Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: hGugRgrsnO/2fdjwVCUHMFIO3lw7ArQxFAiRB6fCc8A=
Subject key identifier: 36:3C:B6:D4:A4:43:A2:BF:1D:4E:0C:CF:D8:62:45:F6:B5:48:06:78
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 0198D51576F210880A209C1D19437A816B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 12EA
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: XHfUoQMJofysopBOZ1TPCTuj1r55XdSshEymHSWdiQI=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:76:f2:10:88:0a:20:9c:1d:19:43:7a:81:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=363cb6d4a443a2bf1d4e0ccfd86245f6b5480678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:d1:cf:ae:b3:6f:bc:72:c4:a8:17:31:4c:
cc:0d:ab:b6:42:09:c8:f1:fd:7b:6c:b4:d1:2d:42:
f4:8f:c3:95:b4:00:99:19:8c:a0:b6:1d:87:57:8d:
9f:8d:7b:dd:e5:72:f0:b2:f1:37:8d:0b:cc:0e:a2:
65:47:d9:12:80:4b:5f:91:7e:86:71:9d:72:ac:b5:
52:3f:96:2c:2f:bb:53:de:ef:67:4b:0a:dd:36:ca:
bb:43:55:c9:df:e0:f6:d7:99:1d:e6:09:52:61:a5:
3f:c2:63:45:ed:f7:31:a1:77:51:e1:39:97:07:53:
3f:fd:1e:3c:15:01:c7:8f:65:6c:0b:4e:6c:b2:cc:
b7:0f:ac:ca:9c:71:4d:14:a9:49:d8:92:21:18:2b:
8d:30:4d:1a:98:93:16:4e:53:e9:15:44:0a:71:bc:
73:07:b3:2e:b3:a1:04:21:0d:94:30:4a:d9:cb:42:
dd:d9:09:77:a2:68:52:a2:f6:39:51:5b:f2:29:54:
47:2d:9c:75:fa:08:c9:c4:52:7c:08:9a:da:1d:00:
09:25:c8:82:39:51:9c:6c:9b:43:b5:60:6f:b1:bd:
fc:ae:a4:24:82:4c:20:4a:98:dc:2d:8a:5e:02:63:
46:30:b0:aa:86:f2:00:46:3f:a3:7f:ef:d8:31:36:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:B6:D4:A4:43:A2:BF:1D:4E:0C:CF:D8:62:45:F6:B5:48:06:78
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6a:24:8d:fe:e5:33:b8:7c:db:b9:17:d5:56:ad:97:93:bb:
bc:35:2a:11:99:6f:ee:3d:aa:04:67:66:10:6b:01:f7:aa:14:
14:8d:6c:4e:1f:96:ea:10:08:95:64:ff:5e:14:e7:31:57:c7:
2e:ae:f3:6f:98:eb:7c:0b:7f:3c:eb:09:39:e0:bc:99:6b:c1:
58:66:3c:61:64:9d:38:44:3d:35:f2:8f:dc:aa:1c:5a:85:52:
90:f0:b9:60:c4:18:68:24:a3:62:9c:58:66:79:0a:62:73:b3:
5a:1c:6c:d3:a0:4a:72:b0:be:5c:41:aa:46:8c:ee:48:04:5c:
3b:cd:cd:62:2c:c3:7f:59:c7:68:82:05:df:cc:ff:d4:60:e5:
2a:f0:be:24:f2:7f:f7:4c:14:01:aa:4c:2c:04:9f:28:81:37:
71:35:b4:8b:fe:55:b7:34:0e:d1:dc:5b:a1:fd:bf:78:58:f2:
5c:72:58:58:0b:eb:c6:44:2c:0a:be:f2:97:bc:10:38:7a:0c:
c3:59:d5:a4:e3:93:d9:05:47:5d:be:05:e2:35:d1:5d:0b:c8:
4c:0f:92:ab:1a:60:33:b0:b6:03:95:d7:a6:8f:69:2d:ff:d0:
38:c0:bc:b4:ca:bd:86:ae:3b:62:3b:5d:8a:b4:db:61:af:03:
64:1c:2a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXbyEIgKIJwdGUN6gWtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZDU0ZGY4OWI4ZmQ5MjFkYWRhM2YwZGFhMjllZmZmNWNj
ZTBhNzkwHhcNMjUwODIzMDQwMDEwWhcNMjUwODI0MDQwMDEwWjAzMTEwLwYDVQQD
EygzNjNjYjZkNGE0NDNhMmJmMWQ0ZTBjY2ZkODYyNDVmNmI1NDgwNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcPRz66zb7xyxKgXMUzMDau2QgnI
8f17bLTRLUL0j8OVtACZGYygth2HV42fjXvd5XLwsvE3jQvMDqJlR9kSgEtfkX6G
cZ1yrLVSP5YsL7tT3u9nSwrdNsq7Q1XJ3+D215kd5glSYaU/wmNF7fcxoXdR4TmX
B1M//R48FQHHj2VsC05sssy3D6zKnHFNFKlJ2JIhGCuNME0amJMWTlPpFUQKcbxz
B7Mus6EEIQ2UMErZy0Ld2Ql3omhSovY5UVvyKVRHLZx1+gjJxFJ8CJraHQAJJciC
OVGcbJtDtWBvsb38rqQkgkwgSpjcLYpeAmNGMLCqhvIARj+jf+/YMTZ4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDY8ttSkQ6K/HU4Mz9hiRfa1SAZ4MB8GA1UdIwQY
MBaAFCLVTfibj9kh2to/Daop7/9czgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgt
NmYxZmVjZTg3Yzg5LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNWNmMGItZWMzMS00NzA1LThmNjgtNmYxZmVjZTg3Yzg5
LzEvSXRWTi1KdVAyU0hhMmo4TnFpbnZfMXpPQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmokjf7l
M7h827kX1Vatl5O7vDUqEZlv7j2qBGdmEGsB96oUFI1sTh+W6hAIlWT/XhTnMVfH
Lq7zb5jrfAt/POsJOeC8mWvBWGY8YWSdOEQ9NfKP3KocWoVSkPC5YMQYaCSjYpxY
ZnkKYnOzWhxs06BKcrC+XEGqRozuSARcO83NYizDf1nHaIIF38z/1GDlKvC+JPJ/
90wUAapMLASfKIE3cTW0i/5VtzQO0dxbof2/eFjyXHJYWAvrxkQsCr7yl7wQOHoM
w1nVpOOT2QVHXb4F4jXRXQvITA+SqxpgM7C2A5XXpo9pLf/QOMC8tMq9hq47Yjtd
irTbYa8DZBwqnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client