Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
File:                     Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft (raw, json)
Hash identifier:          QqhYkQZyTx2xHxnW7nP3nxppINq2kc/7AgirqwjAAu8=
Subject key identifier:   E2:F1:65:E4:4D:FE:F2:3E:EB:F5:A0:0C:4B:6C:EA:75:76:07:79:A9
Authority key identifier: 62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72
Certificate issuer:       /CN=629d135a15c74ca97cdecfd2ff39a9f997694972
Certificate serial:       0196591511B04AF50390FD951D25AC4B1AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
Manifest number:          0344
Signing time:             Mon 21 Apr 2025 16:01:15 +0000
Manifest this update:     Mon 21 Apr 2025 16:01:15 +0000
Manifest next update:     Tue 22 Apr 2025 16:01:15 +0000
Files and hashes:         1: Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl (hash: aUHGCpkSVQvbM3wTsWIhrkkUFAVmjTM59c2ZN8j1igw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:15:11:b0:4a:f5:03:90:fd:95:1d:25:ac:4b:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629d135a15c74ca97cdecfd2ff39a9f997694972
        Validity
            Not Before: Apr 21 16:01:15 2025 GMT
            Not After : Apr 22 16:01:15 2025 GMT
        Subject: CN=e2f165e44dfef23eebf5a00c4b6cea75760779a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:55:84:cd:69:37:64:2d:a3:7e:da:68:3f:
                    ee:c5:bc:47:e6:a3:97:d6:df:0a:99:f4:60:58:4b:
                    d8:6f:13:e4:5b:98:88:9f:2a:df:aa:fe:4e:32:15:
                    88:4d:ca:a3:dc:7b:3d:7d:d4:14:55:f8:31:68:28:
                    19:7e:be:dc:1e:b4:cf:46:a0:4a:66:bd:c7:51:03:
                    ed:b5:6d:90:48:5d:a2:c3:ef:36:b2:0c:01:45:71:
                    f0:d3:a2:6d:05:3d:f1:5b:a9:c2:f5:08:63:88:6f:
                    27:90:b5:53:ee:9b:ce:8b:3f:c0:ec:0f:89:b4:18:
                    64:c8:33:27:6e:ae:d6:ef:f9:49:77:31:60:f6:81:
                    44:46:61:f8:8c:03:52:d7:db:91:6d:32:e3:10:82:
                    85:2e:b3:af:f4:b8:a3:47:05:5e:1a:e4:58:25:41:
                    4a:31:b7:45:c4:a3:de:e4:eb:b5:71:74:30:f0:81:
                    f5:4a:53:0a:90:38:12:1c:96:47:04:6c:f4:8f:dc:
                    ed:09:9b:74:2f:fd:cb:07:5e:61:0b:27:6f:e6:b2:
                    84:d2:cb:ef:0f:f7:90:08:4e:31:56:2c:a6:8c:49:
                    63:b1:cd:dd:4e:38:cf:16:97:cd:6c:b6:27:d2:6b:
                    21:8a:dd:71:8c:0c:aa:64:2a:3d:1b:95:ee:ef:4e:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F1:65:E4:4D:FE:F2:3E:EB:F5:A0:0C:4B:6C:EA:75:76:07:79:A9
            X509v3 Authority Key Identifier:
                keyid:62:9D:13:5A:15:C7:4C:A9:7C:DE:CF:D2:FF:39:A9:F9:97:69:49:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e82f28-7183-4e38-98b1-505c6cb3d682/1/Yp0TWhXHTKl83s_S_zmp-ZdpSXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:28:06:94:0b:2e:d9:dc:ee:78:69:54:10:01:a1:4d:fa:7b:
         07:7f:c2:5f:3a:6a:d3:c7:52:f7:54:41:ea:f7:3d:52:72:94:
         04:87:7e:d9:33:7f:aa:b7:31:65:d0:3b:ca:7b:02:15:98:41:
         74:0f:18:5e:ea:42:1d:9e:18:66:7f:c4:bf:5e:dc:ff:c3:7c:
         f2:10:8c:e6:79:02:9b:e9:a2:34:79:94:18:5f:cc:e0:70:06:
         fe:17:c1:91:af:b8:4c:34:b0:db:f8:2f:7d:9e:8f:ff:49:35:
         91:20:0f:88:6f:a2:25:73:f2:5d:b3:2b:2f:56:f4:f5:99:55:
         0f:0e:cc:d1:8e:b3:66:bd:f1:99:da:12:fe:a9:e6:17:51:47:
         ab:0a:78:15:f7:e2:4f:ed:31:33:ef:e2:c0:49:3b:27:ef:f2:
         88:eb:23:b8:a7:82:48:e9:9c:17:e7:ee:5f:1a:71:83:e6:34:
         33:0a:f5:f9:38:d2:55:26:94:e6:b2:1a:f6:ad:3b:b8:44:be:
         1f:e3:a6:6d:26:44:c5:c3:8b:d8:c0:5a:ff:a8:5d:94:f0:e2:
         4f:95:7f:22:d4:de:8c:7c:97:03:20:f5:ec:ce:60:0d:c4:ef:
         90:13:6f:a7:78:ab:5e:15:04:91:db:5b:f0:31:fa:f9:09:3f:
         4b:eb:2a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:23:40 2025 by rpki-client