Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: kle6gO0LXdFuY6QeFK9ZyDSv1LpncqSPbLbwn6fm0n4=
Subject key identifier: 7E:28:DB:79:1C:79:29:E8:CD:68:CD:DD:C1:FF:CC:67:2B:25:29:9C
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019748550FE4463A950A950EC3E198DE9E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 078F
Signing time: Sat 07 Jun 2025 03:00:23 +0000
Manifest this update: Sat 07 Jun 2025 03:00:23 +0000
Manifest next update: Sun 08 Jun 2025 03:00:23 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: Qi4iASVzDeh+G7Pigz7ykHhNzqob0tiogPa7e1TfrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:0f:e4:46:3a:95:0a:95:0e:c3:e1:98:de:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Jun 7 03:00:23 2025 GMT
Not After : Jun 8 03:00:23 2025 GMT
Subject: CN=7e28db791c7929e8cd68cdddc1ffcc672b25299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:aa:33:1f:65:3e:a0:d2:a7:12:d0:92:e3:
ee:a0:a2:89:a6:37:12:d4:01:b1:7f:f6:71:e1:d2:
d3:5a:32:7a:6d:72:58:57:b0:f2:f1:b6:fd:69:b3:
58:78:bb:b4:09:e7:cb:e6:d5:2a:9d:24:62:b0:f3:
06:5f:75:ba:3e:f5:18:fd:8d:09:8a:35:16:65:e2:
23:7b:4a:76:4f:27:ca:e3:60:b8:b6:4f:5c:66:88:
da:f7:26:9f:3b:b3:af:2b:8a:98:15:0e:12:8b:c9:
cb:e6:d2:fd:00:1f:65:98:96:f7:ec:79:03:a9:6e:
a2:52:bf:13:28:b5:64:45:ca:e0:e7:ad:75:0b:ec:
56:2d:31:ae:90:27:aa:c8:81:d1:80:e6:56:aa:16:
45:90:5a:7c:6e:d3:e6:0b:1e:08:fd:fe:33:7a:d5:
27:1f:68:5c:3f:b4:4f:96:cc:13:1c:1c:bb:50:07:
dd:63:b6:f7:5d:8a:c0:14:6a:c3:12:e5:ff:4d:1d:
15:2f:18:77:a6:67:38:6f:14:a2:77:99:24:e8:8b:
52:8a:13:ad:7c:86:68:99:e0:16:77:5d:3c:75:c1:
dc:b4:23:4a:81:bd:50:76:83:fe:5a:78:8f:29:7f:
13:6e:85:75:90:7d:17:9e:de:63:0c:5e:e7:dd:0a:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:DB:79:1C:79:29:E8:CD:68:CD:DD:C1:FF:CC:67:2B:25:29:9C
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:19:ee:66:4b:b9:38:b2:0f:77:6d:46:42:8b:96:a0:69:
52:ef:b2:c6:20:40:08:5a:a0:7a:15:7b:86:79:d4:71:23:d0:
18:ed:7c:52:fc:cf:6a:b2:09:8e:a5:e8:cb:4b:d9:cd:0d:1a:
a9:27:48:3e:59:c1:93:77:90:f7:a2:74:4f:77:cb:4f:1b:d4:
a8:22:55:93:26:54:4c:a8:20:d4:d7:02:26:ac:d6:4d:9f:86:
32:bd:0d:d8:bf:cc:60:d3:64:ce:96:81:a9:85:43:dc:33:1d:
8f:c0:91:44:7e:f5:34:60:6b:e6:ee:29:06:02:2c:6f:42:e1:
e1:45:45:ee:13:ba:0c:24:e3:e7:8d:32:84:32:5e:b4:19:fc:
14:96:ed:f6:59:a1:9f:1a:ff:ed:1d:dc:20:63:1d:a3:ca:ca:
62:87:99:21:9f:47:b8:59:c2:e2:6e:96:83:e3:49:b3:17:40:
6b:17:2c:7c:95:17:a6:2b:a9:fd:c1:1a:00:19:58:2b:45:c6:
d2:c3:45:ef:af:c3:fb:89:ea:ac:46:21:2f:37:29:3b:6a:32:
60:5c:b9:c8:95:ae:37:d7:aa:78:32:9d:b4:d7:ec:e9:6e:c2:
79:5e:d4:c4:fb:4f:20:2a:19:87:80:d4:42:f0:6d:57:57:a6:
ae:7b:68:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVQ/kRjqVCpUOw+GY3p4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx
ZjUzZjUwHhcNMjUwNjA3MDMwMDIzWhcNMjUwNjA4MDMwMDIzWjAzMTEwLwYDVQQD
Eyg3ZTI4ZGI3OTFjNzkyOWU4Y2Q2OGNkZGRjMWZmY2M2NzJiMjUyOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjiqMx9lPqDSpxLQkuPuoKKJpjcS
1AGxf/Zx4dLTWjJ6bXJYV7Dy8bb9abNYeLu0CefL5tUqnSRisPMGX3W6PvUY/Y0J
ijUWZeIje0p2TyfK42C4tk9cZoja9yafO7OvK4qYFQ4Si8nL5tL9AB9lmJb37HkD
qW6iUr8TKLVkRcrg5611C+xWLTGukCeqyIHRgOZWqhZFkFp8btPmCx4I/f4zetUn
H2hcP7RPlswTHBy7UAfdY7b3XYrAFGrDEuX/TR0VLxh3pmc4bxSid5kk6ItSihOt
fIZomeAWd108dcHctCNKgb1QdoP+WniPKX8TboV1kH0Xnt5jDF7n3QppeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4o23kceSnozWjN3cH/zGcrJSmcMB8GA1UdIwQY
MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt
Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk
LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW4Z7mZL
uTiyD3dtRkKLlqBpUu+yxiBACFqgehV7hnnUcSPQGO18UvzParIJjqXoy0vZzQ0a
qSdIPlnBk3eQ96J0T3fLTxvUqCJVkyZUTKgg1NcCJqzWTZ+GMr0N2L/MYNNkzpaB
qYVD3DMdj8CRRH71NGBr5u4pBgIsb0Lh4UVF7hO6DCTj540yhDJetBn8FJbt9lmh
nxr/7R3cIGMdo8rKYoeZIZ9HuFnC4m6Wg+NJsxdAaxcsfJUXpiup/cEaABlYK0XG
0sNF76/D+4nqrEYhLzcpO2oyYFy5yJWuN9eqeDKdtNfs6W7CeV7UxPtPICoZh4DU
QvBtV1emrntotg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:46 2025 by rpki-client