Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: ijuI1duSzuwCrQicckdErEra8ZcBt7I+d6US2eO2kBI=
Subject key identifier: 4E:76:A1:C1:70:FB:27:49:BD:44:62:0A:84:C6:D0:AB:B3:7A:29:36
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0197808E1D3A9A3737D44FE2A3630DCF6616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 05F7
Signing time: Wed 18 Jun 2025 01:01:26 +0000
Manifest this update: Wed 18 Jun 2025 01:01:26 +0000
Manifest next update: Thu 19 Jun 2025 01:01:26 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: f9tPe6vy311+opd3OcbdLCrzVAHqVxgG3sWiIGqB5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:1d:3a:9a:37:37:d4:4f:e2:a3:63:0d:cf:66:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Jun 18 01:01:26 2025 GMT
Not After : Jun 19 01:01:26 2025 GMT
Subject: CN=4e76a1c170fb2749bd44620a84c6d0abb37a2936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:32:d9:5e:c1:71:31:4e:45:05:99:7d:6b:
1d:81:36:2a:0e:02:ec:05:d7:0d:f6:5b:3b:f8:a9:
7e:fe:06:30:f8:0c:4e:b4:a8:00:e9:49:19:f0:a7:
19:52:23:dd:07:b8:e6:8e:75:f6:b3:9c:51:94:a9:
ea:dd:d0:9c:bd:5d:fa:e1:8b:f5:58:de:45:dd:9a:
d4:00:a5:42:cc:95:91:62:32:ab:54:fa:21:0f:93:
aa:b4:70:be:b6:f5:35:de:3b:6a:a0:88:3e:b7:cd:
ab:21:1e:58:20:c3:b3:08:77:e9:2f:51:8a:8e:12:
5d:b4:87:f4:f7:44:e0:90:10:3d:b7:70:6a:16:58:
cd:f1:4a:ef:b9:5d:cf:2d:ff:67:bf:45:9f:62:6c:
d5:67:62:3b:97:c0:c3:a0:35:b4:3f:83:f3:e0:c7:
d5:5f:81:ac:e1:fa:ef:98:81:40:be:74:c4:6c:2b:
10:a5:ba:8a:89:99:df:87:0d:bd:28:60:46:69:95:
55:b8:f4:a4:e6:49:db:2a:64:7e:c9:0e:41:8d:f9:
2a:d7:fe:bc:d2:65:9f:35:5b:46:3c:41:f2:79:2d:
cf:79:61:fe:ae:6a:50:35:03:e3:52:76:b0:cc:42:
6f:87:b9:63:81:9b:e8:7a:1b:37:34:f9:bb:6e:69:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:A1:C1:70:FB:27:49:BD:44:62:0A:84:C6:D0:AB:B3:7A:29:36
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:47:0e:82:b5:7f:39:ec:62:17:07:d1:53:38:77:78:aa:91:
8c:1a:3f:af:9a:a1:fd:8e:56:b0:30:c4:4e:7f:7e:e6:91:78:
55:80:ea:9a:64:24:bf:57:bd:ca:22:e4:7f:67:c0:d0:44:0a:
e3:11:15:25:6f:24:77:4c:40:98:60:83:6d:f7:e1:ac:d1:86:
41:14:e7:89:a8:d8:0b:ef:87:39:f5:9f:96:35:09:13:29:f9:
7f:a1:45:a8:f5:50:99:e5:6a:31:e4:71:a0:52:b4:5a:b1:ff:
e2:e0:55:d4:29:21:4c:2c:5d:3c:90:ca:98:24:50:d6:6d:d5:
66:97:c5:29:ca:58:91:bd:c9:32:6b:88:10:e9:12:80:b1:a7:
11:19:a9:b3:63:15:55:23:34:50:b2:5a:db:d7:fc:69:a9:a7:
78:7e:cf:0f:b4:b9:cd:ba:94:ec:dc:42:b9:a2:9d:46:7d:e4:
e6:55:77:1a:11:68:85:3a:69:21:a3:43:59:22:64:42:e1:65:
5c:1c:d1:9d:72:4d:8d:12:74:14:6b:19:ba:33:73:49:9b:13:
54:a5:ec:22:f8:19:e0:69:c0:33:be:a6:9e:b8:2e:f8:85:c3:
b3:f0:85:12:df:62:b3:33:b2:6c:7a:21:62:9f:19:b2:4a:79:
7a:5b:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:32:55 2025 by rpki-client