Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: +HW+ulPzgS8/BYFqzthWrCOFNV7nJ9KA/T+dLMXlFrI=
Subject key identifier: 11:8A:2F:CB:66:2A:40:50:29:BA:43:8A:E8:60:80:08:5B:32:29:68
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 01988D341A677DB2EC7017086DFB6E3E612C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1117
Signing time: Sat 09 Aug 2025 05:00:58 +0000
Manifest this update: Sat 09 Aug 2025 05:00:58 +0000
Manifest next update: Sun 10 Aug 2025 05:00:58 +0000
Files and hashes: 1: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (hash: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: kJttb4r09PbnOzfU5mw7GAn7CkzomWoMSvvb1wkkhMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:1a:67:7d:b2:ec:70:17:08:6d:fb:6e:3e:61:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Aug 9 05:00:58 2025 GMT
Not After : Aug 10 05:00:58 2025 GMT
Subject: CN=118a2fcb662a405029ba438ae86080085b322968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:80:a3:89:7a:fc:a8:47:18:79:5c:f5:ac:
ae:df:8d:c4:aa:ab:8b:ff:9e:9e:d4:ad:71:4d:18:
da:55:ff:40:8b:c6:3e:75:2f:42:ad:14:4a:52:2e:
45:3c:f7:83:3e:d1:79:d3:8a:fa:b6:f3:2c:ed:18:
2d:6d:c5:a7:fa:0c:2c:ae:9c:ab:9b:9d:1a:fa:62:
25:13:18:32:04:b0:f7:9b:c8:b1:c7:cf:58:68:71:
c7:f1:e1:7d:67:bb:7c:8b:22:27:5f:55:f5:d1:f6:
2f:b4:5d:36:e1:6d:0d:88:cc:17:87:3a:06:39:28:
c3:22:da:ba:b9:4c:7f:17:af:ec:46:41:1e:bc:2e:
73:38:c7:81:e1:c7:73:a8:8c:65:8b:ec:fb:ee:c1:
7f:2f:95:68:c2:5f:be:15:c8:d2:ba:2a:ee:4a:96:
74:c6:6e:62:cb:c4:73:52:20:9d:0c:94:5c:91:9b:
78:9f:19:be:56:6e:01:a7:79:6c:80:7a:49:b7:63:
97:ef:79:64:dd:15:aa:56:ca:b2:51:4f:be:11:ef:
a8:42:57:a4:b3:0b:4f:a4:e6:b4:d0:ef:80:b1:35:
03:5f:0a:94:f6:b7:b6:25:ec:9a:e0:30:15:9d:d4:
b5:dc:2c:d3:4a:b1:04:d7:54:e9:96:3c:a4:80:1b:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:2F:CB:66:2A:40:50:29:BA:43:8A:E8:60:80:08:5B:32:29:68
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9c:12:03:4c:56:e9:c0:3a:11:84:ee:b2:ca:39:ac:7a:02:
a1:39:70:1b:0b:fd:58:8a:68:a6:a5:3a:e2:75:5f:11:86:6d:
f0:60:ab:02:bc:8b:a7:56:8c:e7:6e:5c:87:3b:8d:41:ad:97:
64:4f:59:31:e6:25:46:a4:9f:e2:4b:af:2b:99:7f:ab:ab:63:
d9:c3:ce:77:63:d0:3e:b8:68:62:db:04:ba:ba:8f:da:ea:c3:
f2:c0:98:7b:fb:f5:cb:b1:1f:09:33:a3:34:b0:cb:0b:20:06:
65:32:bb:76:ef:20:b8:6b:70:13:86:b2:7c:83:3e:3b:9c:64:
32:16:7b:64:d6:7a:60:7f:a6:d1:7b:a0:92:1c:b8:63:08:bd:
61:db:3d:34:0f:fe:50:a7:cf:d0:16:96:b5:0b:bc:f4:fa:64:
43:c6:a9:5d:de:97:ee:bd:26:83:1e:a5:fe:7e:18:e9:07:14:
3b:ff:51:11:33:a0:70:d7:4a:3a:3e:f3:bc:59:d9:21:90:ef:
b1:c0:0d:a4:e2:5b:b8:8f:cc:e7:cd:22:7f:74:a6:e1:39:4b:
a6:3e:d0:99:1e:59:b4:43:83:23:40:f4:98:50:b4:42:47:0a:
87:2f:cf:bf:18:2e:9c:a5:3f:4d:0f:b6:f2:46:a1:4f:55:ed:
c2:bd:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:20:05 2025 by rpki-client