Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: BfF5fFn4joGlsjcsdtKKyb0PjQtNnN1xyy3+xjrWPVQ=
Subject key identifier: BC:61:66:97:35:C2:A9:46:6C:46:40:AE:DA:83:7A:11:5E:F1:57:8A
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 0199FBEB8813A956A562853D72F1D5DBC1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 08F5
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: lQ//sVHOCUlnQuppqkUzbjqLaIb4/vL8yjh33M/SrQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:13:a9:56:a5:62:85:3d:72:f1:d5:db:c1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=bc61669735c2a9466c4640aeda837a115ef1578a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:a1:c4:50:8e:dc:95:f6:90:98:84:51:5d:
11:cd:56:62:c7:fd:b9:cd:22:e6:41:68:90:ad:3c:
ab:bf:0c:82:02:57:52:43:5a:50:94:00:3e:b3:72:
02:ec:fa:15:56:53:be:74:c5:40:0c:3c:90:ca:b4:
a2:91:b5:b6:c2:73:13:3a:a5:3f:5d:63:8c:f8:7c:
be:2b:cd:13:99:54:a7:5e:f8:89:22:35:50:09:bf:
af:0c:8c:25:2a:cf:55:eb:21:7b:bd:1a:db:38:f6:
b1:7e:1d:d3:52:60:28:b9:46:fe:24:09:eb:18:6b:
c7:b6:4e:ed:eb:b3:d4:ba:98:90:50:e1:a5:01:0b:
db:d2:44:06:f3:81:b8:ba:70:a9:6f:8f:4a:7b:c6:
f3:e2:8c:87:18:b2:57:a5:7d:0d:35:af:38:8b:74:
2f:d8:93:67:45:7f:7b:88:fb:c1:3b:35:1a:04:e6:
24:73:c7:f1:d3:18:65:dc:6b:9b:9a:79:9f:03:c4:
23:bb:7c:3a:90:0c:37:66:d1:af:84:65:9c:82:55:
dd:bb:3b:8d:96:62:89:77:38:41:94:62:f0:8c:e6:
bb:30:a6:4a:e0:df:4c:a1:36:58:9a:72:77:7e:b4:
30:d3:f0:1b:c4:4e:95:41:3e:2f:25:1c:a4:1c:95:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:66:97:35:C2:A9:46:6C:46:40:AE:DA:83:7A:11:5E:F1:57:8A
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:cb:1f:fa:c1:f0:fc:78:11:9b:8d:30:65:80:47:88:23:
e3:ed:c3:84:99:73:a9:33:cb:17:85:c0:cc:a1:68:e3:21:15:
a5:ef:c8:f7:e8:da:dc:96:e9:60:a8:2f:6e:db:74:f5:51:f2:
f6:ac:09:8c:52:ae:13:eb:01:80:00:ec:49:d9:c2:97:88:be:
f7:db:90:c8:f6:d7:ff:1b:7d:a8:1d:d8:28:22:12:88:44:ae:
6f:d7:cb:5e:fb:d2:da:30:df:d2:49:2a:24:9e:3c:0f:72:ae:
1f:75:7c:00:42:37:1b:55:bb:cd:71:bb:ec:af:19:6d:c4:8a:
be:e8:9a:7c:03:ab:e6:01:75:78:f8:df:df:fc:9a:32:0e:5f:
52:49:90:9a:d3:ce:bb:c8:c2:82:60:3b:01:57:98:e1:88:89:
6c:d1:49:92:52:98:1e:96:01:8b:0e:0a:51:67:3a:9c:ce:8f:
ee:66:87:6d:8a:ec:bf:d1:c7:d4:ca:17:00:e7:e1:ba:6e:3c:
e6:cb:9e:a4:80:3d:81:08:87:91:04:52:ed:6f:e7:44:ac:75:
db:51:76:c0:49:60:65:48:cb:24:f3:db:d5:47:5e:a5:11:60:
90:fd:be:84:2d:dc:da:53:a3:cc:4e:72:46:6a:6c:15:1c:9e:
8c:f8:17:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764gTqValYoU9cvHV28GzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjM4ZjQ4NTY4ODMzYTVmNzE1N2VlZjU5Nzg3ODMzYTAx
ZjUzZjUwHhcNMjUxMDE5MTAwMjIwWhcNMjUxMDIwMTAwMjIwWjAzMTEwLwYDVQQD
EyhiYzYxNjY5NzM1YzJhOTQ2NmM0NjQwYWVkYTgzN2ExMTVlZjE1NzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEShxFCO3JX2kJiEUV0RzVZix/25
zSLmQWiQrTyrvwyCAldSQ1pQlAA+s3IC7PoVVlO+dMVADDyQyrSikbW2wnMTOqU/
XWOM+Hy+K80TmVSnXviJIjVQCb+vDIwlKs9V6yF7vRrbOPaxfh3TUmAouUb+JAnr
GGvHtk7t67PUupiQUOGlAQvb0kQG84G4unCpb49Ke8bz4oyHGLJXpX0NNa84i3Qv
2JNnRX97iPvBOzUaBOYkc8fx0xhl3GubmnmfA8Qju3w6kAw3ZtGvhGWcglXduzuN
lmKJdzhBlGLwjOa7MKZK4N9MoTZYmnJ3frQw0/AbxE6VQT4vJRykHJV3iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxhZpc1wqlGbEZArtqDehFe8VeKMB8GA1UdIwQY
MBaAFM7zj0hWiDOl9xV+71l4eDOgH1P1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUt
Zjk1YzYwOTdhNTBkLzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMTBhYmUtNDE0OC00NTFiLTk0ZjUtZjk1YzYwOTdhNTBk
LzEvenZPUFNGYUlNNlgzRlg3dldYaDRNNkFmVV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr/LH/rB
8Px4EZuNMGWAR4gj4+3DhJlzqTPLF4XAzKFo4yEVpe/I9+ja3JbpYKgvbtt09VHy
9qwJjFKuE+sBgADsSdnCl4i+99uQyPbX/xt9qB3YKCISiESub9fLXvvS2jDf0kkq
JJ48D3KuH3V8AEI3G1W7zXG77K8ZbcSKvuiafAOr5gF1ePjf3/yaMg5fUkmQmtPO
u8jCgmA7AVeY4YiJbNFJklKYHpYBiw4KUWc6nM6P7maHbYrsv9HH1MoXAOfhum48
5suepIA9gQiHkQRS7W/nRKx121F2wElgZUjLJPPb1UdepRFgkP2+hC3c2lOjzE5y
RmpsFRyejPgXrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:29 2025 by rpki-client