Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: x1uIC90lALezF3QXrUaBUNelC91xsJVXisopnoOONs0=
Subject key identifier: 16:46:6A:4A:6F:68:31:57:90:83:C0:36:66:C1:10:6C:80:29:EC:1B
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0196C91728EA658D8C03646258D164E1A916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 0598
Signing time: Tue 13 May 2025 10:01:00 +0000
Manifest this update: Tue 13 May 2025 10:01:00 +0000
Manifest next update: Wed 14 May 2025 10:01:00 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: nL95m/0GX9n5mXEsYS8tuybU/JRX7Wy7kalFnBAewbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:28:ea:65:8d:8c:03:64:62:58:d1:64:e1:a9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: May 13 10:01:00 2025 GMT
Not After : May 14 10:01:00 2025 GMT
Subject: CN=16466a4a6f6831579083c03666c1106c8029ec1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:72:59:e1:b8:8c:8a:45:3e:9c:12:47:5e:
38:03:d7:83:74:b7:7f:39:c1:f8:14:8a:d3:b1:5b:
dc:55:f5:cf:19:89:09:7c:76:e4:26:16:b4:4f:60:
a3:cb:cf:6a:1b:b0:76:5d:1a:0c:d4:ca:d1:ef:56:
b8:18:2d:5d:59:c4:13:4d:44:db:cf:47:60:4a:4b:
21:ba:e7:01:26:d7:ed:93:b2:25:fc:07:c5:47:5c:
5d:a7:90:6a:4f:09:19:74:36:e1:0a:21:5e:b2:5b:
61:f7:3f:19:80:74:ce:7f:75:f5:3e:ff:4e:41:37:
a0:ff:62:55:76:d2:c5:2b:98:0e:04:ff:cf:ee:4d:
6a:88:a9:c8:97:23:17:08:17:af:74:cc:33:1b:ba:
dd:7b:e8:3d:15:8f:2a:47:34:43:6d:2a:f2:fe:b7:
74:68:3e:db:a1:b7:49:91:52:51:5d:d5:2a:f6:b3:
3c:3a:14:f5:b4:cc:6f:98:03:e7:19:59:60:d4:bc:
40:b4:ed:8d:d2:c2:37:fe:e3:46:5e:44:42:54:b4:
3a:c1:0f:92:18:93:fa:22:21:eb:cb:9e:ac:1c:b6:
66:35:4d:9f:d1:cc:1e:48:33:3c:8c:a5:aa:73:4d:
cc:0e:a1:98:20:cb:7b:39:41:bb:9c:6b:30:5d:cc:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:6A:4A:6F:68:31:57:90:83:C0:36:66:C1:10:6C:80:29:EC:1B
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0f:de:a0:07:83:62:1c:a5:fb:92:c2:f4:b1:fd:17:01:e3:
ac:c3:e6:30:40:28:2b:01:aa:cc:d8:bd:2d:23:32:9c:8c:5d:
a7:8c:c1:75:b3:4e:f6:42:1e:40:b4:03:a5:08:a7:19:3b:1c:
86:ef:c9:f7:d6:d0:90:a5:e1:fb:af:dd:06:54:3c:f8:56:26:
16:e9:44:5e:c4:17:e2:02:69:b0:07:fb:f0:49:b5:6b:60:df:
1d:f3:b6:20:30:70:8b:6d:f3:4a:7d:5e:11:5b:b3:95:ff:50:
2e:ec:74:f7:5e:be:2c:43:8f:38:67:32:f9:8b:1a:b2:ae:32:
81:ae:98:6c:9e:02:23:8e:71:9a:56:73:e4:6f:ee:e7:9e:8e:
e9:09:7d:a3:fd:03:b7:0a:28:6a:59:c2:03:b3:2c:e8:e1:de:
7b:b6:36:f2:e7:ab:a9:cb:e6:94:38:3b:49:f8:dd:0d:8b:ab:
e7:25:ae:90:09:08:02:e9:ea:f1:79:83:ce:76:f7:3b:26:37:
78:93:50:bf:d5:7c:8e:80:46:ae:40:19:bc:b9:4f:bb:ec:f5:
32:b1:cc:71:02:51:b7:08:33:2f:0d:a2:30:bd:2a:c6:dc:a9:
b8:ee:c0:3b:6f:35:10:3a:0e:63:91:6a:9b:3c:e9:90:61:22:
f2:79:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:23:41 2025 by rpki-client