Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: ooh3ql6lSA1qXckq94vqgHfmrnqxIgG1rCn5iyVBY/U=
Subject key identifier: B2:1C:AD:72:1D:CC:DC:46:97:4A:FC:07:75:72:A2:B0:74:0E:62:67
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0198D47263047AAFF2C066F9CE8AF6A25470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1242
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: PxDmp3ifqhRn7NHC+cOJUtkBwobvhXQQM4Bbf0ENpQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:63:04:7a:af:f2:c0:66:f9:ce:8a:f6:a2:54:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=b21cad721dccdc46974afc077572a2b0740e6267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:7b:69:6e:7b:0f:24:31:91:c3:60:25:92:
d5:1c:42:01:b0:d1:fd:3c:d0:6c:fd:c0:c3:7e:92:
97:17:a7:02:18:95:51:3c:2d:99:b8:fd:0b:00:fa:
c1:08:59:bc:c2:53:29:e3:3b:9d:b3:c5:85:30:5c:
f3:53:19:bb:8d:66:28:fd:cf:72:c7:46:24:a9:80:
fb:97:96:3c:65:fa:36:00:0f:35:e1:67:fb:3f:69:
47:f9:ed:f7:c8:05:07:a4:42:be:37:67:4c:24:a0:
dd:04:8b:35:c2:ca:02:2f:67:cc:12:a9:1f:a6:f8:
d6:14:50:81:ec:11:34:6d:91:49:f5:70:8c:ea:95:
36:5d:fc:60:8f:c1:9b:cc:27:28:a5:24:ab:48:58:
2f:7e:67:32:c8:4c:ee:66:6c:6d:3e:07:7e:f1:ae:
fd:a8:f2:b7:3e:1d:73:ef:bd:b1:0c:2a:0f:6f:66:
39:26:dd:32:3f:64:eb:6e:c0:32:01:e9:42:29:dc:
b8:11:2d:1d:f7:16:c3:da:94:93:7e:2d:3f:ea:fa:
7a:cb:7b:be:de:73:58:b2:5b:41:02:54:14:d9:95:
04:20:71:fa:5f:9d:57:3b:f1:c8:19:06:94:37:48:
40:4b:55:e8:ad:e9:8b:19:14:c6:0b:70:1c:78:89:
2b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:AD:72:1D:CC:DC:46:97:4A:FC:07:75:72:A2:B0:74:0E:62:67
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8b:78:99:54:29:2c:ae:94:fa:47:64:2c:c1:bb:06:95:ce:
26:6e:0c:04:22:a8:55:cc:21:1c:3a:94:1d:fe:a8:b2:f5:6c:
77:43:4a:52:1d:8c:90:6b:78:1a:1b:78:51:6f:c5:f1:65:88:
53:0c:f5:cf:f8:a0:52:06:3e:be:e5:c5:ae:cd:76:1d:59:e6:
3b:93:4d:42:2a:53:ea:18:d0:0c:8c:17:63:dc:b3:14:d4:e4:
8b:a1:4d:01:d9:a9:9c:4b:61:38:ce:85:9c:f7:d9:b8:2b:ed:
49:53:0d:d4:3b:aa:20:49:f3:af:cc:4c:d7:ab:fb:0a:ec:26:
de:dc:d6:7f:24:c6:2a:bb:be:82:82:c6:05:fc:6b:12:e1:a2:
62:ff:7c:b7:3b:a3:6c:c1:46:72:38:b2:45:18:93:72:b1:64:
cc:df:a2:1d:68:48:6f:82:81:64:8f:c7:a3:69:61:3b:4e:23:
d9:64:1d:3e:1f:81:fc:60:36:76:1d:05:af:8c:e7:1a:37:ab:
d1:aa:cf:ec:5f:cc:cd:c0:c4:07:2f:ce:1b:55:38:62:66:fb:
68:7c:78:f4:52:be:8f:4c:70:c9:3a:cc:27:89:ce:4e:0b:1a:
93:f2:d8:26:2d:2e:b4:13:36:40:5c:74:af:fa:f8:8c:41:64:
a7:64:48:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcmMEeq/ywGb5zor2olRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjUwODIzMDEwMjAyWhcNMjUwODI0MDEwMjAyWjAzMTEwLwYDVQQD
EyhiMjFjYWQ3MjFkY2NkYzQ2OTc0YWZjMDc3NTcyYTJiMDc0MGU2MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWJ7aW57DyQxkcNgJZLVHEIBsNH9
PNBs/cDDfpKXF6cCGJVRPC2ZuP0LAPrBCFm8wlMp4zuds8WFMFzzUxm7jWYo/c9y
x0YkqYD7l5Y8Zfo2AA814Wf7P2lH+e33yAUHpEK+N2dMJKDdBIs1wsoCL2fMEqkf
pvjWFFCB7BE0bZFJ9XCM6pU2Xfxgj8GbzCcopSSrSFgvfmcyyEzuZmxtPgd+8a79
qPK3Ph1z772xDCoPb2Y5Jt0yP2TrbsAyAelCKdy4ES0d9xbD2pSTfi0/6vp6y3u+
3nNYsltBAlQU2ZUEIHH6X51XO/HIGQaUN0hAS1XoremLGRTGC3AceIkrqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIcrXIdzNxGl0r8B3VyorB0DmJnMB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4t4mVQp
LK6U+kdkLMG7BpXOJm4MBCKoVcwhHDqUHf6osvVsd0NKUh2MkGt4Ght4UW/F8WWI
Uwz1z/igUgY+vuXFrs12HVnmO5NNQipT6hjQDIwXY9yzFNTki6FNAdmpnEthOM6F
nPfZuCvtSVMN1DuqIEnzr8xM16v7Cuwm3tzWfyTGKru+goLGBfxrEuGiYv98tzuj
bMFGcjiyRRiTcrFkzN+iHWhIb4KBZI/Ho2lhO04j2WQdPh+B/GA2dh0Fr4znGjer
0arP7F/MzcDEBy/OG1U4Ymb7aHx49FK+j0xwyTrMJ4nOTgsak/LYJi0utBM2QFx0
r/r4jEFkp2RIzg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:52 2025 by rpki-client