Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: Blkl//osHyoXxfSAZCB3MzxQz6YszZbuzZDKOMkFsW8=
Subject key identifier: B2:86:D3:7D:66:89:DE:3A:D6:8E:28:C3:A8:51:42:54:08:3E:B6:55
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 0199350233EDBEAD648929900C652F55580F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 088E
Signing time: Wed 10 Sep 2025 19:02:40 +0000
Manifest this update: Wed 10 Sep 2025 19:02:40 +0000
Manifest next update: Thu 11 Sep 2025 19:02:40 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: MkkI/Hmu7z2xtjOruSqlCTLztksezoRvYD6C7u2aiW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:33:ed:be:ad:64:89:29:90:0c:65:2f:55:58:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Sep 10 19:02:40 2025 GMT
Not After : Sep 11 19:02:40 2025 GMT
Subject: CN=b286d37d6689de3ad68e28c3a8514254083eb655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:bb:68:d2:cd:bf:ff:26:9d:70:52:98:c4:
81:de:b1:4b:52:77:1d:17:ce:b8:15:d4:05:d3:53:
01:06:55:8b:aa:c3:a6:1e:89:4f:29:86:c7:1d:6e:
c4:f8:36:28:04:f9:23:3d:72:22:fe:70:a7:d3:d4:
96:46:1c:f9:f6:b6:73:55:fc:67:fa:47:66:c9:f8:
46:fd:37:df:b9:12:8f:f7:34:c2:23:40:78:43:66:
b5:7d:7a:51:c4:97:5f:65:4c:3c:5d:71:08:1c:bb:
10:4e:a3:6f:a6:d7:2d:45:d4:c5:3c:48:1d:24:80:
8b:eb:ab:a0:af:e0:c0:67:b1:f2:2d:01:47:09:ab:
ee:b1:5f:fe:20:a4:44:a7:c0:c2:a5:59:21:d7:2e:
88:6a:82:9b:4a:8a:22:0e:b8:d3:15:a0:71:33:83:
47:dd:6c:f2:f4:8a:f5:3a:4a:0d:2b:72:9a:a9:73:
bc:bc:22:eb:e5:a2:15:71:ad:be:88:fb:ee:1d:d1:
05:01:3e:18:d5:2d:be:4b:28:b1:f1:f2:ab:08:57:
a9:ff:75:74:96:61:c5:e1:65:1d:5e:9e:8f:63:da:
e0:22:d1:ae:d6:f5:08:39:d3:4e:79:b1:21:af:62:
5f:93:b5:53:3e:a8:ec:d3:c3:dd:ed:66:87:70:ca:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:D3:7D:66:89:DE:3A:D6:8E:28:C3:A8:51:42:54:08:3E:B6:55
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7e:72:7d:70:59:4c:c5:93:05:65:40:61:60:54:88:ca:fd:
7d:1f:d9:2e:34:f2:d9:29:b0:fd:5d:dc:0a:59:c2:a9:c5:d9:
4a:32:e6:f4:0f:ab:3e:d0:c7:9f:f0:d0:8b:6b:b8:fa:23:f9:
b0:79:f8:5c:e6:3b:36:f9:6f:b2:b3:f1:cb:d1:07:42:04:c5:
0c:63:70:3c:c2:28:70:bb:00:e4:9c:e0:46:3f:70:ba:fa:ae:
3e:e9:84:64:3b:95:c1:de:bc:4a:2a:cd:3c:e3:3f:a9:42:3e:
a2:43:43:b1:ae:06:00:ef:94:78:24:12:cc:8e:8e:3b:3b:86:
ae:10:21:90:25:3d:b8:7a:d3:f6:f3:03:ee:37:79:0d:b3:8d:
ab:27:05:97:7f:37:be:88:bf:f6:63:c4:c9:d6:bf:49:01:b4:
af:4e:0d:52:fd:46:43:7c:8b:81:ff:12:bd:25:3c:a2:33:c6:
13:dc:83:3b:e8:ca:f0:2b:67:b6:6c:07:b9:88:34:be:7c:6e:
3a:8a:80:86:a1:f0:c9:81:fb:5d:b9:f4:03:0e:47:3a:cf:2d:
d8:65:ce:a5:34:cc:40:05:0a:5e:4c:fe:4f:64:cf:6d:37:e8:
85:cb:be:9a:b7:37:47:1c:3b:0b:fd:41:e0:26:51:ac:35:52:
4b:5b:d1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:46:39 2025 by rpki-client