Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: zQOfRYY1yUmBjaAkWg2JB+IU6PVoD6Mk/FGA9bepxw8=
Subject key identifier: F3:80:86:CB:D9:20:2A:FA:6A:8B:6F:B2:88:B8:CB:2B:19:BF:F3:5D
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019847ADB9360E041B80C5B7A0FEE35AA94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 10F3
Signing time: Sat 26 Jul 2025 17:00:24 +0000
Manifest this update: Sat 26 Jul 2025 17:00:24 +0000
Manifest next update: Sun 27 Jul 2025 17:00:24 +0000
Files and hashes: 1: Z__qWjsTqKN6H6Uy48R_joDrg6A.roa (hash: hy+rnvr7Ps+zzGaNk6QHsEt8A1/U9k/JFaxCitWq0s8=)
2: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: EyOqW+TNBCxvHs0YDgfZNPnRw1r6SSx1QYHZPG23Rvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:b9:36:0e:04:1b:80:c5:b7:a0:fe:e3:5a:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Jul 26 17:00:24 2025 GMT
Not After : Jul 27 17:00:24 2025 GMT
Subject: CN=f38086cbd9202afa6a8b6fb288b8cb2b19bff35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:e3:92:98:66:04:dd:d8:57:56:64:f9:85:
1a:95:cc:d5:07:6b:32:1b:df:93:89:a2:65:c8:d7:
b0:63:d5:23:f4:6e:0e:dd:03:91:e0:a0:b6:0b:63:
67:ef:c1:d1:fa:69:cc:cf:d3:ce:6b:94:7f:cc:0a:
7a:5f:40:3a:b8:35:15:94:10:34:fb:8a:ed:fa:9a:
ea:95:13:5c:9e:ff:9c:08:7f:10:2b:47:2f:d9:08:
bb:e9:99:e0:13:cc:07:67:0d:b5:c0:d2:58:5d:5b:
b4:ad:a3:57:a9:45:c9:87:ee:31:a8:0b:2a:6d:7b:
a5:d3:09:f8:0b:b3:48:82:70:c9:76:8b:3b:90:b6:
68:e4:35:f4:e2:95:ce:85:e0:35:d2:94:d0:ad:00:
ad:3b:fe:b7:23:fb:f7:48:ba:37:4e:bb:65:77:45:
ad:54:1a:df:86:2d:43:84:bd:b7:47:3e:ac:99:98:
94:67:ae:e1:4d:bc:fa:ef:ba:70:85:45:0c:47:98:
62:46:d5:af:8f:26:88:d6:28:2d:da:bb:c7:c7:98:
a9:5e:f3:74:d2:58:0a:44:7c:07:6a:cb:b3:9f:5f:
66:f5:8e:07:bd:c4:9f:4a:19:62:13:2a:a7:14:34:
30:14:e5:41:fe:90:7f:94:bd:2c:48:56:18:cc:3f:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:86:CB:D9:20:2A:FA:6A:8B:6F:B2:88:B8:CB:2B:19:BF:F3:5D
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a5:ac:fc:a6:94:1d:91:5b:3f:b6:72:7d:cd:ba:06:f9:eb:
f5:fe:5b:d5:ec:f7:bc:40:50:1a:fc:e9:16:eb:33:7d:73:00:
db:76:9c:b3:47:48:78:ef:df:08:50:26:e4:68:52:c4:35:69:
81:e7:3f:c2:a3:07:54:06:8a:43:47:8c:ba:39:3d:36:c2:57:
90:73:71:e7:95:23:d9:5e:34:59:1a:45:62:4b:7b:7a:91:23:
fc:65:dc:b6:ce:9d:43:00:bd:2f:d1:a4:f5:d1:95:55:87:39:
d4:c3:e7:d0:eb:e2:75:2c:88:36:22:5b:e3:ee:6c:87:e1:8b:
59:bd:68:a0:0d:6c:d0:9d:6e:97:e1:8b:6a:a6:90:1b:77:95:
6a:15:a9:57:78:76:72:e8:e8:73:81:21:da:94:9d:87:5e:49:
12:2d:e1:48:b2:f2:61:98:d5:da:85:92:fa:9b:3c:57:03:f6:
31:dd:73:7d:55:b5:f4:77:e7:0f:2d:60:de:b8:06:19:2e:20:
89:31:10:8e:c8:ed:b9:b9:f6:55:bb:1e:7e:99:11:05:2d:7d:
38:2e:02:f6:f4:8b:5f:ba:34:d4:2f:74:61:70:72:bd:f5:97:
90:c9:2d:37:a2:fd:f9:fc:ef:7d:0d:db:17:16:1b:17:f6:09:
bb:fc:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:43:56 2025 by rpki-client