f:1a:4c:83:d4:62:93:6f:
c0:db:92:fd:04:b9:3b:06:69:26:38:5b:ac:87:a7:34:72:46:
54:b1:ee:81:e1:41:10:a1:c8:b7:e9:c9:6f:ef:2f:ca:8f:62:
17:c1:2b:8d:b5:ee:af:e3:86:26:62:6b:5f:95:b9:84:c8:b7:
67:0f:c7:fe:60:69:46:a3:e2:dc:77:35:b2:e0:eb:bd:be:90:
bc:4a:53:7f:f6:9d:0d:b4:84:33:77:37:0d:8c:46:41:db:c2:
fd:fd:b7:b9:a1:7b:94:16:ee:0e:06:bc:68:07:e2:07:a8:9e:
93:4e:23:17:fe:80:1e:60:05:d7:58:8c:d1:b3:77:6e:0f:5a:
b1:2c:ab:68:d2:52:48:0f:9d:a2:9e:19:37:9b:07:ad:7b:77:
7f:40:5e:98:36:73:43:b9:1a:5b:ec:f6:b1:1c:aa:bd:46:b2:
42:f0:cd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:03 2025 by rpki-client