Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File:                     ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier:          3xa8eUKDS2nPPjEi2kDcf1A4YnEkwoQn+x8YRt21JwE=
Subject key identifier:   38:EA:0B:DD:B5:39:06:A9:B4:5B:AD:EC:72:19:E8:FD:17:CF:76:37
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer:       /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial:       019749D6299E7B055D35D41022D06E65C242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number:          0E60
Signing time:             Sat 07 Jun 2025 10:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:01 +0000
Files and hashes:         1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: 8ybxeA9I+nzgX7lGXpY0kzO095TLgYtv/vvMCftcIgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:29:9e:7b:05:5d:35:d4:10:22:d0:6e:65:c2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
        Validity
            Not Before: Jun  7 10:01:01 2025 GMT
            Not After : Jun  8 10:01:01 2025 GMT
        Subject: CN=38ea0bddb53906a9b45badec7219e8fd17cf7637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:93:bf:71:c3:c0:7a:95:5f:4f:7d:69:c8:96:
                    47:ef:b2:39:75:9e:fb:2b:53:d6:26:4d:b1:47:4a:
                    0e:91:0d:5f:9a:d7:a5:fe:7c:07:a3:30:9e:63:aa:
                    35:8a:b7:13:c2:fe:e4:34:cc:b1:56:d9:c2:fb:af:
                    e6:4b:90:b8:c8:1e:09:40:79:59:40:e7:65:0e:50:
                    bb:2f:d1:0d:7e:07:7f:0c:99:29:57:61:f4:57:cf:
                    b2:ee:af:89:ab:52:98:d9:35:e2:c4:b0:ac:ad:c2:
                    15:bc:0b:18:bb:4f:93:c1:be:53:8e:c0:83:79:f5:
                    3a:03:ec:90:67:59:b0:0f:65:38:04:93:a1:fb:b4:
                    62:18:27:ef:9f:a2:b1:ba:48:18:da:79:ad:e5:52:
                    84:19:b1:72:b7:69:f3:36:2e:36:bf:2e:08:08:86:
                    3c:67:91:c8:37:2e:b5:4b:34:ee:9d:d1:ec:73:4b:
                    b6:7d:14:1a:10:10:49:54:09:4e:ee:38:f2:1c:4f:
                    47:77:00:55:63:f0:01:cf:c2:91:88:71:8c:d0:6e:
                    c0:2c:62:e0:39:be:ea:47:58:d2:b6:f5:3c:ec:03:
                    cb:98:56:c5:05:b6:c6:00:71:68:8e:d4:84:d3:b5:
                    99:7c:1c:7b:3c:e4:20:d7:d7:34:dc:a4:0e:d6:c3:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EA:0B:DD:B5:39:06:A9:B4:5B:AD:EC:72:19:E8:FD:17:CF:76:37
            X509v3 Authority Key Identifier:
                keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2a:27:4b:41:bc:42:36:70:d0:ad:41:dc:8b:ba:8a:ad:8f:
         3a:26:cc:54:6e:9d:68:30:97:4b:7a:5c:df:bf:4b:9b:48:94:
         e7:24:17:e6:2f:4d:ce:ac:12:74:b8:12:c9:67:1c:a0:dd:ec:
         aa:af:a8:9a:07:51:63:78:d4:c1:55:29:7a:ad:66:9b:5d:71:
         ae:3a:53:9a:ec:06:32:30:6f:d9:cc:d6:22:82:18:2b:05:fd:
         9a:9f:00:54:b6:b3:10:2d:7c:8e:81:9b:0b:7a:70:58:07:16:
         92:53:9d:a1:d4:a5:ec:7e:fd:fc:8f:0c:7d:5f:b5:f6:2c:4c:
         83:33:0b:98:18:db:5d:92:44:60:b6:93:a3:55:43:0e:ff:cb:
         89:0d:45:0f:cd:ea:f5:af:12:94:e1:53:22:67:3e:1d:10:ea:
         7f:f0:a2:21:04:94:93:48:8a:d1:96:b4:ea:90:13:6f:c8:c7:
         39:fd:a7:59:51:56:90:e4:69:72:5d:fd:c3:5d:98:52:0c:f9:
         46:c4:26:f2:03:a5:6a:df:a7:7a:cc:af:ab:6b:db:41:4c:d5:
         00:45:71:c6:5a:64:7b:8e:b9:da:b1:15:4b:fc:09:62:fa:ce:
         b7:26:f1:8a:56:de:81:51:53:ba:07:a8:70:e6:96:ed:55:22:
         9d:23:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:09:16 2025 by rpki-client