Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: OULD4yU559rZpuAiEFdTcHr8ToXq9hOnEeYonxNfp9U=
Subject key identifier: C3:37:49:AE:63:D0:18:7C:48:6C:81:FA:AF:F0:71:88:7D:1B:95:4C
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 019677FB6CF0AE73EA23BB7C0BDC86DDEF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 036E
Signing time: Sun 27 Apr 2025 16:01:28 +0000
Manifest this update: Sun 27 Apr 2025 16:01:28 +0000
Manifest next update: Mon 28 Apr 2025 16:01:28 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: XA+kR8weropY9e+/3jj1ZzDi8/UfpIX/95hE5wgnwm4=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:6c:f0:ae:73:ea:23:bb:7c:0b:dc:86:dd:ef:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Apr 27 16:01:28 2025 GMT
Not After : Apr 28 16:01:28 2025 GMT
Subject: CN=c33749ae63d0187c486c81faaff071887d1b954c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:19:cb:fe:66:00:64:81:d7:57:2c:b9:41:
41:ac:67:0f:da:13:79:24:95:f7:0e:59:a1:d7:d0:
fb:6a:62:8a:28:1a:0b:f2:ac:f1:bd:a8:6c:ed:cb:
35:cc:f4:56:98:43:a8:05:a8:8c:25:d9:f1:fb:39:
63:d5:68:3f:15:07:59:e5:67:b7:d6:7f:85:e5:00:
0f:78:4e:68:15:79:5d:13:91:2d:56:81:d8:b6:62:
9e:56:03:aa:e3:7b:8e:23:14:7e:69:d4:8f:fc:a3:
39:92:e7:7e:59:c0:5f:81:68:a1:a3:6c:28:d4:21:
69:00:ec:69:be:31:9e:0a:5b:36:cd:c4:93:48:54:
20:dc:d2:5e:bb:8b:32:f2:ae:d4:e3:36:b7:a7:19:
a8:c7:e9:95:d1:3a:69:d9:28:4f:10:68:e7:a4:8e:
da:2f:01:87:b3:ef:8b:d4:48:96:5a:9d:1e:c0:de:
58:a4:a6:48:8e:50:d1:04:3e:a3:ee:c3:31:c6:04:
cc:da:fb:dd:33:ec:66:a8:5f:2f:8f:bf:24:f8:d6:
28:f6:10:9b:9b:4b:19:ed:90:3e:5f:11:df:e9:14:
80:ac:8d:41:62:79:5d:c8:04:0f:8e:64:f9:6d:49:
1d:f5:49:cb:0b:41:28:39:4c:d8:a3:d7:4d:1d:b3:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:49:AE:63:D0:18:7C:48:6C:81:FA:AF:F0:71:88:7D:1B:95:4C
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:e1:60:6f:a4:64:29:0a:e1:93:58:8d:41:67:03:ce:68:
92:cf:67:e8:0f:27:e4:9b:12:d0:79:49:e3:29:92:76:31:8d:
ca:89:e8:dd:12:b2:6a:18:a2:8b:84:b8:85:37:fc:a1:1c:76:
f2:6e:a5:14:1c:a6:00:db:c9:c7:08:41:e9:b2:32:0e:27:dd:
6b:6b:97:2d:8a:95:18:f9:13:7c:36:b9:1c:96:bc:41:2c:80:
5c:c5:ae:0b:02:1a:aa:db:a2:12:d8:89:21:ca:19:49:4d:22:
c1:fd:66:2d:c9:f7:4c:72:0f:7a:7b:7e:eb:13:46:ff:e2:52:
b0:0d:dd:24:4d:5c:83:ab:30:ed:71:01:18:8f:aa:2a:53:17:
ad:bb:1a:0b:e6:c3:1c:1b:9d:f7:d3:ab:78:e6:0b:19:38:e1:
f2:96:63:e5:c2:a6:a2:31:40:c8:74:a0:76:a9:47:a8:80:f4:
ea:50:7f:16:95:2a:aa:b5:12:b6:d6:d5:86:1b:f2:1e:a6:27:
c8:f9:e6:b3:47:b4:7d:7e:15:0d:a5:e3:29:36:f0:95:0d:90:
d9:ab:d9:c0:a1:79:7b:1a:f2:16:14:96:da:5e:78:ab:c2:f6:
92:0c:b8:01:f9:51:cb:48:d0:77:46:13:ab:51:bc:7e:60:51:
e6:c8:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:49:51 2025 by rpki-client