Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: eQp6E27ApEWw6Tv2qTCRLzULxxD2uSbpowjfdLuUs5I=
Subject key identifier: 4E:5F:A6:30:C4:49:B2:2E:5A:1B:46:C5:96:01:1E:DE:E1:BB:C8:77
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0196D2876C86B3F01D4FCAE40448F3696EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1138
Signing time: Thu 15 May 2025 06:00:12 +0000
Manifest this update: Thu 15 May 2025 06:00:12 +0000
Manifest next update: Fri 16 May 2025 06:00:12 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: 6suNrazsEMCBB829vFzsRIY1lJsrAtQctHLm4BOJ0NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:87:6c:86:b3:f0:1d:4f:ca:e4:04:48:f3:69:6e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: May 15 06:00:12 2025 GMT
Not After : May 16 06:00:12 2025 GMT
Subject: CN=4e5fa630c449b22e5a1b46c596011edee1bbc877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:e5:f8:45:0f:c9:6f:51:4b:f7:4d:60:57:
40:ed:02:6b:f3:cf:18:f0:19:39:76:83:2c:d0:16:
c0:90:40:9b:ec:5b:67:99:2b:1a:ca:a5:1f:ba:c8:
ce:a6:97:df:79:a6:8b:c4:bf:87:de:76:16:64:b2:
c3:cc:86:3f:4a:c9:6d:8d:98:02:00:82:d0:f1:84:
4f:aa:9f:e6:a8:c8:a8:94:56:57:28:94:1c:bb:46:
6f:9c:f1:3e:25:45:11:35:72:d1:9c:76:08:24:b2:
82:81:3a:ca:f1:33:b4:63:d5:6a:33:ab:fb:05:dd:
0d:62:d2:4a:be:8b:59:df:a6:7d:dd:03:68:6c:8a:
8e:71:67:d1:46:4c:a2:29:3f:af:25:c1:c2:34:a0:
18:9e:44:c5:56:ac:ee:83:e5:5a:1e:3a:ee:90:2a:
dd:31:03:b0:a8:05:ce:0f:d4:c4:3d:34:3e:7e:40:
fc:40:a5:33:34:07:57:13:dd:a9:11:4e:cd:4f:7a:
29:3c:da:f6:55:58:29:37:1b:a8:a7:e4:0a:d4:d4:
78:c4:6c:e0:12:fb:9d:6c:88:da:4d:66:fa:ba:c7:
4c:07:6b:f5:44:9a:ef:55:36:a8:39:d4:91:93:a1:
71:98:2c:72:cf:63:5d:92:f6:93:a7:20:aa:5c:8c:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5F:A6:30:C4:49:B2:2E:5A:1B:46:C5:96:01:1E:DE:E1:BB:C8:77
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:a0:4c:77:86:78:00:69:b7:49:be:da:5f:ff:9d:dd:2f:
3d:b4:2c:7a:fc:cc:88:26:22:82:71:3b:ad:e8:6c:97:f0:34:
d3:31:2e:a8:d1:ef:32:07:bd:d0:ba:71:ab:68:fc:e3:94:39:
f6:21:9a:82:46:f9:c9:f0:f5:55:3f:df:f7:df:6d:33:a3:77:
40:42:95:75:6e:4c:38:38:ba:ab:47:3a:f3:36:21:70:ac:19:
c1:2b:1f:31:5f:a9:b7:4d:7f:fd:0b:2c:a6:e5:dd:5b:e2:36:
d1:68:32:55:35:81:84:c7:8a:13:7e:4f:41:37:e6:e7:d5:07:
73:37:22:cd:ad:a2:79:58:2a:68:7f:11:e6:b7:6a:ac:a5:d3:
47:cf:b1:be:4f:5d:0c:bb:cb:ce:b7:b8:0f:ea:52:24:7e:91:
ff:8f:a3:22:4d:69:f7:d0:0b:a8:24:02:ac:0e:ae:39:98:db:
a7:b5:cf:ad:4f:f2:20:90:90:d6:b6:47:56:28:2d:0a:8d:1e:
0b:49:e0:ab:b0:07:f6:a6:a1:00:c8:4c:2d:c3:63:81:19:17:
ab:a8:4f:0b:2b:6b:34:cc:dd:32:4a:cd:81:5b:a6:bd:79:15:
99:8c:ec:bc:ac:f4:b9:b9:0c:06:76:e0:bb:cb:59:f2:6a:bd:
60:15:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:05:44 2025 by rpki-client