Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: IDsckXOI1q4tWNME1yAPohisQjXBgPE46ES2FrQlfIM=
Subject key identifier: 11:62:F9:5E:E4:E1:8A:93:FE:FC:FE:4F:96:D6:9A:98:CB:85:DF:37
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0197500EB94AC499922FAE271E07C4FB47FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1179
Signing time: Sun 08 Jun 2025 15:00:31 +0000
Manifest this update: Sun 08 Jun 2025 15:00:31 +0000
Manifest next update: Mon 09 Jun 2025 15:00:31 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: 6pKbeRGH5BPFjI5ArqCpJfEOGSeV3X2LZc9HxOEYWd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:b9:4a:c4:99:92:2f:ae:27:1e:07:c4:fb:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jun 8 15:00:31 2025 GMT
Not After : Jun 9 15:00:31 2025 GMT
Subject: CN=1162f95ee4e18a93fefcfe4f96d69a98cb85df37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:1b:59:bb:bb:f4:77:a4:b0:53:9a:b0:a1:
4b:67:0d:b9:24:d5:17:76:c3:78:47:71:8e:c0:b1:
a9:d4:01:e1:48:9e:e1:4c:55:8f:3a:b7:b2:ba:d7:
56:87:ed:18:d0:1f:38:f3:02:18:40:76:27:2e:82:
9d:57:09:f2:e0:64:91:8f:6d:5e:a3:f1:e4:9c:fd:
2c:ef:9a:72:22:3d:54:37:91:6c:f7:0f:16:ce:4c:
01:dd:f0:57:f9:6b:46:b7:3c:90:50:4d:1c:da:26:
22:61:2b:35:18:01:11:16:fd:b9:40:d0:f7:b6:df:
20:d3:cc:7a:7d:cd:d5:46:3d:67:99:39:ed:b3:11:
fa:88:d2:b4:89:cb:4e:b9:15:76:df:86:77:5b:a0:
c3:b6:f6:29:83:da:4b:e0:bf:05:c2:96:16:75:a8:
6c:d3:c2:83:4c:c8:15:91:eb:ac:2f:e8:24:7a:21:
86:78:03:8c:83:01:f7:44:b0:0b:55:db:5b:a5:05:
c3:d3:fd:11:20:7b:c7:30:b6:25:f0:52:ab:16:6b:
24:3f:6e:b8:64:18:05:8c:99:61:3a:17:49:58:e8:
3a:4d:60:d9:2b:f2:83:d9:3d:c8:f6:98:a8:25:ab:
55:8e:3a:4d:65:e6:95:30:fa:b8:fe:86:15:7f:39:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:F9:5E:E4:E1:8A:93:FE:FC:FE:4F:96:D6:9A:98:CB:85:DF:37
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bd:0d:ac:08:69:7e:d1:9a:84:dc:2b:7d:9e:79:d4:c5:ac:
86:14:8e:57:b3:91:49:cf:d7:16:9c:50:c5:98:43:75:d8:17:
d6:a3:dd:38:24:54:8d:ad:c4:c1:8e:52:dc:ee:81:c1:6a:06:
72:2e:c8:63:16:81:2b:b5:32:73:f3:c6:23:1d:9d:25:91:b1:
28:67:b3:65:f3:65:43:19:c4:3c:bb:b3:31:30:eb:31:fa:1d:
e9:fd:f2:3e:a7:6c:6a:b0:53:eb:8a:25:26:b6:65:1f:63:1a:
8d:02:18:6e:fa:d2:44:3a:d6:7a:ab:ab:31:72:17:d4:5f:08:
ca:e0:8b:a4:c5:f4:70:40:88:29:5d:f8:bb:ab:30:48:ba:ac:
73:61:5a:25:05:df:92:7d:ee:ef:1f:c9:db:d5:c2:eb:57:94:
8a:59:ab:0c:de:49:b3:19:22:80:20:b0:83:35:03:8b:1d:e7:
15:dd:01:65:5e:87:be:3e:ee:22:41:d4:fd:0b:16:4e:f1:d5:
74:cd:0b:02:03:66:9c:32:3d:68:3a:e9:73:7e:e4:c2:8c:73:
1b:eb:52:95:99:93:49:a2:2a:9c:5d:95:53:b7:27:d4:62:e3:
54:b0:60:4e:2c:8b:cf:72:d3:93:5d:47:4f:d1:d6:f4:8f:c8:
b4:e9:fe:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDrlKxJmSL64nHgfE+0f8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjUwNjA4MTUwMDMxWhcNMjUwNjA5MTUwMDMxWjAzMTEwLwYDVQQD
EygxMTYyZjk1ZWU0ZTE4YTkzZmVmY2ZlNGY5NmQ2OWE5OGNiODVkZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeQbWbu79HeksFOasKFLZw25JNUX
dsN4R3GOwLGp1AHhSJ7hTFWPOreyutdWh+0Y0B848wIYQHYnLoKdVwny4GSRj21e
o/HknP0s75pyIj1UN5Fs9w8WzkwB3fBX+WtGtzyQUE0c2iYiYSs1GAERFv25QND3
tt8g08x6fc3VRj1nmTntsxH6iNK0ictOuRV234Z3W6DDtvYpg9pL4L8FwpYWdahs
08KDTMgVkeusL+gkeiGGeAOMgwH3RLALVdtbpQXD0/0RIHvHMLYl8FKrFmskP264
ZBgFjJlhOhdJWOg6TWDZK/KD2T3I9pioJatVjjpNZeaVMPq4/oYVfzn76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFi+V7k4YqT/vz+T5bWmpjLhd83MB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO70NrAhp
ftGahNwrfZ551MWshhSOV7ORSc/XFpxQxZhDddgX1qPdOCRUja3EwY5S3O6BwWoG
ci7IYxaBK7Uyc/PGIx2dJZGxKGezZfNlQxnEPLuzMTDrMfod6f3yPqdsarBT64ol
JrZlH2MajQIYbvrSRDrWequrMXIX1F8IyuCLpMX0cECIKV34u6swSLqsc2FaJQXf
kn3u7x/J29XC61eUilmrDN5JsxkigCCwgzUDix3nFd0BZV6Hvj7uIkHU/QsWTvHV
dM0LAgNmnDI9aDrpc37kwoxzG+tSlZmTSaIqnF2VU7cn1GLjVLBgTiyLz3LTk11H
T9HW9I/ItOn+iQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:49:56 2025 by rpki-client