Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: 3+IzhYK4tyB34AbnHg59wqE5t0KUFTu/evTVmpfwcJQ=
Subject key identifier: 83:6C:4B:B4:A1:1C:C0:62:11:D8:A5:A0:99:DA:F7:7F:A2:18:17:80
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019655A56C32740721B4A4A5192DE59A0843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 0FF1
Signing time: Mon 21 Apr 2025 00:00:26 +0000
Manifest this update: Mon 21 Apr 2025 00:00:26 +0000
Manifest next update: Tue 22 Apr 2025 00:00:26 +0000
Files and hashes: 1: F478KPNWaWgwHEjAUDWV7KlTqQA.roa (hash: fiVEyWrn82XeJgJcuTMWEO2YQxgfDNcoh754eidkrnE=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: KurSUVdI5f8YsNo23HIjh/fMnURH1htc1LR2iIbkPbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:6c:32:74:07:21:b4:a4:a5:19:2d:e5:9a:08:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Apr 21 00:00:26 2025 GMT
Not After : Apr 22 00:00:26 2025 GMT
Subject: CN=836c4bb4a11cc06211d8a5a099daf77fa2181780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:67:f2:d1:9a:1b:d8:0d:f2:ee:a6:0f:b8:
15:6f:1a:4b:a5:d7:2c:88:ea:04:ce:80:d7:f3:25:
87:3e:9e:e7:f2:ca:52:17:b0:5e:26:b6:b4:c8:42:
c8:5d:5b:e4:bd:94:f3:6a:6b:72:bd:0d:08:f5:63:
c3:1c:24:e4:2d:e7:02:85:ca:52:35:9e:8d:c4:71:
91:af:52:73:ac:5f:43:90:8a:b9:c2:f6:bd:79:88:
04:28:06:1d:ae:c8:4f:d7:3b:fb:14:32:02:61:8c:
11:3b:d3:5a:0c:0c:37:58:a0:8e:14:81:cf:d7:cc:
e1:82:d2:87:6b:1c:72:74:bc:1a:75:c8:d0:91:52:
aa:fb:75:09:27:59:ef:3f:8c:1e:ce:fc:2e:81:fe:
53:ff:1f:23:6d:1f:f1:01:e3:d4:da:2e:51:9b:30:
11:80:22:c9:e0:7b:7c:df:3e:f4:95:1f:72:49:26:
df:cf:81:2d:08:fd:0f:56:0a:15:15:1f:d2:ed:ff:
9b:c7:b5:34:d6:87:a9:9c:25:1c:99:b7:fa:1b:2c:
d0:91:bd:7f:23:de:8a:43:f4:f0:bb:6c:95:58:67:
be:e3:80:3f:d7:80:f9:79:30:ac:62:fd:a1:fb:05:
20:46:0b:a1:c8:6e:fa:49:4b:96:70:39:b5:1e:a5:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6C:4B:B4:A1:1C:C0:62:11:D8:A5:A0:99:DA:F7:7F:A2:18:17:80
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:91:7c:5f:6d:0f:33:d2:42:88:3a:65:3a:50:73:88:41:06:
c2:53:35:2c:8f:1f:14:5d:75:1a:63:3e:71:1f:f8:8f:f5:e0:
4b:58:2a:50:02:1c:c9:b9:6f:6f:56:26:90:b0:f3:22:24:9f:
18:2e:a8:d5:2d:9b:2e:11:41:87:70:57:2a:fa:69:4e:a6:3c:
f6:ea:f4:df:30:dd:f3:5f:c0:53:97:ab:92:f3:71:fc:28:34:
3e:ff:38:02:69:50:3b:8b:b3:02:50:c7:73:75:9e:d5:b5:58:
7e:62:9b:74:36:96:8d:00:2a:d3:28:97:d8:8f:2e:de:8b:e0:
0b:3f:30:22:64:0b:9a:90:9f:fe:e1:d2:c0:12:ec:04:e8:7c:
d4:8a:33:9f:80:49:e5:f6:49:b6:77:31:f4:10:38:9b:23:4e:
df:08:26:a8:fb:d9:b6:ed:42:60:3c:ba:52:b4:04:a3:58:c3:
fc:1c:e5:c4:a8:41:b8:54:42:42:57:c1:d0:3d:11:57:d6:55:
72:f9:fd:92:b1:93:86:59:c0:20:01:d1:d3:f8:7b:fe:79:ae:
d8:13:ac:ed:1b:8f:45:66:1b:30:b5:6b:90:cf:35:5a:bf:3f:
bd:44:c9:af:ad:8f:10:d5:5d:32:a8:9f:dc:a8:f8:e8:09:d2:
1a:11:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:29:24 2025 by rpki-client