Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: bivRDhqAAjyERha0ZLfnrfyonKW7kskWEj2P/aMkiXo=
Subject key identifier: 05:F0:14:81:92:DD:15:4B:AA:8D:FB:18:0E:8C:ED:EC:BC:2F:55:FE
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 01974EC5475E673340F10F2E50C7F4B87A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 1072
Signing time: Sun 08 Jun 2025 09:00:40 +0000
Manifest this update: Sun 08 Jun 2025 09:00:40 +0000
Manifest next update: Mon 09 Jun 2025 09:00:40 +0000
Files and hashes: 1: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (hash: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: 1gbWbJLUVCC5L6WZ3Nvaf1JRHJvqcKCvylGnrETo/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:47:5e:67:33:40:f1:0f:2e:50:c7:f4:b8:7a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jun 8 09:00:40 2025 GMT
Not After : Jun 9 09:00:40 2025 GMT
Subject: CN=05f0148192dd154baa8dfb180e8cedecbc2f55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:c2:26:cc:e2:8d:02:6f:ed:23:7a:ff:21:
30:5d:0b:77:d3:5c:d7:a1:e4:2d:e4:91:87:b6:ae:
06:c7:a9:63:29:da:55:e3:56:84:3b:07:3f:95:20:
e5:e8:7d:4e:0c:c9:9a:79:90:94:1c:9b:34:f8:e0:
89:fb:c3:67:40:5b:9e:e9:19:e7:c8:80:24:0f:b5:
ab:78:14:a2:2e:b7:6a:a3:51:99:7b:61:54:c5:0f:
7d:89:ab:e5:36:38:9f:a1:d3:8d:17:59:33:2a:df:
d1:09:e3:cb:f4:3f:ad:b6:76:40:c7:f9:98:bb:25:
0b:c5:8b:53:c9:a8:ce:66:fa:3d:f9:67:bd:c0:65:
78:0a:ef:4d:5e:a3:61:18:8d:57:c1:f3:28:61:de:
2b:97:74:1d:b3:9a:75:3a:25:2d:67:c2:22:2c:cd:
a6:44:05:f0:a0:a2:a0:f6:f5:b9:d7:06:ff:19:9e:
58:e0:b7:a8:8b:76:1d:d4:cf:80:09:96:2b:e8:2c:
dd:4b:50:0d:0b:49:62:93:b4:ef:d3:73:bb:7c:1d:
6f:6f:b2:e5:ca:38:21:6e:30:46:29:72:2c:f2:41:
a5:ed:10:d7:a4:b9:92:53:2c:22:90:4a:6a:f6:6e:
de:35:8c:64:bb:71:75:1f:d4:e2:0a:75:20:cd:5e:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:14:81:92:DD:15:4B:AA:8D:FB:18:0E:8C:ED:EC:BC:2F:55:FE
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:f5:a1:47:75:05:5e:e3:f8:12:c4:04:b3:70:f2:34:cb:
df:34:e1:0b:51:83:a1:df:32:14:ed:4e:50:3f:d3:f9:91:51:
de:cc:58:a1:ba:e1:ac:69:bf:f4:55:d5:9b:b6:8b:9d:7a:cc:
c7:05:1d:28:ae:6f:c8:87:7b:84:fa:f0:3f:2b:54:20:c0:4a:
15:ea:fd:d7:84:0a:41:35:bd:28:35:b4:ca:b1:94:a0:f2:2e:
39:d9:cb:25:30:94:9f:28:77:96:b6:02:7e:a2:64:1d:8a:50:
c9:89:0f:65:e6:ef:d4:16:e6:51:bb:47:2a:94:a8:db:4b:42:
c1:ff:13:a6:bb:a1:44:da:ee:d3:17:85:ff:f5:a0:ed:2d:8f:
e9:88:ff:e4:f0:33:2c:d5:c1:93:09:c5:e2:40:93:53:83:8b:
f7:e5:04:0d:19:27:47:11:ed:38:ca:22:60:6a:8c:58:af:0b:
4c:26:08:0a:c9:85:d3:a8:ea:3a:49:54:30:2b:1f:04:3c:99:
14:d2:cd:63:79:7d:55:04:4d:0d:5f:4f:b5:e4:1b:28:39:33:
b0:03:fd:f1:1d:99:68:6b:01:56:27:4a:3b:c2:a1:f6:76:c2:
42:52:d5:e3:39:3a:e4:71:f2:bd:75:e7:a5:37:91:e1:dd:20:
f7:19:f2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:41:47 2025 by rpki-client