Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: S7u4CXux0tR8mIy0G0q3cC6YDZUvRf98rDL3fODF4ks=
Subject key identifier: 69:69:45:B3:BD:BF:EE:03:CB:F0:EC:60:2E:44:5A:81:71:27:83:30
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019685484A8F60E2EFBF0FB5B931CCF62D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 072A
Signing time: Wed 30 Apr 2025 06:00:29 +0000
Manifest this update: Wed 30 Apr 2025 06:00:29 +0000
Manifest next update: Thu 01 May 2025 06:00:29 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: 2KBL6D6PkNeP1DBLOvVruJ7HcZbjOP7sey+hnZr8gNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:4a:8f:60:e2:ef:bf:0f:b5:b9:31:cc:f6:2d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Apr 30 06:00:29 2025 GMT
Not After : May 1 06:00:29 2025 GMT
Subject: CN=696945b3bdbfee03cbf0ec602e445a8171278330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:19:2d:f5:08:26:fa:2a:73:aa:e0:b2:d8:
98:94:35:62:58:d3:47:1a:fb:f8:ba:fb:cd:77:d1:
72:53:f7:d9:db:01:7c:f4:c8:83:ce:41:fd:7c:e0:
d1:11:84:8b:b2:5c:20:ac:f3:12:88:88:67:8e:1c:
73:30:5a:36:d3:31:9b:8c:dd:60:93:12:b7:2f:8f:
05:56:df:3f:8b:f5:03:fc:f0:f4:b9:0a:f5:fc:59:
46:7d:48:ff:f3:41:fd:e0:d3:e7:e9:31:01:08:08:
37:93:30:00:51:ee:6b:47:5c:b1:76:33:eb:ab:0d:
2f:32:52:e3:ad:77:79:92:37:3b:25:8a:3d:6c:b3:
9e:6e:7b:21:98:ea:0f:be:2d:54:ba:01:50:0f:16:
ea:92:87:2c:83:36:2c:2d:de:3e:a2:04:3f:7d:7e:
0b:26:cf:42:1f:2a:5a:e7:04:ca:7f:40:a9:b3:3e:
86:01:8d:b0:95:3b:27:6f:ba:9e:20:43:25:83:6c:
89:f8:33:03:b9:3d:98:c7:54:ab:21:b7:c7:5f:c6:
5a:96:2d:07:f1:29:2f:9d:9b:1b:67:92:99:0e:ef:
e9:24:41:31:38:b7:8a:e5:65:89:d1:9f:fb:3e:29:
08:3a:b3:71:ab:dd:dc:79:c9:d4:b2:c0:ae:97:f5:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:45:B3:BD:BF:EE:03:CB:F0:EC:60:2E:44:5A:81:71:27:83:30
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:c2:87:1d:51:f9:c8:81:6e:35:aa:05:82:db:5b:45:1b:
9d:96:26:5e:4c:ff:c0:aa:09:28:e7:65:e3:94:73:62:71:02:
2c:c2:9a:44:4a:30:16:77:41:1a:a8:e8:6e:cf:9a:43:78:7d:
82:4f:77:f1:e9:1f:d3:b1:d1:1f:96:dd:ab:25:40:ee:b5:66:
64:a5:0e:43:5e:f7:94:57:d3:43:e9:33:e8:5d:76:c1:56:7b:
3a:d9:52:5e:5c:96:84:64:c0:00:f4:ef:0a:1f:9e:1e:3a:94:
70:67:4e:2a:63:5e:2d:c7:eb:ed:0f:e2:30:90:07:e0:a6:c2:
37:df:45:33:fe:fb:5d:3f:78:84:8d:ac:af:65:01:a2:49:af:
f2:68:39:34:5b:c2:fd:74:3f:3a:77:57:79:7d:80:38:4f:72:
91:e5:38:99:41:78:48:55:32:ef:d1:47:85:9b:4a:df:ac:5e:
39:c0:77:35:4d:d7:e5:15:74:02:0b:b7:d4:e0:b5:05:ec:ef:
33:35:a5:e4:1b:f0:4e:91:28:4b:27:80:c0:38:8e:26:9f:23:
aa:9b:4b:70:7d:1a:5b:e3:37:0b:95:a6:da:fd:40:6f:ac:bc:
a1:29:27:b8:a3:4c:a0:1b:63:f9:9f:90:3f:72:eb:e6:c9:dd:
59:d7:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:07 2025 by rpki-client