Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: FSouW7zxcjxO7q3Wd3tFFP2SnsA2zjVnjfHvDbsG880=
Subject key identifier: 1E:E7:C8:93:02:D1:54:C3:1A:8E:D1:B8:ED:A5:D2:8D:BF:82:E9:11
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0197469DC46CEA766AFF627DE3B6912924F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 05D9
Signing time: Fri 06 Jun 2025 19:00:33 +0000
Manifest this update: Fri 06 Jun 2025 19:00:33 +0000
Manifest next update: Sat 07 Jun 2025 19:00:33 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: vSiitOi4MgXEc/5R4yg9Z202c34csN3K3TZkOBcTfg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:c4:6c:ea:76:6a:ff:62:7d:e3:b6:91:29:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Jun 6 19:00:33 2025 GMT
Not After : Jun 7 19:00:33 2025 GMT
Subject: CN=1ee7c89302d154c31a8ed1b8eda5d28dbf82e911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:05:38:a6:ab:b6:9b:c3:04:3f:e9:29:a5:
f6:86:88:eb:d9:6f:3e:2e:a7:da:35:10:71:89:53:
de:74:39:82:99:8b:72:f4:2d:b5:43:6a:58:86:eb:
9a:43:85:89:9d:eb:d8:f1:8b:a7:be:bd:9c:48:95:
a5:f9:b5:d1:1d:33:8e:e9:85:66:5f:1b:d3:81:28:
96:2c:9f:23:8d:02:d0:93:4d:d9:40:d2:3e:b4:39:
b5:1b:89:5a:e0:a4:17:a1:c3:61:31:6e:ea:6a:c7:
9b:db:e9:cd:2d:da:d0:46:6d:dd:87:49:c7:ef:70:
1a:f5:08:75:30:b7:07:a1:24:5e:a1:88:ce:54:9b:
26:0a:01:e4:06:33:13:1b:87:64:2e:2d:a2:b2:b5:
a4:83:74:4a:f9:cc:75:7e:e3:38:97:41:d5:1f:cf:
43:44:57:7e:2a:56:95:54:59:81:3e:4c:01:18:b9:
eb:15:c2:7a:08:36:c2:fc:ab:c0:e2:60:5d:9b:69:
97:33:89:05:b3:e6:33:46:3b:cc:45:93:08:dc:87:
98:b1:0f:e8:fb:f9:8c:08:95:41:e1:ae:93:f6:cb:
43:cb:9b:5e:67:7c:d7:ad:e6:99:ae:6e:5c:59:3b:
fb:ac:f1:d6:11:3e:03:5b:7f:50:c5:26:0c:44:2c:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:C8:93:02:D1:54:C3:1A:8E:D1:B8:ED:A5:D2:8D:BF:82:E9:11
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:06:52:9f:9a:a9:47:d5:1a:85:1d:bb:d6:56:8e:1d:55:
06:cb:16:14:b3:e8:09:59:db:b5:59:d6:bc:d6:4f:3f:9e:cc:
1a:2d:0b:32:db:d6:bd:13:cf:1d:e6:bd:fd:a1:e7:ce:bf:d5:
72:06:0d:29:4e:27:05:27:d1:e9:0e:f0:30:a0:44:83:bf:d1:
b3:2d:3f:dc:19:97:d6:d0:b6:b9:d5:ac:38:f3:ea:fb:88:76:
cd:83:98:58:28:63:56:a0:21:3f:0a:30:43:1b:25:2d:4d:93:
1f:41:81:76:09:72:82:8a:11:71:aa:50:47:5e:bd:0d:eb:d5:
d9:2b:45:f2:e5:23:f8:ed:d9:7e:48:e3:4f:6d:56:aa:ef:0f:
af:ae:87:5f:59:38:f1:d8:d3:82:92:95:70:ab:df:46:75:2c:
7c:be:b5:ba:1f:82:a5:9b:62:5b:77:4b:ed:95:ee:1e:44:ff:
d9:50:9f:97:9e:60:2b:d6:9e:62:9e:77:4f:a1:64:43:10:06:
1a:3d:db:d7:fc:87:4c:bb:ed:59:52:d5:fe:24:d0:8a:c0:ea:
9b:7b:5d:10:5a:76:1f:14:4f:44:6f:11:65:c8:b7:8d:f0:1c:
7d:2b:3d:be:f8:c9:9f:dd:a9:aa:06:37:c5:61:06:46:2d:f2:
5a:5b:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:09:04 2025 by rpki-client