Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: hfd2uHrnIex7oxKe49Fzt5U7RzczIOuFwC9qU2cJG/Q=
Subject key identifier: BE:78:45:72:F4:81:1F:1D:9C:A3:CB:D9:14:00:8F:01:75:E4:23:2C
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0194BB97034885FB5C2A97FCF721829425AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 1023
Signing time: Fri 31 Jan 2025 09:00:23 +0000
Manifest this update: Fri 31 Jan 2025 09:00:23 +0000
Manifest next update: Sat 01 Feb 2025 09:00:23 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: ZmYIrsQrFMm7DyqIVVuQOc2SnZCUuMkPB6IlI5Bsx1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:03:48:85:fb:5c:2a:97:fc:f7:21:82:94:25:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jan 31 09:00:23 2025 GMT
Not After : Feb 1 09:00:23 2025 GMT
Subject: CN=be784572f4811f1d9ca3cbd914008f0175e4232c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:dc:28:14:86:89:d0:9a:f2:ba:ea:d7:d8:
f8:39:e8:a7:17:2a:21:cb:a0:8d:df:8d:03:2a:9f:
c3:e8:0f:bb:50:7f:63:e7:0f:f5:66:7e:3f:45:61:
b5:f5:3d:77:89:99:79:47:0a:36:86:1c:b5:7d:67:
01:41:cf:e0:d7:9c:90:be:14:02:9b:af:76:6d:07:
8d:0b:e1:86:3f:ac:80:0d:06:63:ab:41:37:ea:70:
0f:17:e7:f4:26:a6:c0:7f:a2:b3:8d:36:b0:7a:04:
80:16:f8:fc:f0:36:fa:3b:7d:51:cc:f1:c4:b2:17:
45:35:72:b1:fe:36:85:e9:15:2e:fd:93:a5:42:e9:
66:70:8b:c7:9a:57:0e:06:06:ca:87:15:9a:6c:0a:
80:2e:43:e8:5e:27:fd:0e:50:da:3d:16:a1:09:39:
73:90:9c:01:45:bd:ff:22:b7:46:63:c7:59:f5:31:
ad:40:b0:ac:68:b8:61:dd:f6:ca:11:68:bc:c3:c5:
f6:de:97:18:cb:47:7f:05:c7:55:1e:a7:ec:77:bb:
88:62:25:4e:f1:55:56:73:75:be:c2:bc:af:ee:0b:
d6:e6:45:51:ea:29:3f:4d:e7:57:86:e7:13:cf:6a:
a3:b7:ee:69:3d:9a:16:10:24:d2:06:3e:ce:fd:f2:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:45:72:F4:81:1F:1D:9C:A3:CB:D9:14:00:8F:01:75:E4:23:2C
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1c:f0:87:84:e1:13:80:f3:51:87:1d:40:f0:41:83:e3:fb:
4e:a0:5c:18:4b:5f:5e:f0:c7:a1:31:37:83:74:5a:d1:ce:49:
72:00:e1:3e:b0:b1:00:51:48:e7:d6:8a:ea:e1:01:b1:18:ed:
b0:be:b8:93:2c:d6:74:e4:d1:36:1b:91:78:e4:b7:aa:40:4f:
9c:43:06:62:db:a0:b0:24:6d:1a:e3:a6:5a:c7:de:91:0d:3b:
10:0c:57:9f:88:07:7d:74:6b:97:1b:88:b2:ec:cc:3d:5c:9c:
d4:cd:44:42:c4:c1:b7:87:3a:11:b1:d1:c3:c7:71:ea:aa:5e:
de:88:9b:04:87:9a:85:a6:ec:c7:e7:4a:da:c4:a6:c8:e8:a2:
d5:b1:0e:75:47:e7:c1:7a:d1:0c:10:4c:b5:19:a5:81:bb:ad:
e6:73:f4:27:b3:42:ca:77:28:7e:78:66:09:3a:64:17:0d:0f:
dc:4c:31:ca:63:54:f4:97:00:7c:74:78:92:4b:b9:71:37:20:
22:1b:9e:d1:b5:db:e9:a3:7d:ee:ac:62:1d:ce:98:06:54:f6:
0c:64:f8:09:57:c6:22:0a:86:8c:47:81:ac:9a:5e:53:61:ce:
bf:0e:cf:fd:4e:5d:82:1c:3b:30:ea:05:3d:52:b0:9f:d7:45:
29:d6:82:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwNIhftcKpf89yGClCWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDE1YTE3NjNmZTAwNWIwMTM5YjAxNGM2ZTU3NWQ1Zjli
MmE1MDQwHhcNMjUwMTMxMDkwMDIzWhcNMjUwMjAxMDkwMDIzWjAzMTEwLwYDVQQD
EyhiZTc4NDU3MmY0ODExZjFkOWNhM2NiZDkxNDAwOGYwMTc1ZTQyMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33cKBSGidCa8rrq19j4OeinFyoh
y6CN340DKp/D6A+7UH9j5w/1Zn4/RWG19T13iZl5Rwo2hhy1fWcBQc/g15yQvhQC
m692bQeNC+GGP6yADQZjq0E36nAPF+f0JqbAf6KzjTawegSAFvj88Db6O31RzPHE
shdFNXKx/jaF6RUu/ZOlQulmcIvHmlcOBgbKhxWabAqALkPoXif9DlDaPRahCTlz
kJwBRb3/IrdGY8dZ9TGtQLCsaLhh3fbKEWi8w8X23pcYy0d/BcdVHqfsd7uIYiVO
8VVWc3W+wryv7gvW5kVR6ik/TedXhucTz2qjt+5pPZoWECTSBj7O/fImsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL54RXL0gR8dnKPL2RQAjwF15CMsMB8GA1UdIwQY
MBaAFGVBWhdj/gBbATmwFMblddX5sqUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTct
ZWU3YTIwNTY5YjgzLzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zYWVjNzEtY2ExNy00ZWM1LTg3YTctZWU3YTIwNTY5Yjgz
LzEvWlVGYUYyUC1BRnNCT2JBVXh1VjExZm15cFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBzwh4Th
E4DzUYcdQPBBg+P7TqBcGEtfXvDHoTE3g3Ra0c5JcgDhPrCxAFFI59aK6uEBsRjt
sL64kyzWdOTRNhuReOS3qkBPnEMGYtugsCRtGuOmWsfekQ07EAxXn4gHfXRrlxuI
suzMPVyc1M1EQsTBt4c6EbHRw8dx6qpe3oibBIeahabsx+dK2sSmyOii1bEOdUfn
wXrRDBBMtRmlgbut5nP0J7NCyncofnhmCTpkFw0P3EwxymNU9JcAfHR4kku5cTcg
Ihue0bXb6aN97qxiHc6YBlT2DGT4CVfGIgqGjEeBrJpeU2HOvw7P/U5dghw7MOoF
PVKwn9dFKdaC8w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:23 2025 by rpki-client on console-fra.rpki-client.org