Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: dbzFp0POWqWLGId0RtRt1qN+nXVKeHlUZfK/7IM2TAE=
Subject key identifier: 76:96:5F:6B:40:E0:E2:C2:B1:8D:B9:CD:1A:3F:EA:87:8B:F7:16:DF
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019653121F5A4A81A0B297E95E3E08400361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 0710
Signing time: Sun 20 Apr 2025 12:00:18 +0000
Manifest this update: Sun 20 Apr 2025 12:00:18 +0000
Manifest next update: Mon 21 Apr 2025 12:00:18 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: db4v/y8AwIAzWJhGjZZIiq3wNWzPpxSKhbvJV89Kvhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:1f:5a:4a:81:a0:b2:97:e9:5e:3e:08:40:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Apr 20 12:00:18 2025 GMT
Not After : Apr 21 12:00:18 2025 GMT
Subject: CN=76965f6b40e0e2c2b18db9cd1a3fea878bf716df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:f9:1d:2f:39:0f:a5:8a:2e:04:a4:39:59:
f4:5c:15:63:9b:5a:79:04:46:d8:3e:72:a8:8c:39:
20:aa:9b:6e:22:c9:4b:27:6b:23:14:16:65:84:f9:
90:11:64:d0:2a:1e:70:b8:ba:c8:95:ae:cb:10:7c:
9d:09:8a:aa:c6:e3:35:fd:80:f0:3a:af:19:4a:01:
10:36:b8:7f:da:a3:46:e3:6b:f7:79:e8:c3:6c:dd:
a3:60:a1:f7:35:4c:54:cd:f4:f8:20:d0:8e:08:e1:
60:b1:ed:85:df:89:a6:a7:69:a1:9b:49:d4:da:6d:
d0:77:dd:f5:db:10:63:a9:3a:bc:7e:eb:30:22:66:
c3:32:29:e4:88:29:cb:a4:6a:eb:93:1a:3d:8f:ef:
22:55:00:28:9b:25:cb:dc:ad:dc:53:47:bf:13:3b:
b3:e8:2f:b1:02:b3:0f:22:ac:a4:8e:6c:e4:85:c0:
31:4f:37:5c:38:f8:c0:01:c5:2e:da:00:5e:7e:f0:
eb:68:21:9a:fb:81:27:a0:34:70:a0:39:bb:5f:6f:
ac:44:6c:18:84:65:f0:8a:95:28:dd:44:39:98:7f:
e8:ba:b9:f2:e0:fc:7f:b2:81:fc:87:b2:c8:66:ba:
65:74:3e:5d:e6:0a:98:7e:14:19:d2:16:20:c3:ec:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:5F:6B:40:E0:E2:C2:B1:8D:B9:CD:1A:3F:EA:87:8B:F7:16:DF
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:32:40:5c:d6:12:64:46:35:59:41:c9:1f:76:1d:31:dc:dc:
c7:59:c4:ef:a4:62:1d:42:c7:50:6b:5a:d6:bd:21:12:fb:e1:
df:e2:1b:6d:8d:40:08:0f:57:86:0f:c8:61:19:36:3c:b9:e3:
51:d4:11:3e:b5:ea:91:f3:bf:54:9e:8a:48:31:f3:f0:0b:98:
a6:eb:ef:6b:fb:f6:10:28:9a:f1:c1:ef:31:44:f9:81:ed:49:
8f:63:ca:a9:89:51:89:64:d3:09:14:a9:6b:4b:c6:44:ee:1f:
b5:cd:06:fe:04:8d:98:ea:bd:70:24:20:98:41:61:18:3e:c7:
6d:38:59:e4:a5:51:91:54:26:38:7f:cb:88:a1:c9:bd:b6:4a:
87:94:24:8a:dd:a6:de:7e:00:77:38:e1:66:2d:2c:d7:03:a0:
07:46:aa:82:11:f7:54:c6:38:bd:20:ba:e5:82:23:9d:d9:47:
e7:b6:e5:b6:d5:2e:41:b2:a7:e5:b6:a8:6a:34:c3:4f:73:2c:
9d:d5:4c:d7:78:49:56:75:2a:85:bc:01:2b:32:1f:c0:b0:a2:
fb:eb:20:36:86:72:8c:e8:70:06:68:8e:44:4f:57:1b:1b:80:
9f:88:25:e6:7f:31:a1:1a:ef:67:f3:fc:e8:b6:46:cc:3e:44:
ad:b4:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:49:37 2025 by rpki-client