Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: ueLERppPwqOi6P9351KJzfw7LpS6td4E4OrKXAlcd+A=
Subject key identifier: 66:07:F4:D7:34:4E:11:F7:F6:3A:55:12:55:96:91:03:B7:41:04:68
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0199FBEBB4029AE7592EAB3DDC5661A9C694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 0740
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: rRwSNanm4xrai9SZFb7P+6menwwAlv18nbfaLHXPqBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:02:9a:e7:59:2e:ab:3d:dc:56:61:a9:c6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=6607f4d7344e11f7f63a551255969103b7410468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:33:dd:fc:57:19:e2:c6:92:08:ef:b5:95:
00:e4:e4:00:61:a3:f6:a8:71:5d:ab:df:1e:a0:53:
65:5b:11:0c:51:6a:9b:90:b3:6a:a4:06:4d:58:c2:
f6:ea:3b:e7:3c:ec:5b:27:9d:d0:91:3a:e9:e0:52:
fb:40:e7:56:7b:be:3b:b1:ed:73:7b:bc:9d:ef:5b:
f9:01:aa:77:f9:ad:7b:2e:a2:fe:9d:42:16:fe:06:
2b:ce:84:bb:55:9f:e0:e2:57:0f:31:df:9e:42:47:
3d:f9:a7:27:c8:7f:37:f0:c6:16:87:04:75:41:0a:
54:dc:88:87:ce:7b:4f:b7:1c:22:a4:92:68:8b:99:
72:75:53:9d:11:b3:89:42:4d:fd:2f:51:61:4a:b7:
a7:0d:e0:fd:e0:41:1f:2f:72:9b:e7:af:51:25:72:
db:c9:b6:d9:c0:da:f4:5a:5f:39:69:9b:19:44:c5:
40:58:30:8a:5e:c0:a4:9b:45:56:c9:19:01:a3:2e:
db:87:ce:a9:8d:98:0d:77:4b:7c:38:fc:73:f7:76:
89:ae:3d:1e:46:e2:94:5a:13:d1:8c:14:83:67:e5:
49:18:1f:6f:3b:4c:96:8e:1a:66:34:b2:a3:9e:ae:
87:a5:93:d4:d8:30:56:39:81:bb:e8:97:6e:c9:03:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:F4:D7:34:4E:11:F7:F6:3A:55:12:55:96:91:03:B7:41:04:68
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:6a:c8:fb:3f:a7:be:1f:b4:c5:03:fd:1c:d5:06:02:8b:
e4:97:7c:a5:6a:5f:d6:ce:16:c7:80:a9:e8:2c:6d:3f:03:55:
09:36:56:9d:9f:4c:e7:1b:13:42:49:7a:4d:fe:da:ef:da:e8:
c7:c0:8f:81:49:cc:30:f5:18:7d:49:3b:33:f8:5c:2c:1d:14:
4e:b2:47:ad:71:ff:e7:a2:9a:8d:ae:3f:f0:c6:4f:b0:3b:38:
59:d7:da:7d:6e:d6:e8:13:98:18:6a:06:62:eb:e3:a0:68:f9:
85:36:7a:89:85:67:4d:8b:38:96:29:54:8f:a1:18:9e:85:ba:
20:4b:cc:2c:a2:5a:cf:53:a9:30:37:59:59:64:8c:62:63:bd:
19:9d:15:7b:94:82:4a:11:16:5d:c8:45:b7:c2:52:03:33:b4:
c3:ac:f0:ad:d6:f1:20:5e:22:5f:ff:f7:8d:52:45:36:8a:6c:
01:3a:2d:bc:1f:f5:c1:21:28:18:c0:86:8d:f2:4a:2e:ce:57:
5f:b1:19:86:24:a2:d1:bc:92:07:16:92:28:4f:cd:9b:69:26:
54:b9:da:50:25:bb:59:9d:c2:01:a7:23:68:20:33:2c:95:f3:
5a:ec:6d:f4:61:6f:23:85:5a:cc:bb:7f:88:e2:03:f7:6f:15:
d8:9a:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:26 2025 by rpki-client