Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: 1AQXeSwH5NKGiMeq/sb0y+OZv4oZHubOgWnUEH76nFo=
Subject key identifier: DD:74:52:63:9A:EE:7B:D4:1F:B5:F8:A4:8D:FC:E4:43:0E:7D:7F:CA
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0197B6A16E182681A10C00EE30B50969A7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 0613
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: +lj/MpMMf+5lFRwUUumztKPHxljorVptwmoFDoeDo8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6e:18:26:81:a1:0c:00:ee:30:b5:09:69:a7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=dd7452639aee7bd41fb5f8a48dfce4430e7d7fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:dc:b7:62:68:8e:14:a8:00:fe:20:69:57:
80:6c:57:9a:3e:73:79:d5:8b:35:ac:9f:d7:16:77:
93:aa:79:75:9d:3b:1c:83:6e:84:44:38:68:d6:67:
35:70:ac:f6:6b:31:35:eb:d9:f6:98:b6:32:8a:a1:
8f:0f:5f:53:36:75:ea:67:5b:f0:ad:f4:56:d9:0a:
df:48:06:a8:f5:04:85:bd:f8:1b:61:1b:83:58:c9:
8a:47:a4:2a:41:23:b0:13:59:ff:01:15:7c:f2:d5:
8e:3b:55:96:2d:16:69:f9:95:4d:33:18:aa:d9:69:
8a:39:b7:f1:df:7d:f5:98:cb:94:b1:09:b2:e6:82:
94:bd:e5:56:72:18:32:f3:4d:f9:ff:28:4d:37:43:
c6:69:4f:6a:82:fa:a1:e1:ed:a5:d2:dd:06:95:de:
f6:d4:08:bb:1e:4e:aa:37:8c:b3:62:84:6e:ba:46:
2b:68:96:0e:ae:5b:77:40:1b:9d:d1:1d:97:f5:c0:
de:e1:33:f5:70:10:50:bd:01:b1:03:c1:1e:a9:1d:
02:72:c8:9e:5b:f3:d3:0c:7c:e4:d5:f1:a1:dc:d0:
4a:03:ba:75:51:23:90:38:ca:97:a5:b9:b9:20:0b:
8c:ab:0e:9d:7e:51:da:e5:ba:7e:01:e0:93:ea:7f:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:52:63:9A:EE:7B:D4:1F:B5:F8:A4:8D:FC:E4:43:0E:7D:7F:CA
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:80:6f:97:25:e2:06:81:fb:b0:95:5b:a8:c2:03:d2:a4:80:
63:a1:0b:4c:24:8e:0a:14:ed:d8:d4:7c:2a:33:a0:a0:e2:fe:
73:e3:62:ec:f4:6f:53:a5:36:b5:51:5e:1c:d2:8e:eb:5b:eb:
46:09:1e:d0:52:b3:81:f8:b9:f3:98:5d:ef:66:8b:86:ae:6d:
1d:f6:42:c6:c9:5e:34:aa:2c:df:cc:86:f0:f8:5c:e7:65:ec:
ef:cc:0e:23:16:62:66:b5:e5:b1:8b:9a:56:f8:1a:00:52:ba:
e1:f2:20:c1:7f:53:d7:2f:ff:21:47:cc:bf:0a:a3:f3:f2:c5:
22:c5:49:72:c4:9f:72:18:fb:72:0e:51:1b:cd:1b:c0:cf:88:
d2:60:1a:96:2e:5a:84:25:23:36:1e:7c:5c:69:69:c6:9a:b7:
65:7c:7c:36:dc:85:9e:c9:46:11:a0:58:18:50:50:20:ab:d5:
67:59:8b:2b:67:b0:99:9d:f1:87:a3:4e:0c:c0:28:9a:5b:17:
5e:24:2c:43:ee:32:13:11:49:19:7e:f0:21:45:b7:64:91:df:
5d:6d:3c:13:36:77:64:18:30:97:88:c7:a8:38:15:bb:71:c0:
0b:31:0e:9f:07:e2:bd:73:95:81:89:21:85:3f:b7:ed:97:aa:
dd:63:92:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oW4YJoGhDADuMLUJaaflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTAzZjVmNWVmZTU4OTNkZDZhZDg5ODYyYzQ3Mzc1ZDMx
ZTNkNDAwHhcNMjUwNjI4MTMwMjAyWhcNMjUwNjI5MTMwMjAyWjAzMTEwLwYDVQQD
EyhkZDc0NTI2MzlhZWU3YmQ0MWZiNWY4YTQ4ZGZjZTQ0MzBlN2Q3ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr/ct2JojhSoAP4gaVeAbFeaPnN5
1Ys1rJ/XFneTqnl1nTscg26ERDho1mc1cKz2azE169n2mLYyiqGPD19TNnXqZ1vw
rfRW2QrfSAao9QSFvfgbYRuDWMmKR6QqQSOwE1n/ARV88tWOO1WWLRZp+ZVNMxiq
2WmKObfx3331mMuUsQmy5oKUveVWchgy8035/yhNN0PGaU9qgvqh4e2l0t0Gld72
1Ai7Hk6qN4yzYoRuukYraJYOrlt3QBud0R2X9cDe4TP1cBBQvQGxA8EeqR0Ccsie
W/PTDHzk1fGh3NBKA7p1USOQOMqXpbm5IAuMqw6dflHa5bp+AeCT6n8TdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN10UmOa7nvUH7X4pI385EMOfX/KMB8GA1UdIwQY
MBaAFGWQP19e/liT3WrYmGLEc3XTHj1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpBX1gxNy1XSlBkYXRpWVlzUnpkZE1lUFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYWEyZTEtNTIxYi00YTVhLWFhOWEt
YjRiNTgwMWVjYTBkLzEvWlpBX1gxNy1XSlBkYXRpWVlzUnpkZE1lUFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYWEyZTEtNTIxYi00YTVhLWFhOWEtYjRiNTgwMWVjYTBk
LzEvWlpBX1gxNy1XSlBkYXRpWVlzUnpkZE1lUFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoBvlyXi
BoH7sJVbqMID0qSAY6ELTCSOChTt2NR8KjOgoOL+c+Ni7PRvU6U2tVFeHNKO61vr
Rgke0FKzgfi585hd72aLhq5tHfZCxsleNKos38yG8Phc52Xs78wOIxZiZrXlsYua
VvgaAFK64fIgwX9T1y//IUfMvwqj8/LFIsVJcsSfchj7cg5RG80bwM+I0mAali5a
hCUjNh58XGlpxpq3ZXx8NtyFnslGEaBYGFBQIKvVZ1mLK2ewmZ3xh6NODMAomlsX
XiQsQ+4yExFJGX7wIUW3ZJHfXW08EzZ3ZBgwl4jHqDgVu3HACzEOnwfivXOVgYkh
hT+37Zeq3WOSJw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:22 2025 by rpki-client