Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: E0bZoKyiO9nTvH0LJWsLCSp3OdL59L4JepmqVa4+Lj0=
Subject key identifier: AA:82:CF:77:2D:FF:0F:5E:90:42:3B:7A:A4:5F:6D:AA:F8:E9:48:CC
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 01969E9A2051C710B32206D0D60D90743768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 0382
Signing time: Mon 05 May 2025 04:00:22 +0000
Manifest this update: Mon 05 May 2025 04:00:22 +0000
Manifest next update: Tue 06 May 2025 04:00:22 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: i2gJzstx3N9LEefp2OJUdOmKXtMk9sme7UhKLoKUuXU=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:20:51:c7:10:b3:22:06:d0:d6:0d:90:74:37:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: May 5 04:00:22 2025 GMT
Not After : May 6 04:00:22 2025 GMT
Subject: CN=aa82cf772dff0f5e90423b7aa45f6daaf8e948cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:a6:48:a3:12:fa:f9:6f:da:be:5f:44:e6:
62:ab:bc:8f:10:33:ac:49:6a:53:7c:47:59:8a:b9:
46:a3:d8:4f:6e:21:b9:cd:8e:29:77:1e:dd:9e:d8:
15:bd:76:93:e4:03:4a:6b:74:2b:72:7f:3a:9f:ca:
a0:0e:d5:ac:35:84:7f:76:d4:92:2d:74:87:e0:31:
74:79:af:df:5c:65:c5:f0:85:21:35:33:93:4b:98:
2d:21:aa:ba:21:cd:25:df:ca:bb:85:6c:70:93:54:
07:26:bf:2a:cc:d2:80:dc:16:fd:65:f1:5a:bd:e8:
bf:b3:cf:c0:bd:50:e0:ea:b2:ab:cf:5b:93:51:53:
a4:10:20:80:05:7f:cd:3d:27:ac:7e:ac:5a:0d:d3:
3f:43:fd:21:7b:11:9f:42:43:7c:8b:25:68:63:f4:
97:a6:61:26:b7:b0:7e:5c:40:a8:c2:c1:a3:ff:9a:
a2:b0:f5:09:c9:52:90:44:bb:a2:b1:43:f3:51:48:
9a:58:e1:ca:f4:a4:1a:cf:2f:05:c8:e9:64:07:c6:
a9:fb:de:b9:25:18:08:c9:9e:5c:b2:9d:9e:18:d5:
1c:9d:88:94:86:86:15:5c:f0:ac:e2:dd:25:2c:7e:
a6:22:e1:bf:c6:37:20:8b:85:26:7d:bd:3e:1d:86:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:CF:77:2D:FF:0F:5E:90:42:3B:7A:A4:5F:6D:AA:F8:E9:48:CC
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a5:92:b3:05:77:ce:67:1c:80:7b:7f:09:5e:bc:f8:a1:80:
d3:69:e7:e4:a6:47:87:ba:66:63:7d:31:a7:85:da:98:11:30:
96:1f:eb:86:c3:1a:5a:0d:85:de:c5:ec:32:d5:21:17:bd:6d:
28:d2:f4:97:3d:d1:e4:97:de:af:c0:c9:f1:36:fd:52:28:65:
1d:c1:80:eb:da:00:20:4f:29:dd:db:6d:d4:7c:87:5a:49:77:
a0:c9:fd:43:85:0d:2e:4e:4b:97:a7:99:e6:5a:b6:ee:52:fd:
5d:cb:68:1b:b0:6f:ab:d6:14:cb:fb:61:c4:b2:36:10:ae:3c:
bb:fe:0d:12:f8:c2:5a:52:c7:08:01:44:3c:3f:37:34:b3:6b:
3b:dd:41:85:f7:47:c3:48:62:f9:fe:2c:c7:55:c8:9e:0e:29:
9c:ae:7f:43:bc:f2:ef:90:70:59:49:3a:a9:0b:e4:d2:ae:65:
72:4d:dc:20:d7:16:2e:95:a3:57:20:13:5e:ab:ea:50:fe:a1:
1b:43:1d:e9:15:76:f4:67:cd:80:d0:df:74:d8:f4:74:bc:0a:
50:65:d5:9b:b8:ae:48:2b:05:a2:a6:4b:61:26:23:43:a6:70:
e6:de:14:67:98:8c:66:c8:82:fe:5e:32:a9:67:71:cb:56:0f:
63:db:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:43 2025 by rpki-client