Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: m/Ci/cY0Q97Lupmv4bEiNENeyW8FxJTVD+bgvnarzOU=
Subject key identifier: 3A:4A:51:93:A3:E7:A4:41:B2:3C:4C:C4:3B:BA:54:63:09:59:CA:39
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 01984B553A1B8C73DAF9C537AB162634DF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 0815
Signing time: Sun 27 Jul 2025 10:02:13 +0000
Manifest this update: Sun 27 Jul 2025 10:02:13 +0000
Manifest next update: Mon 28 Jul 2025 10:02:13 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: sa/353AZxxu1cH61eUTD51QHuVZmYaaosDVLK+0J6xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:3a:1b:8c:73:da:f9:c5:37:ab:16:26:34:df:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Jul 27 10:02:13 2025 GMT
Not After : Jul 28 10:02:13 2025 GMT
Subject: CN=3a4a5193a3e7a441b23c4cc43bba54630959ca39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:4d:67:af:2c:50:54:9b:4c:f6:13:8d:17:
36:d1:cd:35:2b:a0:7f:91:27:13:60:59:dd:a8:16:
28:67:78:d0:3e:aa:6f:7d:2e:ba:3a:5f:12:b6:c7:
12:4c:f7:f7:ac:8b:5a:3c:9d:bf:25:5a:e6:98:36:
cb:98:03:35:4f:f3:08:b6:06:7c:39:f1:36:6e:64:
8d:f4:9f:13:3d:34:0b:92:9a:c9:09:5c:e1:1e:6f:
ae:27:4f:ee:e6:a4:d6:13:3c:a4:a7:5f:25:30:10:
cb:09:b2:5a:ec:73:b9:fa:3a:c1:af:e2:8c:0a:7d:
f5:1d:24:16:b0:2a:42:67:60:d8:85:47:ca:d6:64:
88:d8:85:2b:8d:e2:cd:f0:d0:de:6a:4c:0e:35:1a:
81:34:44:1f:9e:91:45:80:c7:6d:e7:c7:35:dc:00:
2e:cd:75:b5:a3:e6:ff:a6:de:fe:69:7a:24:8f:cc:
59:05:7f:ea:d6:c2:93:91:c4:65:18:23:a0:16:72:
5c:b3:07:a6:23:21:f1:89:ea:20:28:8d:73:1c:b3:
d2:49:63:4b:78:f3:ae:ea:3d:19:6e:71:50:f6:7f:
5a:e1:45:1f:49:57:21:80:aa:c5:df:69:3b:ca:47:
c6:23:2b:5f:8f:6f:1f:7c:b3:99:7a:13:c2:9a:f7:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:51:93:A3:E7:A4:41:B2:3C:4C:C4:3B:BA:54:63:09:59:CA:39
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2f:32:c1:a7:64:41:f6:4e:ee:95:5f:33:86:4b:6f:e1:ea:
fc:26:ba:76:4b:44:e8:8c:2c:a4:1f:39:65:1d:4f:a3:e0:b0:
27:5f:0d:11:43:04:e6:82:8a:15:94:f8:ea:2f:e4:eb:bf:cd:
9d:cf:90:ba:fa:9e:8a:ab:55:49:c5:af:c8:fa:c1:f2:66:20:
87:eb:20:c6:5d:20:50:97:ea:c4:8d:55:0f:eb:93:5b:37:09:
66:ee:43:c8:b1:8c:92:ae:df:16:e1:fe:ed:9a:28:13:58:26:
f3:91:88:44:a8:6f:51:2f:62:d9:dc:d1:a2:06:f0:a9:92:62:
ae:ae:19:93:c7:9b:02:2a:de:a4:a0:f2:c3:0a:d4:96:5b:bc:
63:26:3f:dd:66:60:d5:be:ae:6a:92:d2:a2:71:2e:06:91:1d:
fc:a2:7d:1c:1e:4f:82:0e:c7:6c:06:ba:5b:68:dd:1c:38:ab:
0d:10:d9:92:09:16:b4:9b:7a:d8:4e:90:fa:1b:4f:f0:02:5d:
3a:44:0d:45:6a:e3:39:41:10:65:97:96:e9:ba:d1:96:30:c2:
74:b7:2f:6b:89:1a:b4:13:31:9f:37:aa:95:44:27:27:a7:45:
e2:d3:b3:31:b9:93:38:89:20:6c:9b:bf:cb:51:01:6e:e7:9c:
82:eb:4d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:10:39 2025 by rpki-client