Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: WqhsxEozIXRsPXaHuCzIYTZH060LsUz9pHnuSFpLtFw=
Subject key identifier: 0F:83:EF:DF:0E:57:DD:16:8C:B0:28:49:21:76:DB:E6:43:4E:B0:1A
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019A4F2B3944813C5EDA69128BE2D1F6B09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1200
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (hash: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: zH/P0Pzt32SYrSoS3nrT5/QIM/P4eNQ0oLsThYnOjLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:39:44:81:3c:5e:da:69:12:8b:e2:d1:f6:b0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=0f83efdf0e57dd168cb028492176dbe6434eb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:20:59:7e:d6:0e:0c:24:a7:c5:bb:63:57:
89:7b:0e:2b:5c:92:69:d8:08:ae:63:0f:f6:a8:cd:
e7:6d:23:a9:11:b4:8a:0a:40:f6:6b:80:f9:82:d8:
58:2f:aa:84:59:5e:5b:78:c4:8d:86:43:58:d5:21:
39:8c:51:cf:e9:fd:03:f0:56:41:e4:67:b0:f5:87:
cc:5f:4f:61:0b:33:2f:ce:df:52:5d:9f:e9:aa:ed:
c2:e7:b1:c1:89:ea:2a:80:47:23:c9:a8:bd:2e:c8:
c9:ea:13:dc:68:ba:e6:64:ad:25:eb:d6:38:50:00:
ad:e5:14:c2:80:29:af:85:d4:f1:42:4c:01:55:df:
44:8b:a9:65:ba:5a:06:7d:ff:04:de:16:03:07:e3:
bd:4c:e5:12:13:83:9f:e0:b1:cc:48:3e:07:95:47:
85:e4:a9:cf:3a:0b:ff:8d:8e:e1:b5:25:d5:eb:c2:
16:71:ad:54:1e:c9:f2:68:71:8b:58:d2:f6:27:a9:
e1:71:fc:bd:ae:17:04:97:f4:c1:85:62:7d:1d:e6:
a2:ce:1d:f6:ee:9a:20:c5:73:df:15:a4:36:38:0e:
ae:62:63:89:72:d2:c0:4f:f6:cc:8b:41:a7:a6:79:
8c:92:4f:59:1d:1b:4c:0b:c7:6c:74:f8:f2:9f:16:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:EF:DF:0E:57:DD:16:8C:B0:28:49:21:76:DB:E6:43:4E:B0:1A
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5a:db:03:f7:13:9e:32:ac:2d:19:76:25:28:99:ca:08:3f:
af:75:4f:35:19:3a:b6:e2:cc:42:f3:28:32:11:29:32:f6:66:
f9:38:0f:a8:ad:88:7a:43:6b:dc:0e:d5:0c:b8:fb:fb:47:de:
2e:fe:27:69:a7:85:95:f4:6c:1a:37:60:82:20:62:81:d7:48:
58:87:7b:91:bd:35:ea:b8:f6:b6:67:2d:ed:4e:a9:2b:ed:9c:
6d:e4:c1:e4:2f:29:1e:26:8c:df:61:96:76:ca:f4:fe:ee:36:
f1:57:e8:87:67:f8:c1:47:80:62:d7:f7:f1:da:75:14:fc:f8:
23:57:84:b5:25:20:8f:9c:e7:ae:f5:a4:58:ec:de:85:60:a6:
3a:1d:ee:9a:1e:0f:c5:4c:ba:03:db:9f:08:93:b2:a4:12:de:
46:72:b0:2f:38:2f:41:30:da:84:50:00:1c:ea:a9:a3:eb:4d:
23:65:93:34:00:fe:d0:99:d4:45:d0:5a:77:e3:47:2a:d8:07:
53:6c:95:f6:a2:86:54:99:e5:84:fd:90:e8:ea:4e:ce:83:23:
77:45:6e:a3:cd:e6:8a:fa:86:14:84:72:fc:22:13:0d:a8:34:
76:45:ab:7d:f7:86:bf:6b:e7:7d:cc:6d:50:9d:b2:17:96:33:
f2:f0:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client