Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: N8grhWyaJw1IskuX61rJjaXSiNfG3XPJZyvrgbNrmbg=
Subject key identifier: 79:D7:F2:96:83:C3:AC:8B:AB:CB:54:E5:B7:CF:83:0B:9B:57:FB:C9
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 019A71B819D525DF6F4699504E73A58A3E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 077D
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: C3qaA6cogQF/dqG+oj9dy6QfHlpexqQAabDdLpNlW+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:19:d5:25:df:6f:46:99:50:4e:73:a5:8a:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=79d7f29683c3ac8babcb54e5b7cf830b9b57fbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:02:af:62:17:b5:af:a3:09:a6:c6:0c:b1:
e4:bf:2a:e1:03:71:8e:e3:48:2f:ac:8e:7c:9c:5a:
12:76:88:34:29:00:1f:86:ee:da:99:df:bb:c7:d7:
97:a9:27:2e:4b:33:0c:e6:74:f5:b8:ff:36:cc:ad:
76:0f:a4:ee:94:7b:d5:fe:63:78:5c:e9:21:56:ef:
f6:c4:40:39:53:6c:e3:96:14:32:cc:55:43:d2:fa:
26:05:4b:c1:75:e8:6b:17:04:ab:59:e6:42:97:02:
4e:53:2f:48:fb:9f:e1:ed:2f:db:34:71:e8:3f:00:
16:e3:1c:3b:4d:db:c8:3c:7d:95:7d:5f:20:09:5f:
f5:c9:6e:1c:dd:f4:0b:f8:f4:b0:4e:e9:33:27:1a:
52:07:c6:97:12:7c:04:1a:13:7a:b5:28:c4:1a:23:
1e:05:21:1e:7f:95:f1:8c:dc:06:b9:38:8a:ce:2d:
66:86:9d:d0:f9:54:e7:a8:6a:53:ee:0a:7a:a9:32:
fd:26:08:43:3b:08:17:77:c9:a3:22:79:36:dc:97:
7b:1c:c6:26:c7:95:21:45:a5:c1:74:cb:7c:a4:41:
92:1d:43:85:25:b5:53:81:6c:9b:c0:43:f7:b5:1e:
7c:5b:dc:ae:50:4d:65:90:84:16:2b:46:a4:58:45:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:F2:96:83:C3:AC:8B:AB:CB:54:E5:B7:CF:83:0B:9B:57:FB:C9
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:73:8f:53:67:97:59:c7:72:b7:0e:c8:2d:05:f0:0c:35:85:
25:9a:95:7c:13:c8:1e:31:d5:bc:04:fe:e8:00:89:5b:15:97:
12:70:2a:2a:12:24:39:0b:51:73:e1:cb:f6:8d:6f:aa:76:e8:
9c:f1:85:dd:ff:53:67:3f:f3:c2:08:84:41:cc:a3:b5:86:73:
45:ca:95:fd:f0:c3:66:39:6c:0c:55:f9:07:eb:91:d2:66:f3:
b7:14:09:b5:28:f4:f2:28:3f:63:1d:68:51:a3:be:f1:e5:c5:
88:ce:4a:24:e6:42:81:03:50:60:81:5b:7a:bb:ac:b1:04:5b:
67:fc:51:3d:06:42:40:9e:5e:b6:a9:97:27:2e:bd:5d:2a:92:
f3:e0:e7:f6:c3:af:3a:2a:fb:8a:da:d6:42:26:c1:fa:ea:d2:
a5:c8:73:1d:2a:c8:a6:2c:d9:e4:ba:b6:96:25:f4:64:47:2f:
f2:68:ea:0e:51:d3:16:8c:6d:e0:f7:27:fa:c8:1e:fc:0e:f8:
c5:27:75:c5:5e:77:18:54:e9:62:06:08:9d:22:5f:ff:11:0c:
52:b6:23:47:23:c7:c3:75:7c:c2:3e:24:08:e4:f4:dd:7a:ef:
3a:63:bb:df:cb:a6:f1:38:5a:5a:ab:99:56:57:47:80:d1:82:
c3:1c:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:23 2025 by rpki-client