
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
File: ZUFaF2P-AFsBObAUxuV11fmypQQ.mft (raw, json)
Hash identifier: OhU1zHAGRQRhErUAh9ldMeQoT7tQTkaqIBFM0fXNO1M=
Subject key identifier: A2:00:2F:51:F3:27:FD:03:A5:50:EB:94:90:8A:BA:54:A7:B6:E7:FF
Authority key identifier: 65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
Certificate issuer: /CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Certificate serial: 01988B100B35D386B2EA93B008BEDA683337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
Manifest number: 121C
Signing time: Fri 08 Aug 2025 19:02:20 +0000
Manifest this update: Fri 08 Aug 2025 19:02:20 +0000
Manifest next update: Sat 09 Aug 2025 19:02:20 +0000
Files and hashes: 1: 6LczYu9ryKjTocWYecYUFUv673o.roa (hash: tjb/z4zkMDQBH6/Vrji53BKdyb6GsDIQMh6du73aM0A=)
2: ZUFaF2P-AFsBObAUxuV11fmypQQ.crl (hash: QNLrTo08nzdBy+7ykQQBk7aeUlRbG28sG/ejmuY/pzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:0b:35:d3:86:b2:ea:93:b0:08:be:da:68:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65415a1763fe005b0139b014c6e575d5f9b2a504
Validity
Not Before: Aug 8 19:02:20 2025 GMT
Not After : Aug 9 19:02:20 2025 GMT
Subject: CN=a2002f51f327fd03a550eb94908aba54a7b6e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:e6:87:49:ae:8f:e1:96:c5:de:07:f8:f0:
35:e7:80:05:13:22:d2:9b:b2:e6:77:e3:43:59:08:
d4:8e:58:a5:30:bf:b0:c2:b3:78:fa:1d:f0:d7:d1:
d4:34:92:fa:eb:86:01:3a:44:f8:e1:65:83:ce:39:
6e:56:22:56:46:d8:e4:be:60:16:77:3f:b2:51:b5:
21:3b:cd:d7:81:15:4e:fd:4e:17:92:4a:41:f2:37:
17:ca:3c:a9:b4:a5:1a:70:6d:27:c8:47:70:e9:f0:
3a:9c:6a:a3:f6:6d:7b:da:de:bc:9c:74:13:1e:ab:
c8:14:3a:fc:be:06:a1:5f:1e:68:71:45:15:df:f3:
f5:0b:11:94:ee:7f:36:a9:00:90:8e:46:aa:15:68:
d9:56:ba:3e:d2:29:d7:62:63:d5:3d:9f:85:00:4d:
41:08:02:0c:0f:c6:86:1b:de:36:b7:97:74:b7:2f:
92:e5:c9:f1:ee:c3:0e:23:24:f8:44:e7:d6:87:89:
8f:61:17:aa:e0:9f:e7:0a:1d:41:40:68:1e:08:b2:
38:fb:a7:e4:5f:cf:84:1f:4b:ca:25:ba:7a:5b:cd:
d7:ec:98:15:e2:b0:aa:73:9e:ff:49:05:16:e7:46:
de:52:91:1d:72:df:a4:34:eb:2f:12:02:b3:28:fe:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:2F:51:F3:27:FD:03:A5:50:EB:94:90:8A:BA:54:A7:B6:E7:FF
X509v3 Authority Key Identifier:
keyid:65:41:5A:17:63:FE:00:5B:01:39:B0:14:C6:E5:75:D5:F9:B2:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUFaF2P-AFsBObAUxuV11fmypQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3aec71-ca17-4ec5-87a7-ee7a20569b83/1/ZUFaF2P-AFsBObAUxuV11fmypQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c3:b9:43:26:4a:3c:7c:51:4f:70:26:23:ec:8e:d6:2b:28:
9a:48:ab:bb:68:31:44:55:8c:f1:98:e1:54:0a:48:6b:04:9b:
6f:c7:af:83:84:c4:03:ad:98:be:9e:4b:f0:79:eb:dc:12:88:
8b:52:bb:4a:1f:c9:b1:cb:0f:06:be:d4:a4:ff:d0:36:e3:30:
29:66:1b:69:3b:eb:7d:6f:1f:52:d6:23:80:27:33:33:b1:9a:
53:e7:8c:90:6f:f4:c7:d9:0f:1c:52:f9:e6:17:2d:23:e4:dd:
f8:c8:7a:79:cf:7a:5a:b1:70:01:4f:70:b2:f7:b0:c5:1e:2d:
75:4c:e4:c2:f9:d8:9e:18:f4:db:d9:9b:af:6a:44:dc:8c:95:
df:58:0c:29:72:6c:90:77:f8:e1:39:c7:97:42:69:b6:62:5f:
26:96:ab:2b:b4:cd:e5:7d:15:72:0a:1d:82:59:fb:63:f2:29:
c8:4a:62:2a:16:bc:6d:24:4c:46:f2:98:76:af:aa:dd:0b:5c:
f1:d3:cb:99:5f:34:aa:20:c6:fb:9f:a5:71:6e:7f:47:bf:ff:
f3:20:b9:65:6f:69:17:fd:1a:da:b9:40:68:cd:7f:e6:27:d6:
e5:2d:8e:48:b8:d1:a2:56:4a:2c:ea:8e:0d:80:18:5a:48:df:
f5:66:13:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:03 2025 by rpki-client