
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: Poh+g6CAsI0mPJRHtrBpUPjrzKOY1FrPwIFepi4zSe8=
Subject key identifier: 91:0F:92:80:DD:44:23:CD:03:F8:E4:65:98:00:5B:73:1C:B4:65:4B
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 019873E30B810F8229828D8FC54B0A486987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 0475
Signing time: Mon 04 Aug 2025 07:01:55 +0000
Manifest this update: Mon 04 Aug 2025 07:01:55 +0000
Manifest next update: Tue 05 Aug 2025 07:01:55 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: TGH359CxgU/4VUc5NofVzimi5K4I/xfIrHHVeKIktLQ=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0b:81:0f:82:29:82:8d:8f:c5:4b:0a:48:69:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Aug 4 07:01:55 2025 GMT
Not After : Aug 5 07:01:55 2025 GMT
Subject: CN=910f9280dd4423cd03f8e46598005b731cb4654b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:64:15:38:07:c8:1f:fb:fd:d2:1e:c3:5d:
4a:72:33:a7:15:13:c2:3e:71:d4:20:06:74:1e:e1:
e9:3c:2b:c8:38:81:2f:4f:9a:b6:19:a8:69:8a:1c:
37:ce:95:bb:1e:86:ec:f7:dd:e5:03:2f:7b:21:11:
be:1a:9b:1b:9a:e4:c2:ed:de:ce:6f:8c:15:16:29:
2e:32:93:b6:78:b2:72:76:63:ae:1e:be:15:ee:3b:
d6:8a:3e:87:05:74:8f:b8:db:e8:fd:61:c9:5f:81:
91:81:6d:b4:f5:ad:cf:67:cb:58:ed:2a:46:38:c3:
c8:3e:a4:03:fb:be:85:28:f3:a9:c6:20:83:9c:3d:
26:ba:5a:0e:c3:5e:96:40:3a:35:22:cd:47:6c:0a:
5f:7f:f3:cc:56:20:14:eb:ee:8f:03:47:ab:be:ac:
b0:94:54:19:64:f1:16:41:0e:05:8f:01:3e:a1:dc:
1a:5f:58:49:10:5a:ff:ae:ce:ce:d0:8f:10:55:8f:
82:c3:e6:34:7e:e9:95:2d:b4:cb:4a:d6:79:27:04:
95:0a:6f:ba:13:41:70:a0:d0:77:04:57:ff:b4:ae:
3e:0b:e0:32:d2:17:8c:05:8b:1e:71:3b:93:50:92:
2a:51:7b:cb:91:64:49:73:06:77:e0:ce:45:75:26:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:92:80:DD:44:23:CD:03:F8:E4:65:98:00:5B:73:1C:B4:65:4B
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:1b:92:ea:5d:9d:f2:d6:eb:64:ff:31:f5:83:25:fb:e4:
03:b0:7c:0a:94:b2:b3:02:8b:f2:a9:5e:f2:14:8c:17:3e:fc:
65:94:e6:d7:20:cf:57:0d:8f:d4:e4:cf:0a:ec:fc:8a:61:48:
43:05:96:13:0e:5e:08:75:4d:d9:35:e2:66:87:dd:6a:e5:10:
4c:94:ce:4b:14:9a:59:88:37:50:10:2e:35:04:50:c8:c6:2d:
af:1c:cc:fa:2d:7a:0f:3f:ac:72:ab:d3:eb:4a:39:20:b7:6e:
cd:ea:df:00:d4:97:9e:66:d0:6a:e2:99:6e:4b:5f:d7:73:e5:
de:50:e5:e9:84:65:1e:3a:a5:e0:98:54:31:4b:41:d4:58:5b:
a7:38:1b:1f:34:11:75:27:01:ed:a8:3a:94:9e:8f:9c:68:af:
e0:a4:03:4f:cf:c8:d5:d0:91:2c:0d:28:fa:54:93:a8:f0:a9:
fa:80:5b:29:8f:9e:9d:03:91:5a:ec:82:6b:b9:56:8f:b8:d8:
23:c6:74:78:12:d2:8d:db:b8:7f:71:02:02:98:f0:1b:4b:0d:
22:8c:aa:77:09:0a:fe:4d:e2:05:23:62:db:ff:a3:b2:11:0a:
d5:b4:73:c0:3f:bb:3a:49:4e:9c:aa:3c:7a:92:90:2a:0a:00:
f8:e7:42:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4wuBD4Ipgo2PxUsKSGmHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmE3ZTBiMzRhNDc2MjIyY2IxZjViYzBjMDVlYzEzYmJi
MTRhNzkwHhcNMjUwODA0MDcwMTU1WhcNMjUwODA1MDcwMTU1WjAzMTEwLwYDVQQD
Eyg5MTBmOTI4MGRkNDQyM2NkMDNmOGU0NjU5ODAwNWI3MzFjYjQ2NTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritkFTgHyB/7/dIew11KcjOnFRPC
PnHUIAZ0HuHpPCvIOIEvT5q2Gahpihw3zpW7Hobs993lAy97IRG+GpsbmuTC7d7O
b4wVFikuMpO2eLJydmOuHr4V7jvWij6HBXSPuNvo/WHJX4GRgW209a3PZ8tY7SpG
OMPIPqQD+76FKPOpxiCDnD0muloOw16WQDo1Is1HbApff/PMViAU6+6PA0ervqyw
lFQZZPEWQQ4FjwE+odwaX1hJEFr/rs7O0I8QVY+Cw+Y0fumVLbTLStZ5JwSVCm+6
E0FwoNB3BFf/tK4+C+Ay0heMBYsecTuTUJIqUXvLkWRJcwZ34M5FdSamrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEPkoDdRCPNA/jkZZgAW3MctGVLMB8GA1UdIwQY
MBaAFIr6fgs0pHYiLLH1vAwF7BO7sUp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzct
NmJhN2E5NDdhN2Y3LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzctNmJhN2E5NDdhN2Y3
LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSgbkupd
nfLW62T/MfWDJfvkA7B8CpSyswKL8qle8hSMFz78ZZTm1yDPVw2P1OTPCuz8imFI
QwWWEw5eCHVN2TXiZofdauUQTJTOSxSaWYg3UBAuNQRQyMYtrxzM+i16Dz+scqvT
60o5ILduzerfANSXnmbQauKZbktf13Pl3lDl6YRlHjql4JhUMUtB1FhbpzgbHzQR
dScB7ag6lJ6PnGiv4KQDT8/I1dCRLA0o+lSTqPCp+oBbKY+enQORWuyCa7lWj7jY
I8Z0eBLSjdu4f3ECApjwG0sNIoyqdwkK/k3iBSNi2/+jshEK1bRzwD+7OklOnKo8
epKQKgoA+OdC1A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:54 2025 by rpki-client