Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: DAs/as8m5OXVdOsRv0+Erj6G5Po80xRjKNL+88QPAOc=
Subject key identifier: C8:34:BC:05:C2:CC:6D:7D:38:B7:4E:68:28:C5:03:F5:BE:05:17:80
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0199FBEBDDB0168091F1E25F3FC76C31AC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 12DB
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: Y+IWkZ/pIVMOVO+fi1FUvK2eueqFGjlpLiVy/7Ym9RU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dd:b0:16:80:91:f1:e2:5f:3f:c7:6c:31:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=c834bc05c2cc6d7d38b74e6828c503f5be051780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:65:e9:b4:a6:da:d7:bf:ab:70:0e:21:f5:3a:
9f:32:ff:7d:9d:fe:ef:a2:b9:21:1e:f3:bd:b8:57:
90:ee:d8:05:b9:b5:df:a0:2e:d4:7e:2a:f2:80:58:
7c:a0:19:bf:5c:90:66:1c:90:e9:40:32:e3:41:7b:
06:a4:13:22:90:6b:d7:a7:6b:5c:81:dd:a7:9a:b7:
fc:d2:43:09:13:08:79:d2:bb:9a:1d:0b:4d:b9:d7:
6b:74:fe:3c:02:5a:07:39:53:69:70:f9:b6:1e:5b:
76:0a:76:8e:7b:e8:98:fa:5e:67:45:91:11:46:92:
5d:b8:cc:36:7a:1d:71:86:6b:48:79:b1:97:52:72:
61:1c:c2:ef:30:50:c4:57:44:9b:03:fc:59:c0:9a:
e0:f0:d6:cb:e0:a3:2c:60:68:b5:aa:cd:3a:48:d8:
f7:c1:85:24:91:e4:99:e8:8d:a7:6d:77:c0:14:84:
41:08:84:74:52:7d:cf:6c:24:76:13:d4:ae:e0:d6:
2f:ef:6d:32:c7:e5:05:8c:a9:13:73:c7:86:ee:4d:
8f:8f:99:44:18:ca:ac:3e:af:bb:ce:25:62:07:ce:
11:f1:e0:ad:78:12:63:ec:b3:72:3d:fe:fb:8b:79:
1d:3e:ad:ff:74:d8:0d:a0:8a:ee:40:79:de:6d:ba:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:34:BC:05:C2:CC:6D:7D:38:B7:4E:68:28:C5:03:F5:BE:05:17:80
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:14:2b:da:c8:2f:36:c6:57:83:e2:55:5a:22:20:1a:7f:
8e:8b:26:67:05:3f:4a:62:7f:9a:16:ef:16:57:77:40:75:be:
63:0a:6f:51:f1:2b:af:24:e7:44:43:1f:0f:ce:4c:e4:8e:5a:
c8:c9:32:e5:dd:7e:df:0b:8f:db:6c:b9:b9:5f:20:fe:37:e3:
a8:ce:e4:5a:30:74:30:bf:9b:4f:b0:a6:15:56:e4:e2:3c:dd:
63:52:e5:13:e0:95:7d:c8:ce:10:7b:b9:76:f3:2a:e6:42:a3:
f5:4f:bf:08:50:f6:84:55:5a:70:25:82:0a:69:ce:03:4a:01:
b0:6d:dd:ec:f5:1c:ee:d4:0f:d8:42:44:3c:22:e4:43:8f:f0:
3d:bd:38:32:c6:2c:e0:c4:df:a3:45:5f:03:37:94:e8:f3:2c:
5c:bc:7a:b7:2d:5c:b3:32:76:4d:14:ab:f0:13:d8:59:43:29:
ee:f5:29:6b:85:ee:17:4e:5d:06:7b:fd:3f:4f:85:6a:b3:66:
24:9a:3b:88:40:8d:ca:2b:32:e4:c1:84:3d:9e:52:29:bf:2e:
c6:aa:e4:ef:b8:ab:a9:d6:fb:86:73:14:22:6c:b2:06:8a:20:
f7:da:ca:d6:0e:0f:36:d7:24:60:d6:21:d4:f3:f9:52:88:7b:
2f:cf:c0:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7692wFoCR8eJfP8dsMaxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjUxMDE5MTAwMjQyWhcNMjUxMDIwMTAwMjQyWjAzMTEwLwYDVQQD
EyhjODM0YmMwNWMyY2M2ZDdkMzhiNzRlNjgyOGM1MDNmNWJlMDUxNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GXptKba17+rcA4h9TqfMv99nf7v
orkhHvO9uFeQ7tgFubXfoC7UfirygFh8oBm/XJBmHJDpQDLjQXsGpBMikGvXp2tc
gd2nmrf80kMJEwh50ruaHQtNuddrdP48AloHOVNpcPm2Hlt2CnaOe+iY+l5nRZER
RpJduMw2eh1xhmtIebGXUnJhHMLvMFDEV0SbA/xZwJrg8NbL4KMsYGi1qs06SNj3
wYUkkeSZ6I2nbXfAFIRBCIR0Un3PbCR2E9Su4NYv720yx+UFjKkTc8eG7k2Pj5lE
GMqsPq+7ziViB84R8eCteBJj7LNyPf77i3kdPq3/dNgNoIruQHnebbpowQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMg0vAXCzG19OLdOaCjFA/W+BReAMB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDAUK9rI
LzbGV4PiVVoiIBp/josmZwU/SmJ/mhbvFld3QHW+YwpvUfErryTnREMfD85M5I5a
yMky5d1+3wuP22y5uV8g/jfjqM7kWjB0ML+bT7CmFVbk4jzdY1LlE+CVfcjOEHu5
dvMq5kKj9U+/CFD2hFVacCWCCmnOA0oBsG3d7PUc7tQP2EJEPCLkQ4/wPb04MsYs
4MTfo0VfAzeU6PMsXLx6ty1cszJ2TRSr8BPYWUMp7vUpa4XuF05dBnv9P0+FarNm
JJo7iECNyisy5MGEPZ5SKb8uxqrk77irqdb7hnMUImyyBoog99rK1g4PNtckYNYh
1PP5Uoh7L8/AJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:47 2025 by rpki-client