Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
File: ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft (raw, json)
Hash identifier: jxrVs19p1AP1krioSAU2GBkfPFbHaspybMYwRcMGKo0=
Subject key identifier: 98:ED:65:85:E8:E0:8C:CB:0E:49:88:71:FE:8C:78:4E:92:E7:74:86
Authority key identifier: 22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
Certificate issuer: /CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Certificate serial: 019A5187ADEC8695407C472012975A1E6AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
Manifest number: 13AF
Signing time: Wed 05 Nov 2025 01:00:37 +0000
Manifest this update: Wed 05 Nov 2025 01:00:37 +0000
Manifest next update: Thu 06 Nov 2025 01:00:37 +0000
Files and hashes: 1: ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl (hash: /719FwvyiMxabuD5hHS1qodjnc6STz4GR8cQPfOnUiU=)
2: bwWK7STk8JGeZNNeiu45q2N8QGc.roa (hash: IHej2lyZuUlDH3fMmYrRdwCcTBeweBqee1xUvWcQAO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ad:ec:86:95:40:7c:47:20:12:97:5a:1e:6a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22d54df89b8fd921dada3f0daa29efff5cce0a79
Validity
Not Before: Nov 5 01:00:37 2025 GMT
Not After : Nov 6 01:00:37 2025 GMT
Subject: CN=98ed6585e8e08ccb0e498871fe8c784e92e77486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:27:6c:7b:5f:95:c8:c6:4e:05:d7:62:20:
db:34:35:f2:b7:9f:93:83:58:e2:ed:ed:f9:d7:c4:
ba:a8:d0:ac:f8:cf:40:19:5a:87:a3:a5:e9:0d:e4:
f4:4c:1d:0a:69:b7:e0:15:94:68:e8:6c:b9:69:62:
61:39:54:25:7e:07:62:4b:9a:86:bd:59:73:e3:db:
48:dc:8d:9b:ff:86:06:d7:0f:5e:28:53:7f:98:c2:
be:df:16:45:a6:42:77:16:22:67:68:5e:7d:f7:51:
c4:7c:5c:b7:f8:a4:aa:65:2f:81:70:7d:89:51:b3:
5a:9c:86:b1:e8:84:ed:93:06:a4:b7:3c:06:78:19:
84:94:3c:86:a2:bc:1a:de:05:6e:03:e6:05:53:ba:
ea:79:e0:a2:6a:c7:d0:5a:18:a2:ab:a0:f2:5f:0a:
61:ef:1a:f0:47:b1:e2:5c:c5:a8:dc:0b:ab:d2:70:
96:0f:fe:bf:a2:30:33:d6:53:38:61:ef:9e:6d:5a:
a1:c9:4a:94:78:21:62:27:be:03:8e:4d:0a:0d:7d:
7a:9f:3d:ae:d3:3a:09:50:8c:d3:0b:f0:30:b1:65:
6c:3a:9d:20:db:6a:e5:cd:6b:65:0f:ca:4b:aa:89:
ab:a6:ed:92:99:b9:b1:d1:c4:52:94:2f:ed:9d:cc:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:65:85:E8:E0:8C:CB:0E:49:88:71:FE:8C:78:4E:92:E7:74:86
X509v3 Authority Key Identifier:
keyid:22:D5:4D:F8:9B:8F:D9:21:DA:DA:3F:0D:AA:29:EF:FF:5C:CE:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItVN-JuP2SHa2j8Nqinv_1zOCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b5cf0b-ec31-4705-8f68-6f1fece87c89/1/ItVN-JuP2SHa2j8Nqinv_1zOCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:c9:8c:5e:36:4d:a3:e4:13:f1:14:55:43:a6:8c:33:1c:
77:4b:0f:b8:18:e1:45:f7:a7:5f:05:f4:63:db:fc:10:f1:74:
11:7b:39:c7:a7:8b:4c:19:5c:6e:50:7e:85:3d:61:85:89:01:
47:13:ad:59:94:d1:8e:3f:be:a0:13:4c:88:64:6d:19:b2:a7:
0d:fd:50:bb:43:0e:45:2a:2d:2f:c3:a7:6a:7c:f1:10:eb:99:
91:a0:a3:ff:f5:7a:f3:94:01:ad:ea:5c:dc:54:92:17:6e:b3:
71:38:d8:85:65:14:83:f2:58:9e:70:ee:2c:62:18:8c:8d:b1:
76:ae:77:50:5d:7e:3c:8f:2e:c0:da:27:07:41:3b:26:35:f0:
24:58:50:3e:c3:b3:5c:3b:a9:b2:b8:7b:51:d4:c6:98:1d:63:
d4:56:8e:4d:fb:8f:70:ce:ae:03:a7:3c:ff:83:4f:5d:21:cf:
b9:e2:5f:10:7f:9c:7a:61:ff:26:6e:9b:c0:e0:61:36:76:b4:
33:6c:bb:3f:1f:62:37:88:f7:18:8b:81:3a:5f:8b:b0:31:1d:
71:0c:9b:ce:60:88:be:3b:8f:06:7d:34:13:84:db:30:e9:7e:
50:ce:b6:a8:25:ff:4e:b2:9f:55:e3:3d:2b:66:fc:2c:dc:08:
bd:d0:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:47 2025 by rpki-client