Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: UFV/Hn88UL1WONfUl6BUOQpQJqMoos0rdt/GtaheeGU=
Subject key identifier: 77:13:BD:3F:8C:61:00:E7:8D:08:34:8A:1D:3C:9F:13:D2:74:3D:65
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 0197B6A0C17788B1543553F77418DEB2F0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 0413
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: CojEb9pNDAhSuXoLC4kqf0XoFsGde2GyskQnvbTW5Fw=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c1:77:88:b1:54:35:53:f7:74:18:de:b2:f0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=7713bd3f8c6100e78d08348a1d3c9f13d2743d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:84:6a:1c:5b:1b:82:ba:c6:ef:33:ad:90:
dc:5d:1d:84:0d:fd:b0:19:f9:89:21:6f:81:4a:93:
34:63:7c:50:ff:56:5c:bc:07:a2:2d:74:7d:dc:bd:
67:52:63:6f:fb:9f:22:dd:6c:ec:70:8a:74:d4:22:
81:da:da:5a:13:cd:6a:72:89:87:01:17:7f:67:6d:
1a:3b:7b:da:c7:d2:47:ca:ed:d2:56:27:09:56:2b:
e0:3a:d1:c6:0d:f2:f2:c9:bd:9b:f7:ff:83:06:9d:
13:22:dc:7e:73:d0:e3:13:35:64:03:fe:b5:4e:e7:
12:ed:95:c7:2d:c9:61:1f:e1:cc:80:b6:24:b2:44:
1f:78:39:ff:3d:59:22:03:a5:bb:fd:89:5d:cc:76:
21:ea:16:76:01:10:09:e2:80:52:38:d8:8c:32:fd:
95:20:03:2e:c4:b1:bc:a8:4c:35:1f:56:dd:5d:2f:
c7:30:11:ae:54:b3:c4:57:5b:e6:2b:e6:d4:7b:0a:
66:17:76:75:3d:51:b9:e2:cb:63:c0:d7:ad:32:ad:
96:79:c5:50:a5:46:c8:35:62:86:ff:5a:7b:8d:36:
d9:1e:1f:10:2a:cf:f9:31:03:b9:9b:88:cd:89:ea:
47:fd:c7:cf:55:bc:63:2a:3d:3c:4b:f9:ef:40:28:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:13:BD:3F:8C:61:00:E7:8D:08:34:8A:1D:3C:9F:13:D2:74:3D:65
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ed:b6:cb:07:b9:02:52:dc:cd:3b:72:b9:1a:28:ec:44:67:
94:29:f8:68:1a:27:b3:76:5d:ff:65:05:88:46:b2:53:48:fe:
5e:37:41:1c:2c:16:4f:8c:a9:f6:01:92:7c:6a:32:14:0e:67:
dc:25:70:53:49:cf:81:ce:75:5d:60:d8:1e:1e:1c:6b:5e:de:
37:f0:99:b1:4d:e3:58:5e:4f:b5:90:c9:f4:64:01:c0:e8:17:
94:8a:9a:29:9e:32:55:b8:4d:a9:e0:25:c1:ae:fe:68:77:90:
b4:51:49:44:3f:aa:58:d0:dc:72:79:bd:7a:81:80:fb:2c:2e:
b3:23:c0:cb:c6:fd:5b:8d:34:a0:64:81:7e:77:42:67:48:87:
29:a0:33:6c:3d:c3:8e:15:85:06:5b:39:1d:22:44:6f:82:46:
29:3e:87:7a:fb:20:e3:c8:58:92:d0:60:48:59:df:cd:da:7d:
7c:53:c6:2f:e6:ad:af:4e:48:17:ec:6d:40:34:83:e1:58:e6:
a4:ed:19:76:26:f4:06:7b:6c:bc:31:74:2e:6c:99:03:bb:1b:
af:6c:56:8d:a3:55:9f:64:cc:8e:5c:cd:58:89:c5:56:4e:46:
e1:66:37:2d:07:0a:1f:9d:04:48:5e:be:6c:5a:7a:b5:6d:68:
5e:e7:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:09 2025 by rpki-client