Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: /n6UPRMkIua7EqdRUNcN2vGK89dXuPUIkV30Ycd/6OA=
Subject key identifier: A9:6B:B1:52:92:A3:59:C7:D1:03:72:3F:78:E4:98:CA:33:FF:9E:53
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019873E3EF9AF62E9F9A006D3DCB548D34FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 082A
Signing time: Mon 04 Aug 2025 07:02:54 +0000
Manifest this update: Mon 04 Aug 2025 07:02:54 +0000
Manifest next update: Tue 05 Aug 2025 07:02:54 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: wSgzkkTwBatg0ynAUlyyQUxk17l7FC8ErMpp0TNhsD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ef:9a:f6:2e:9f:9a:00:6d:3d:cb:54:8d:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Aug 4 07:02:54 2025 GMT
Not After : Aug 5 07:02:54 2025 GMT
Subject: CN=a96bb15292a359c7d103723f78e498ca33ff9e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:2a:7b:49:25:b1:dc:3c:2a:50:9f:1e:e5:
95:06:e2:03:26:de:cb:c1:bb:11:ed:d1:30:91:07:
7d:1c:e6:c2:1b:c5:a6:16:0f:90:3c:56:a6:61:a2:
a6:53:db:7f:00:0f:77:e9:78:68:f4:44:47:04:06:
6a:11:a8:8f:d6:7f:99:48:23:8d:e3:62:9b:64:05:
0d:7f:5b:a7:89:e1:9a:66:23:ac:7e:03:b0:af:ef:
e0:a3:9b:d6:6a:f6:6c:37:fb:6b:71:dc:ec:ae:b6:
41:92:31:7a:7b:98:7e:c5:e4:29:e5:05:53:f1:a3:
cb:f1:6c:cc:77:14:a1:68:02:c9:e3:29:58:ff:f9:
1d:51:fa:c9:29:ae:57:2a:9e:2f:f3:29:2b:f5:45:
38:f5:a0:83:51:bc:f5:d4:64:0a:18:16:24:38:cb:
00:a2:93:c0:73:29:5f:ea:f0:0a:51:34:dc:4d:b3:
48:d4:50:77:97:c5:a4:c4:c7:fd:ac:6d:e6:5a:85:
33:f7:d0:f1:c1:14:db:b8:91:7a:b2:2e:9b:b1:10:
cc:43:6b:50:dc:15:0b:01:c2:00:f2:09:09:64:e2:
1b:b6:09:0f:a2:a3:39:44:0b:d4:22:0e:85:89:05:
72:8e:18:c9:2e:77:2e:19:d4:7d:c0:73:04:c9:d8:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:B1:52:92:A3:59:C7:D1:03:72:3F:78:E4:98:CA:33:FF:9E:53
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:4d:47:a1:95:14:ae:1d:5c:03:3e:7a:dd:d8:cf:f8:45:
77:4a:4d:78:35:76:4b:ca:9f:5c:39:e1:0c:45:c6:ff:63:24:
60:ef:48:8f:e3:7d:d2:0a:03:79:47:b3:0c:ac:7c:ee:71:cc:
4b:9e:28:37:32:90:00:20:e9:39:e3:a5:ba:3a:70:ca:88:a4:
20:cf:fc:91:0d:6c:1c:d3:bb:36:a4:79:53:5b:3f:e6:4d:01:
49:50:92:06:d9:e5:4c:4d:82:46:37:31:92:c0:34:d5:26:31:
c5:f8:64:ef:4f:37:9e:79:41:c7:6b:73:b8:bd:92:ea:8e:78:
47:b8:2b:9a:da:62:85:68:90:ea:94:fe:2b:2e:e1:7e:67:ba:
fb:ed:e3:3e:f4:34:13:be:ef:50:f2:ef:e2:5b:8d:ac:56:80:
ec:ed:a3:b9:16:c7:88:c9:0c:d4:f6:08:62:a6:dd:0b:18:b9:
19:68:2c:b1:02:ca:26:7d:03:af:be:ca:13:87:09:6b:fc:d6:
56:92:94:4e:ce:d4:23:16:a4:8f:cd:86:aa:47:03:92:c6:40:
a6:a9:58:8d:ec:06:41:ca:fa:64:79:ad:43:b7:b4:3e:af:31:
21:91:12:80:c5:98:f1:fa:24:b2:b2:57:d4:a7:10:21:8f:87:
6e:d9:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:16 2025 by rpki-client