Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: 86G6GI7Hw9Ae2+qb9wzN+Hnb7hZH8OGL6OSGxie2jgo=
Subject key identifier: 55:12:83:3D:C7:1B:43:F4:A4:6F:8B:06:76:8C:BB:F0:3A:F7:4E:C7
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 019A4EF43EF0E65EE02A3044BBC9D60D7E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 076B
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: OogRiE5TTtcG9DeTtUR/ahrArq2VP1wBrOKwdWC9Pvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3e:f0:e6:5e:e0:2a:30:44:bb:c9:d6:0d:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=5512833dc71b43f4a46f8b06768cbbf03af74ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:d3:76:44:47:03:5f:cb:ab:68:02:79:14:
23:d4:aa:10:4b:90:2e:b0:c3:a2:7c:d0:ce:f6:f2:
4a:21:58:6f:85:f7:0b:db:f2:ca:aa:7a:8b:b6:55:
92:92:1a:19:45:ff:28:5d:fd:35:dd:83:54:59:28:
48:28:0a:e4:ea:08:0e:7b:e0:38:24:72:fd:72:14:
90:fe:06:2a:e4:07:34:80:11:e2:e2:17:63:3e:76:
55:20:59:77:9b:9b:07:c0:c6:dc:31:d2:12:ff:ce:
34:1a:72:61:30:52:7e:8e:2d:9d:a2:3f:b1:c7:b6:
43:ae:36:e1:b0:ae:39:af:8e:b7:c9:8b:96:6f:19:
ca:9d:6e:dd:13:73:33:4b:c5:2f:63:8f:81:31:c2:
bc:56:1f:34:0e:32:ff:66:97:d7:ae:30:00:4d:6d:
c6:be:ec:d4:eb:60:f3:e5:07:9a:57:6f:d1:7d:1e:
86:7d:c4:2d:4c:1c:d1:dc:78:f1:5e:fd:0a:45:6e:
58:28:ea:1c:6e:e3:8e:32:4e:bc:da:33:76:f5:ce:
78:00:41:67:2b:e0:83:07:a5:a7:eb:51:ea:3f:86:
bc:df:29:99:d0:8c:a3:9c:21:b1:46:04:db:66:12:
ad:7f:0b:e5:73:17:e6:ab:23:b5:81:8f:5f:84:3a:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:83:3D:C7:1B:43:F4:A4:6F:8B:06:76:8C:BB:F0:3A:F7:4E:C7
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ba:c2:27:b4:8e:88:08:d4:59:2c:df:8b:75:34:47:63:b3:
c2:f3:99:c5:be:e2:65:f5:c3:d6:dc:b4:bd:2c:07:bd:45:f1:
0e:f5:55:09:66:de:24:db:2f:11:15:30:49:ee:d3:68:62:ca:
5c:b4:9b:32:95:62:b8:2d:3a:93:0d:c7:72:74:2e:9b:40:d4:
3a:ba:5a:3b:4f:b5:66:a2:d6:72:2a:80:f4:0f:19:b3:c6:3e:
e3:54:9e:16:6d:f3:56:49:a2:a5:97:22:ee:4f:ba:e2:86:66:
f9:eb:64:a5:49:e7:88:93:7f:67:de:42:68:aa:f2:f6:73:f7:
ca:24:0e:ec:46:bd:0d:77:76:e7:48:a6:ad:65:bd:eb:fc:af:
d1:fd:3f:68:00:8b:4a:2a:d9:19:f2:f3:78:17:44:73:a9:f0:
fb:59:f3:71:60:44:d6:53:ca:7d:e6:4c:8a:67:f3:b9:5e:d1:
71:5c:cb:8c:13:76:0a:84:3c:62:fe:46:91:6a:f6:60:41:00:
9a:b1:2f:65:3b:44:e5:26:99:83:e5:e9:f0:0e:24:ec:5b:de:
9b:99:f0:0d:80:29:04:8f:c1:f3:33:97:ab:7d:46:ac:10:87:
46:b8:2a:f5:79:72:3f:ea:f8:a6:0e:c2:32:77:05:79:98:43:
55:90:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:02 2025 by rpki-client