Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: tVH783CdGFeNWz5VyAbbcWEx0YNS2+7cL5oRhh8wwks=
Subject key identifier: 19:1D:47:67:27:DD:BD:1D:BC:5D:68:FD:43:C2:8E:D9:9B:C4:21:6E
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019A71EE86ED34AD309AEABD02D6680C60A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1212
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (hash: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: ESDGFDa2JZliLSTPdtAS5e2GfYl7k/xNgU0R808iLEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:86:ed:34:ad:30:9a:ea:bd:02:d6:68:0c:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=191d476727ddbd1dbc5d68fd43c28ed99bc4216e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:ef:1e:b7:ad:5b:c9:8c:12:9c:23:03:1b:
62:6e:6c:bb:d0:fe:e0:2b:61:a6:a3:11:1c:1b:71:
53:ef:3a:71:41:17:07:2e:1b:8e:ea:6b:3e:2e:2d:
27:3d:3b:95:73:5a:13:a9:e7:dd:ae:1d:12:09:7f:
16:f7:0a:2a:82:9b:7d:87:c9:5c:63:a0:40:ac:33:
9b:08:6f:6e:09:4b:45:51:b4:07:6c:07:0f:13:f1:
e6:9d:4d:a4:e5:44:a0:16:c3:d8:99:23:34:ee:8c:
ad:09:5c:e8:c8:91:de:be:41:6f:be:de:1f:3c:97:
5e:3b:1a:b5:29:32:a9:6f:03:6c:53:d0:c8:22:f5:
42:37:c4:48:f1:dd:8f:fd:57:6c:51:07:ec:2c:86:
67:2f:f9:10:8b:e8:b2:f2:9a:9a:a8:01:b8:4b:75:
32:47:d4:22:15:55:8d:77:84:df:25:cd:ab:2c:7e:
60:d4:f0:16:8e:63:00:31:1e:c7:ba:a9:a1:59:d8:
81:e1:55:b5:0d:08:81:48:79:18:ed:8e:0c:b8:82:
2d:3a:ba:97:8c:b8:d7:1c:50:5f:69:d9:58:90:d1:
42:90:9f:67:87:9a:7e:a7:66:ef:66:7b:d0:61:b9:
88:76:73:39:c8:aa:4b:8b:36:62:21:fa:b3:b1:74:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1D:47:67:27:DD:BD:1D:BC:5D:68:FD:43:C2:8E:D9:9B:C4:21:6E
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:65:0e:07:d7:ce:dc:ce:17:60:64:15:55:f4:7d:97:5a:25:
27:bf:f2:f1:4a:c4:06:2b:0a:7f:2a:ea:e1:3c:30:b3:29:e6:
69:31:d8:42:70:c5:84:07:3a:af:c7:7a:bf:aa:96:34:d1:0a:
91:10:1e:91:21:58:32:47:f8:91:db:2b:da:ce:5a:4c:9c:09:
b1:e9:cb:f2:d0:5f:1f:98:da:0b:d7:65:52:20:93:c3:8b:59:
68:49:c0:b1:79:1a:88:93:ce:aa:36:6e:dd:8e:9d:9b:64:39:
2c:a6:44:91:f2:dc:26:e1:d6:91:36:ae:01:1a:bf:4c:37:65:
29:55:7a:40:b2:24:72:56:5c:ab:6d:02:c0:2b:d4:c7:b9:f0:
77:b7:75:d8:22:32:3a:1f:44:8d:45:a3:32:99:5f:68:79:ce:
b4:ca:5b:c2:b0:bd:47:99:b9:c3:96:2c:d7:c4:1e:69:2b:96:
51:41:c1:25:d4:8b:e7:10:56:41:b3:e6:2b:1d:8d:98:8a:a9:
94:3f:69:4e:82:3c:db:43:3f:40:89:2b:1a:8f:65:c0:55:67:
a9:cf:7c:17:04:a5:5d:b0:f2:6a:0f:d7:1f:e7:4c:4d:a1:e3:
aa:2a:b9:4e:db:b7:46:c3:83:ba:c8:32:f6:3f:b9:b4:83:4d:
2e:19:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client