Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: 9jn2sYV2Tk37fvDwKqEXI0CH7dzjqY25S4GCdg6f8Hg=
Subject key identifier: 77:6E:73:4C:F3:02:2D:D8:A1:40:C5:DF:E9:D4:C8:CE:D7:85:B3:85
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 0197789CCB8CEEFA9CAF807FC6BE5343EE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 118E
Signing time: Mon 16 Jun 2025 12:00:30 +0000
Manifest this update: Mon 16 Jun 2025 12:00:30 +0000
Manifest next update: Tue 17 Jun 2025 12:00:30 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: Ur7h1gdHMj+RhjLyeNoBnNCAVURudGanAqV3or8RNZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:cb:8c:ee:fa:9c:af:80:7f:c6:be:53:43:ee:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Jun 16 12:00:30 2025 GMT
Not After : Jun 17 12:00:30 2025 GMT
Subject: CN=776e734cf3022dd8a140c5dfe9d4c8ced785b385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:3e:b7:a1:ca:95:e4:63:2d:3c:d7:85:4f:
2c:18:b0:d2:f4:69:63:17:a5:3e:68:3d:f5:f4:81:
93:17:a9:ea:fb:b2:de:d8:d7:ae:0a:50:c1:48:bf:
36:98:69:51:9c:47:3e:af:14:dc:f1:cb:9b:a2:cb:
e4:df:73:9a:72:e1:5d:6f:14:22:d8:64:18:f5:33:
5d:ce:6c:ad:d4:bb:88:5b:5b:82:22:93:fe:18:24:
9d:61:be:dc:a8:6f:3c:5f:f3:ab:46:ae:af:5b:0f:
e4:ff:bf:bd:4f:fb:7b:e5:3a:c8:91:66:b8:a0:d9:
12:59:14:b9:45:8d:5b:e7:0e:0e:cf:a7:ed:74:58:
ff:68:79:6d:10:bc:d7:2c:e8:31:d2:f5:22:2c:e9:
d1:03:05:0e:3c:7f:18:0f:21:f6:16:8e:12:93:d4:
b5:b0:65:77:64:e7:a5:e7:be:85:8d:24:f6:c4:0e:
ce:c7:e6:36:00:64:ec:1e:4f:d7:10:a2:ee:f6:9d:
80:8c:ef:77:69:5f:12:41:e2:e5:f3:36:5d:c5:24:
fa:a0:b3:6b:60:61:61:5e:52:0a:ee:22:54:ba:f7:
fd:49:34:52:88:d8:99:b7:b7:0e:11:4e:b9:b8:36:
1f:cb:42:ab:e7:88:eb:a0:0f:6c:0e:09:81:a4:cd:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:73:4C:F3:02:2D:D8:A1:40:C5:DF:E9:D4:C8:CE:D7:85:B3:85
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3e:30:c4:9c:fe:15:ac:87:18:85:68:97:43:69:30:20:18:
5e:6c:64:99:3b:a6:08:7d:a3:75:4f:e2:0d:8d:fa:e7:59:34:
fe:42:20:0e:95:fe:09:0b:8b:27:a8:82:8f:19:8d:e4:86:f1:
f1:9b:b9:d2:43:56:f3:5e:4a:be:f9:ec:8f:fc:89:3a:5a:8e:
aa:8c:9c:24:a0:21:a1:48:00:62:92:10:f2:30:c7:0f:1f:5d:
3f:d3:84:40:a5:73:cd:7e:39:ab:4e:06:0a:63:45:c0:33:71:
af:77:c6:d3:b7:b1:ba:63:59:cb:d4:67:7a:5a:2b:82:c0:fe:
e2:e5:60:c4:25:11:a9:e7:6c:49:bd:38:ef:5f:5e:3d:00:0a:
96:d4:6c:37:39:9b:30:4c:9d:41:6d:e6:9a:85:7d:87:12:25:
e3:67:90:72:d9:f4:0b:5e:94:f4:93:8b:97:ff:0a:b6:c5:f4:
96:34:5a:c4:b1:f4:d6:af:42:7b:76:cb:2e:e4:e8:57:a6:52:
6d:2b:ab:37:65:25:41:d5:a2:02:d9:85:f3:a7:97:09:52:7c:
8a:50:19:48:66:de:28:be:b7:2e:d8:27:51:22:e6:15:a3:46:
28:3c:32:0c:27:bb:a1:23:5c:7d:71:ee:2a:68:3e:39:2c:aa:
49:75:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:13:08 2025 by rpki-client