Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
File:                     ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json)
Hash identifier:          //sPvzQXmS+ANs6T8sWv+EGiucNaQtJUODIvEDQ3Qdo=
Subject key identifier:   C9:10:99:5F:C8:B5:B9:F7:EC:EB:48:18:00:4F:CC:61:C2:FA:D1:7F
Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20
Certificate issuer:       /CN=71c59edab98efb0cd376760f4069e4c68b8bda20
Certificate serial:       01964D7EBEDEAB7901D91501472237C3F111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
Manifest number:          064A
Signing time:             Sat 19 Apr 2025 10:01:13 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:13 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:13 +0000
Files and hashes:         1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: ieYs64IAgqNseqijKYjceMKf4QFEqN6kJh/J6b5Dv1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:be:de:ab:79:01:d9:15:01:47:22:37:c3:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20
        Validity
            Not Before: Apr 19 10:01:13 2025 GMT
            Not After : Apr 20 10:01:13 2025 GMT
        Subject: CN=c910995fc8b5b9f7eceb4818004fcc61c2fad17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:2d:18:05:07:fe:30:3a:9e:81:43:d6:08:
                    e2:82:41:cc:25:46:9c:5c:d8:b1:d6:85:88:fa:e4:
                    5d:76:c2:1c:43:84:55:b9:04:a5:6e:ce:13:5c:36:
                    c5:1a:44:ba:32:3e:d8:0e:8f:da:4d:e1:ef:c0:89:
                    6e:58:da:0c:92:2f:e1:5f:cf:7c:af:2f:b3:4c:5a:
                    c6:c4:2c:c9:2a:3c:e0:6a:19:ad:89:48:9d:08:24:
                    97:16:f5:26:c6:ac:df:84:22:ef:cc:19:58:89:59:
                    a7:04:e6:62:c2:95:5d:88:9d:ea:90:ff:92:b8:d0:
                    8b:1d:be:4f:7b:63:c6:53:34:07:fc:96:97:6b:08:
                    7e:e5:8d:e1:4f:ce:5a:eb:bc:52:7f:36:2c:03:e5:
                    e9:49:87:61:75:e4:2a:b7:06:22:2a:8c:2a:f4:a4:
                    dd:e5:66:ea:b8:85:e8:b8:d7:8b:a5:5a:16:f4:13:
                    58:18:d9:e3:bd:9f:78:c8:e5:a0:21:d0:18:68:38:
                    b0:b7:53:e5:7c:a4:fc:02:bd:28:c9:c8:06:b3:4b:
                    41:8f:20:ed:e8:4b:3c:a0:20:8d:4f:65:e8:82:6c:
                    d9:1f:2a:58:e9:a7:d5:58:e7:5d:75:31:f4:f8:08:
                    fd:53:79:2c:68:df:aa:c0:a3:15:e4:96:6d:8b:36:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:99:5F:C8:B5:B9:F7:EC:EB:48:18:00:4F:CC:61:C2:FA:D1:7F
            X509v3 Authority Key Identifier:
                keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3d:2b:ee:9d:2b:72:fa:bf:8c:3c:f5:4c:7d:2a:7b:d6:56:
         1b:c0:f6:9e:b5:05:6b:51:c0:aa:a8:1d:57:c0:1f:bc:b2:ff:
         30:f2:d2:c4:05:04:bc:95:ba:97:df:b2:0f:a1:a2:a0:f8:cf:
         71:2b:2a:39:71:64:4c:c4:03:ee:2c:f7:cd:40:33:6a:86:60:
         73:33:99:0d:c3:a7:cf:0c:61:27:42:cd:0f:3a:83:6a:a2:c9:
         c1:82:67:7a:b4:29:33:42:eb:53:fc:90:39:08:8c:b5:28:27:
         ac:90:24:4d:29:65:c3:12:af:7f:07:28:7b:41:d6:c2:1b:ba:
         76:f7:e0:29:a9:71:d2:44:76:22:ad:0c:0e:5b:12:40:33:9a:
         40:49:81:0d:ce:18:43:68:2f:76:84:54:2b:c9:dc:04:96:3e:
         d2:5d:3a:27:3f:1e:87:67:fb:69:7b:a2:03:3f:59:bb:8b:83:
         10:05:36:3f:7a:6f:9c:86:04:18:7d:7f:00:e2:4e:8c:d2:8d:
         50:a7:dd:98:39:76:da:d9:e8:d1:fa:d6:d2:38:a1:6e:3b:92:
         fe:e7:4c:32:45:a8:2f:46:ce:09:ec:d7:30:04:49:72:88:f4:
         01:cb:92:69:fd:f5:3e:db:c7:fb:e8:8e:29:3b:0e:e1:55:40:
         ce:bd:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:02 2025 by rpki-client