Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: tEJF5cB+xTVqIzRYRGTgmjap/qYDlp9jVNQI92C6G2g=
Subject key identifier: FE:76:06:15:25:C2:10:DD:74:98:19:4D:F2:54:77:E7:B2:E7:D9:94
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 0197BB21C894C178B8D25C80446C023328E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 1258
Signing time: Sun 29 Jun 2025 10:00:42 +0000
Manifest this update: Sun 29 Jun 2025 10:00:42 +0000
Manifest next update: Mon 30 Jun 2025 10:00:42 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: T7V+XE8RovwGyIs5FIaUBkIOK1of783MKPssTZU3FWQ=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:21:c8:94:c1:78:b8:d2:5c:80:44:6c:02:33:28:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Jun 29 10:00:42 2025 GMT
Not After : Jun 30 10:00:42 2025 GMT
Subject: CN=fe76061525c210dd7498194df25477e7b2e7d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:c2:27:a2:fb:80:e6:c3:fb:c8:c8:de:ae:
3e:3d:f2:de:ea:85:2d:42:e6:61:c7:ed:63:4c:da:
94:03:a4:e4:78:c5:4b:e2:68:e0:cb:fa:a6:72:22:
f3:52:64:eb:dd:c9:cd:aa:1b:e9:92:75:d4:ab:d7:
c4:87:99:06:8d:d2:43:94:4a:d9:a2:b2:5c:7c:8c:
1d:fd:b2:95:46:36:61:d9:c2:38:dc:da:27:e6:dd:
96:17:3e:70:22:51:40:9f:fa:92:c4:f9:c5:29:cf:
b1:0b:68:86:19:d9:d8:4b:a1:2d:7c:db:48:b5:3b:
d4:db:f6:3e:77:22:45:4f:d1:0c:a3:d4:89:86:c6:
95:b4:c4:b8:45:e5:28:23:be:21:e2:ee:66:5a:4a:
c5:6a:50:62:12:2d:f1:4d:ff:27:e8:46:16:d2:c8:
c3:e4:1c:14:45:50:14:5d:cb:46:df:16:3d:9e:f5:
4e:8c:49:3f:90:f6:27:6e:a4:f4:92:db:37:05:fa:
e0:f8:09:1b:ad:43:27:a7:fc:b3:85:03:74:0a:4e:
38:01:cd:41:8a:3e:26:67:3e:df:b5:8b:9e:30:64:
f5:2e:27:7e:84:ba:ee:76:e9:ce:ce:07:27:ca:4d:
35:4d:55:1e:aa:dc:c4:c7:38:fa:a2:09:dd:c7:2d:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:06:15:25:C2:10:DD:74:98:19:4D:F2:54:77:E7:B2:E7:D9:94
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:03:48:bf:c2:2e:32:ab:93:fb:68:b9:9e:36:5b:eb:72:
fb:ec:8f:a7:34:ef:b1:94:dc:6a:63:d9:3d:2f:71:43:c2:fa:
c0:96:f4:b5:77:0c:83:54:06:2f:64:7d:66:45:2f:7b:d6:11:
39:59:23:c9:a3:db:03:79:8a:37:12:34:57:83:6a:58:86:23:
e1:06:90:92:12:f7:ae:2c:5e:73:c6:41:d9:ec:83:b1:67:27:
24:8e:42:8e:da:ad:e0:e2:ff:2b:f4:c4:fe:e9:3d:73:7d:de:
95:53:f3:16:22:bb:37:82:71:3b:55:a7:0a:8f:16:66:34:e4:
5d:13:cf:a7:3b:6c:6b:92:43:d2:d5:ed:e8:d5:86:d9:dc:0b:
e2:82:a7:cc:c0:79:4c:a8:f2:c3:3d:70:e1:bb:85:c2:b7:1c:
29:05:c3:bf:cc:ce:23:f2:30:e1:d0:0e:d9:6e:52:ad:50:39:
5a:9c:0b:c2:80:21:34:e8:1b:1c:5e:c9:89:73:67:32:b0:20:
b5:92:b2:a4:c1:d4:d4:68:da:20:c5:50:c1:93:24:06:f5:0c:
7d:69:da:dd:7d:52:f2:6d:58:98:f8:e8:27:ae:19:02:4b:7d:
d7:f0:4c:a5:13:77:83:ac:4b:51:b6:5f:48:17:94:79:2f:4f:
9d:08:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:48:39 2025 by rpki-client