Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
File:                     SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft (raw, json)
Hash identifier:          Esr9G0xjXHDnLI37FfSKSTLUDUfc5uzMBb4wu5ukCQs=
Subject key identifier:   BE:7E:A5:29:50:34:7A:15:0C:DF:77:4A:62:F2:FC:79:96:2B:78:C2
Authority key identifier: 48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE
Certificate issuer:       /CN=48faed6714f46a2b843f14e40e54e626a0c500ee
Certificate serial:       0197470B76090302ED7F803AA284BED9FBC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
Manifest number:          12D3
Signing time:             Fri 06 Jun 2025 21:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:22 +0000
Files and hashes:         1: SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl (hash: rcD//3M0UQtrIdlV1z2rJklWB8/kYbacvrI9dInmt4E=)
                          2: YcBJMOZnarbYkNxw905RMeZes7Q.roa (hash: FciS9wueWxFbzT7TwtYBQ+UslPbKowgQrJac0SFsxR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:76:09:03:02:ed:7f:80:3a:a2:84:be:d9:fb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48faed6714f46a2b843f14e40e54e626a0c500ee
        Validity
            Not Before: Jun  6 21:00:22 2025 GMT
            Not After : Jun  7 21:00:22 2025 GMT
        Subject: CN=be7ea52950347a150cdf774a62f2fc79962b78c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:2c:92:4b:59:2f:50:97:4c:52:74:eb:02:
                    08:a1:82:5e:43:ee:e9:bc:41:63:bb:23:44:27:90:
                    3c:5b:14:5d:30:65:a2:36:2a:e4:10:21:af:6d:7b:
                    c9:99:a2:c8:52:0e:39:79:57:da:15:6c:0d:47:71:
                    fe:a8:b1:0a:06:2d:b4:09:b5:39:7b:5d:25:2d:1e:
                    c6:d0:02:d1:69:2c:dc:63:0f:bd:1d:08:b6:dc:9f:
                    f0:1a:85:d4:fb:c0:08:e6:34:bc:7b:99:d8:3e:2f:
                    fa:41:0a:af:60:88:bd:77:8a:1a:ac:33:b9:4e:c5:
                    5c:dc:41:41:68:a1:da:cf:b6:10:15:8c:08:fe:78:
                    fc:d2:bc:d9:05:f4:9c:6a:a8:47:22:2c:f9:b8:6d:
                    0f:54:2b:58:ec:7b:e7:77:86:82:16:ab:6e:ce:5b:
                    66:22:f8:3c:b6:8b:62:1f:10:6a:c5:ec:86:86:d2:
                    56:a5:88:9c:70:58:13:53:14:5d:00:a3:7f:32:76:
                    12:0a:58:b4:ae:01:70:72:14:b4:fe:2b:ea:02:be:
                    2c:f5:88:f1:34:47:e8:71:8d:09:5f:1e:39:91:a6:
                    49:13:cd:52:52:8c:37:7b:8b:f8:78:3f:86:94:ba:
                    d6:9c:78:e8:22:3f:de:b6:36:3a:ac:f4:2a:77:50:
                    61:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:A5:29:50:34:7A:15:0C:DF:77:4A:62:F2:FC:79:96:2B:78:C2
            X509v3 Authority Key Identifier:
                keyid:48:FA:ED:67:14:F4:6A:2B:84:3F:14:E4:0E:54:E6:26:A0:C5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPrtZxT0aiuEPxTkDlTmJqDFAO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4ff3d1-cc2d-4eba-913e-2782477b9d1e/1/SPrtZxT0aiuEPxTkDlTmJqDFAO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:87:76:d2:74:79:00:ab:af:03:69:31:d3:b8:a7:cb:2d:15:
         d8:e7:12:8a:f8:6d:91:e7:e9:aa:42:b1:bc:9c:ff:70:b1:a9:
         50:5c:5d:15:6f:5a:a7:23:c8:99:32:56:7b:6a:3e:8f:2a:c4:
         7c:61:19:f4:57:7a:10:ba:a8:c2:f6:ce:be:f1:bc:00:a0:33:
         aa:47:fa:1f:08:d9:3c:68:dd:dc:1a:aa:0f:70:e6:90:cc:d4:
         33:00:9d:6c:c2:ff:6f:1a:6a:b8:cf:91:17:b6:1c:39:b4:06:
         53:8b:d3:8a:2b:4d:66:c6:68:ad:e9:75:d5:86:05:63:10:3b:
         50:46:c5:a6:bb:a2:20:c7:8e:56:a1:36:aa:45:ff:4e:00:91:
         69:65:ac:59:32:ac:c1:26:7b:a4:c1:7a:a9:41:71:9f:13:ab:
         4d:dd:fc:da:6c:5e:fb:4e:94:e5:c1:c0:19:e4:39:e7:39:c6:
         db:b5:75:e6:5d:1e:76:84:06:ab:b8:46:02:f2:3c:e6:2d:cb:
         7e:93:e2:26:69:b7:98:7f:8d:a0:19:c7:2b:6b:39:86:fd:75:
         68:d9:94:c9:26:81:07:cd:a0:ba:ac:37:d8:c7:a2:48:7c:84:
         d3:72:b6:18:16:6a:06:da:e8:2a:2d:22:af:d0:52:c8:da:0a:
         0e:5b:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:07 2025 by rpki-client