Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: B2fFUvtb7VaXundFdxNBUwGYyf3Or9UyBznIRqN+L+k=
Subject key identifier: BF:78:C9:58:7B:16:94:00:5B:61:D3:2B:9E:52:F7:7C:92:28:5F:C5
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 0195127E8BF9B9DB9EE8E7E089F9CDCD3125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 066A
Signing time: Mon 17 Feb 2025 06:00:38 +0000
Manifest this update: Mon 17 Feb 2025 06:00:38 +0000
Manifest next update: Tue 18 Feb 2025 06:00:38 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: fpi6uVFRoNPtmg7hI2E34IGp6ePs+y1dDH9/jjQToxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8b:f9:b9:db:9e:e8:e7:e0:89:f9:cd:cd:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Feb 17 06:00:38 2025 GMT
Not After : Feb 18 06:00:38 2025 GMT
Subject: CN=bf78c9587b1694005b61d32b9e52f77c92285fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a7:05:45:05:5c:4f:cb:38:8c:55:20:18:d2:
e8:7f:c9:85:6b:76:ae:d0:c8:5a:16:95:94:75:27:
aa:36:c6:39:7e:ee:f9:a5:f4:ff:45:2c:7a:01:fc:
46:af:c9:94:05:49:da:88:a8:2f:8f:b5:53:b2:f9:
5e:92:3c:e9:06:b4:15:92:70:bf:58:35:d1:5c:24:
da:d0:a7:45:30:51:cd:9c:6a:9a:9d:64:40:a2:ce:
5d:d0:a7:04:e6:85:07:47:cc:b6:5f:fd:ce:d3:de:
5e:c8:dd:e8:47:2d:2f:b6:3c:c9:63:8c:1e:fc:c9:
e5:0e:50:d2:0b:91:0a:bd:dc:33:00:51:fe:1e:9d:
1d:02:c6:b8:cf:1e:25:d3:a2:a4:15:27:df:90:0c:
a1:82:e3:d2:b7:1f:5c:9e:e1:ac:86:04:74:ec:c5:
2d:f8:74:27:6f:32:6d:a9:a7:bc:a2:f5:89:a5:8b:
56:cb:9b:8f:d9:47:77:db:fe:43:d1:50:3b:f6:ff:
6e:32:bb:a0:f4:d9:c0:b0:e7:61:35:9a:5d:5a:5c:
f9:df:49:3c:f8:27:d4:ad:99:4e:c0:5d:22:4a:77:
9e:b5:c5:cd:68:83:0d:d3:50:df:09:d3:86:50:89:
ae:bc:d1:cb:e1:f7:57:36:8b:b6:11:f1:84:b8:a6:
c3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:C9:58:7B:16:94:00:5B:61:D3:2B:9E:52:F7:7C:92:28:5F:C5
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:71:3d:e3:54:f5:7b:dc:21:ff:7c:f0:8d:f4:27:51:ce:dd:
95:a2:42:92:be:19:ca:7b:92:e8:a8:ef:38:35:0d:09:af:5b:
62:bc:8d:f6:1c:5a:a7:a4:5d:8a:20:b2:ed:f6:1c:a0:30:b5:
79:54:61:13:71:05:ed:fb:ab:00:f4:7b:39:28:8b:bc:73:ce:
b7:47:c0:86:d7:e8:a1:86:40:86:9e:4b:83:fe:85:54:3b:3d:
bb:e9:07:57:d9:fc:95:97:f7:e6:07:9a:b9:95:a3:36:f8:38:
ad:c5:ac:28:6f:3b:13:17:92:d7:24:7a:b6:58:7f:74:3e:58:
41:bd:2c:ce:03:75:a9:84:c2:68:ba:fd:35:65:d8:3f:f9:7c:
f7:29:bb:72:4e:0c:29:c7:02:f8:3b:96:10:c5:90:d3:ed:32:
14:c8:62:eb:f5:76:f1:c9:77:c7:08:b7:86:af:f6:81:ae:9f:
af:7a:8b:69:c3:b2:af:05:6e:5d:74:12:2a:b5:d1:86:1b:f5:
78:9b:57:85:0b:64:63:a3:86:4c:49:4c:db:ce:22:32:ea:99:
32:b1:c3:c1:e6:80:0a:a9:93:bb:2c:7a:99:c8:5a:9b:60:0d:
52:8a:00:f5:73:e4:6c:5c:51:ee:b6:fb:2e:a3:48:4f:2c:0a:
8b:2c:4e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfov5udue6OfgifnNzTElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx
ZjUzZjUwHhcNMjUwMjE3MDYwMDM4WhcNMjUwMjE4MDYwMDM4WjAzMTEwLwYDVQQD
EyhiZjc4Yzk1ODdiMTY5NDAwNWI2MWQzMmI5ZTUyZjc3YzkyMjg1ZmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhacFRQVcT8s4jFUgGNLof8mFa3au
0MhaFpWUdSeqNsY5fu75pfT/RSx6AfxGr8mUBUnaiKgvj7VTsvlekjzpBrQVknC/
WDXRXCTa0KdFMFHNnGqanWRAos5d0KcE5oUHR8y2X/3O095eyN3oRy0vtjzJY4we
/MnlDlDSC5EKvdwzAFH+Hp0dAsa4zx4l06KkFSffkAyhguPStx9cnuGshgR07MUt
+HQnbzJtqae8ovWJpYtWy5uP2Ud32/5D0VA79v9uMrug9NnAsOdhNZpdWlz530k8
+CfUrZlOwF0iSneetcXNaIMN01DfCdOGUImuvNHL4fdXNou2EfGEuKbDOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL94yVh7FpQAW2HTK55S93ySKF/FMB8GA1UdIwQY
MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt
Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk
LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynE941T1
e9wh/3zwjfQnUc7dlaJCkr4ZynuS6KjvODUNCa9bYryN9hxap6RdiiCy7fYcoDC1
eVRhE3EF7furAPR7OSiLvHPOt0fAhtfooYZAhp5Lg/6FVDs9u+kHV9n8lZf35gea
uZWjNvg4rcWsKG87ExeS1yR6tlh/dD5YQb0szgN1qYTCaLr9NWXYP/l89ym7ck4M
KccC+DuWEMWQ0+0yFMhi6/V28cl3xwi3hq/2ga6fr3qLacOyrwVuXXQSKrXRhhv1
eJtXhQtkY6OGTElM284iMuqZMrHDweaACqmTuyx6mcham2ANUooA9XPkbFxR7rb7
LqNITywKiyxOgw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:29 2025 by rpki-client