Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: MFawWt/6d3tybVeaJdlZmE9r8D3zNuIoCBVevGaX6L0=
Subject key identifier: E8:31:80:0C:4F:EF:12:78:C9:86:25:73:DC:9E:66:FA:73:D8:E9:39
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 0198D4726D1AF12C54D44C688D0CFB5F7A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 085C
Signing time: Sat 23 Aug 2025 01:02:05 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Sun 24 Aug 2025 01:02:05 +0000
Files and hashes: 1: 30I5HnA19uvAFRwz6jWfyDavx24.roa (hash: vJ50DB07ovpFnN7XIrmEVraJFX3BgV6jKWZ19zdFhPQ=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: jSG3zSq9TUvodmMD4XxNc0AYroTpgkFy3vJ9GNQ8FTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6d:1a:f1:2c:54:d4:4c:68:8d:0c:fb:5f:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 24 01:02:05 2025 GMT
Subject: CN=e831800c4fef1278c9862573dc9e66fa73d8e939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:96:23:bd:ae:97:c1:8e:6f:5e:66:92:23:
2d:c0:6f:36:c4:36:bc:93:08:0f:4a:72:c6:2e:96:
0a:9d:1f:83:39:df:31:d5:a4:c1:f9:ba:fe:ad:01:
e8:42:29:11:da:7f:9e:d5:c3:9f:36:f3:8a:35:b1:
2e:e9:eb:72:c4:0c:80:45:b1:a6:c6:a4:88:0a:a8:
09:28:fe:ac:28:46:9c:aa:93:a9:57:6f:87:1c:4a:
e1:db:f8:57:d7:8e:52:49:97:e3:5b:bc:b1:12:fa:
d2:91:65:1b:2e:60:1d:cd:7e:70:7a:db:8e:95:9d:
a3:20:dd:b3:88:ac:d5:c4:b4:36:24:9d:71:78:09:
75:a3:9f:ca:33:bf:86:51:cf:f8:b0:a0:ca:a3:1b:
7d:45:63:44:72:ff:b9:57:aa:e2:30:37:f8:f6:8c:
b7:45:2e:d4:c6:cf:e1:8f:24:af:de:5b:ca:9b:ef:
7f:d1:78:f3:06:b6:a9:7b:96:a2:ed:20:36:9d:15:
b3:bb:bd:96:ff:7a:e3:6b:67:9c:52:c4:d8:26:5d:
e4:d7:f1:3a:35:f2:76:29:9a:09:64:4c:6a:ce:95:
fd:ac:6b:1f:f1:ba:9b:4a:42:ad:a6:7b:ae:5b:ef:
3d:c8:06:16:83:ea:db:e1:40:ea:44:ba:18:59:4b:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:80:0C:4F:EF:12:78:C9:86:25:73:DC:9E:66:FA:73:D8:E9:39
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a8:ff:af:82:38:87:22:78:c3:37:4a:6d:32:40:80:da:31:
c1:12:31:63:85:19:22:26:59:65:83:ca:54:6c:67:7f:33:32:
cf:4d:f2:be:2c:35:da:a1:a8:f1:25:98:4e:97:e2:e2:4b:03:
d3:6d:15:4a:ec:e1:8b:af:49:a0:18:22:44:26:e7:29:73:31:
10:66:6d:df:5f:0f:21:ee:50:f4:7c:63:51:ac:87:b6:6d:74:
98:7c:11:7c:bc:9e:f6:1f:13:4c:d8:eb:be:48:94:6e:ca:99:
1b:c8:8c:10:59:56:f3:f9:b9:3b:54:d7:db:0e:42:e0:30:15:
d2:29:68:31:ba:b7:a1:01:39:88:78:ce:07:d4:01:9e:f0:1c:
2a:2d:26:ec:53:ec:01:b3:5b:31:18:49:8c:59:f6:d6:3e:d2:
43:3f:88:2b:c0:6f:c3:84:5a:cd:ef:21:05:fc:e0:3f:8b:7b:
66:3a:fc:8f:2b:47:71:7b:9b:3e:0d:5f:e4:ba:74:2f:b9:e1:
23:38:ec:31:5a:21:a2:59:25:b2:82:4c:5f:cc:88:4a:3e:f3:
95:18:68:ba:92:35:61:7a:d7:41:48:90:f1:8c:ab:8f:a1:1e:
6d:da:b4:5a:17:54:45:95:25:b9:ca:71:8e:de:e3:86:3c:c5:
0d:3d:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client