Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: eLUqMUMCcHzRyRvHrU2KO0t8w6TPRCVOV9eIFqfhdAU=
Subject key identifier: 63:F6:D7:A5:F4:5E:62:82:70:4F:51:13:9B:7B:55:40:58:1B:AD:50
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 01976DAB7B4D962854A13EE209CAEA344B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1082
Signing time: Sat 14 Jun 2025 09:00:44 +0000
Manifest this update: Sat 14 Jun 2025 09:00:44 +0000
Manifest next update: Sun 15 Jun 2025 09:00:44 +0000
Files and hashes: 1: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (hash: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: y9ggpwOb74moLRj54jcZuXLMVk58+2eZMzpDWJyH/9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:7b:4d:96:28:54:a1:3e:e2:09:ca:ea:34:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jun 14 09:00:44 2025 GMT
Not After : Jun 15 09:00:44 2025 GMT
Subject: CN=63f6d7a5f45e6282704f51139b7b5540581bad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:f2:55:9b:7b:43:97:33:cf:c1:61:9e:86:
1a:e4:b4:28:99:a0:4e:25:78:5b:c2:94:d7:79:09:
93:62:c3:2f:c5:23:38:a9:b2:9e:b0:64:93:81:2c:
13:15:16:6f:8f:0c:71:5c:95:ad:24:81:1e:3b:83:
85:f5:4f:f3:b0:3f:e0:6c:a3:c2:25:0b:16:e0:cd:
22:07:2f:3b:e0:45:0e:ff:63:95:6f:8b:60:45:ba:
62:fb:db:b9:80:0d:95:f5:76:3d:ce:d7:34:9a:f2:
56:8c:2c:b4:3e:a9:60:45:4e:a4:2e:9e:09:07:a1:
bf:5f:14:7e:2f:3d:25:f0:b9:15:a2:d0:4a:c3:ab:
3a:b6:ac:bd:c0:d7:05:59:5b:0a:09:78:02:91:73:
56:c5:66:e8:f5:d8:7d:09:1f:b9:37:45:d9:37:45:
15:7d:3e:3e:c2:7e:ea:58:85:e3:17:2d:e7:32:de:
a5:81:82:a1:f4:12:51:09:28:d3:11:01:94:66:c1:
0a:3d:3c:85:64:a5:e0:b6:0b:77:e7:f0:0a:73:fc:
3a:d1:70:8d:35:8d:9a:80:ee:e8:7e:f8:7f:b7:9b:
c9:85:12:92:02:4b:6d:93:20:1b:ba:d4:e4:c8:04:
55:cd:71:4b:62:5a:43:c8:9e:a8:eb:92:39:e5:ed:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F6:D7:A5:F4:5E:62:82:70:4F:51:13:9B:7B:55:40:58:1B:AD:50
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:92:ab:1e:45:e4:2f:fb:20:91:f7:a4:49:0e:92:dc:ae:
82:18:5b:50:16:a8:08:7c:e5:46:54:8b:70:e9:c6:8b:fe:12:
c9:09:fd:58:f4:5e:11:15:9c:d2:fd:de:af:5d:43:4a:b1:ca:
3e:ef:3f:c5:32:20:97:da:39:cc:d9:56:d0:72:e3:d3:cc:8e:
f2:ef:fe:3c:7b:d5:eb:a6:e4:78:f0:33:7c:54:73:06:98:6d:
41:5f:1c:cf:34:54:45:65:06:5b:eb:4a:14:2a:1a:bd:66:e4:
e0:81:5e:eb:9e:62:14:70:e6:98:0d:db:e1:55:c1:c9:2b:ac:
2d:15:5f:6b:80:11:a1:15:4a:6e:c9:95:ce:f6:96:60:8c:4d:
bf:d9:f9:35:ca:7d:76:d5:76:35:0c:38:4e:bd:09:d5:e7:e2:
58:ee:4d:a7:91:a4:96:6b:1f:37:db:b4:e6:b0:76:6d:30:13:
e1:27:ba:b3:62:e4:1e:8b:06:2b:8d:65:52:f4:ea:4e:a8:00:
c3:36:8d:87:42:d9:2d:dd:60:3d:28:81:0f:88:c8:b3:ae:f0:
a5:b2:90:8d:b8:ff:f5:fb:85:f7:ec:00:ef:37:1c:7d:3c:45:
33:e2:79:07:fd:40:50:7f:59:35:0e:d7:4d:ef:e3:de:c7:e3:
56:8e:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:34 2025 by rpki-client