Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
File:                     7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json)
Hash identifier:          KTjxdDu3IzyQVIGH4bU73hZAy5OM0axWDLBEXYdsMIE=
Subject key identifier:   6A:0F:80:60:FA:16:04:E0:F3:62:99:CB:75:0F:26:6C:39:AA:F3:B4
Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8
Certificate issuer:       /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
Certificate serial:       01974967B01D578DADACE1A79D874987EF41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
Manifest number:          BA
Signing time:             Sat 07 Jun 2025 08:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:21 +0000
Files and hashes:         1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: V/605D3rYGeELZSwVQRW+vaX8ARMfITQO81ev/gU6W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b0:1d:57:8d:ad:ac:e1:a7:9d:87:49:87:ef:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
        Validity
            Not Before: Jun  7 08:00:21 2025 GMT
            Not After : Jun  8 08:00:21 2025 GMT
        Subject: CN=6a0f8060fa1604e0f36299cb750f266c39aaf3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:2d:aa:59:49:1d:5e:55:04:ea:09:64:ad:
                    1c:5a:7a:87:19:45:c8:df:a1:71:dc:a3:1b:fc:9d:
                    70:07:26:c8:c0:37:8e:72:36:b5:ea:65:45:9a:a5:
                    58:bf:5d:a3:53:60:dd:7b:80:3b:3b:cd:b7:be:3f:
                    25:9c:19:cb:cd:48:ca:08:0a:13:80:e0:db:d2:21:
                    a3:4a:7a:f6:c7:00:e8:00:6f:0c:39:64:af:70:d1:
                    dd:ce:f1:4e:a4:87:5a:09:3f:80:d1:a2:87:44:df:
                    8c:38:e3:2e:d7:6b:ce:35:e1:c1:0a:5d:f1:38:80:
                    2e:80:3e:47:51:4b:47:67:f2:90:ca:31:2f:45:8c:
                    67:08:aa:75:bf:71:64:ca:b7:71:47:81:3a:05:f6:
                    eb:09:ef:67:9e:e5:13:99:b7:69:7c:f3:43:5a:af:
                    22:15:28:7a:5f:7f:33:a2:10:84:d6:de:f1:28:4f:
                    5c:f1:e6:93:40:3a:ca:5a:0d:6e:b0:8a:b9:a6:f5:
                    f0:cf:ac:82:20:d5:70:af:49:c0:a4:7b:09:f6:e2:
                    84:6c:16:f4:f5:d4:05:dc:e7:e1:ca:7a:33:de:5c:
                    ba:75:f0:cd:02:5f:98:46:a4:ae:12:d4:5c:e5:04:
                    af:8a:b8:59:22:0f:ad:0f:0c:70:51:80:ed:34:f6:
                    90:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0F:80:60:FA:16:04:E0:F3:62:99:CB:75:0F:26:6C:39:AA:F3:B4
            X509v3 Authority Key Identifier:
                keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:d3:5a:65:56:2a:94:9a:56:5b:c4:8e:33:e4:eb:1f:10:
         d0:e8:ad:4b:fa:f5:5c:21:6d:99:38:f5:eb:63:5c:c8:71:6a:
         ce:e0:87:1b:3f:51:86:1f:24:b3:e1:10:d5:4a:76:eb:05:70:
         3e:4d:41:24:b0:be:2f:0e:67:41:41:a1:4f:0d:09:73:bd:15:
         9d:61:f4:80:0b:59:f0:fe:8f:a1:f0:eb:42:a7:35:81:2b:36:
         f5:51:28:30:48:60:5c:e8:54:1c:55:88:4b:12:56:1b:3d:a8:
         b5:37:d4:ea:6e:00:7c:fa:8e:38:63:d6:9c:0e:bf:62:1f:65:
         ac:9d:4e:96:f5:b4:a1:26:dc:cb:03:10:bd:7d:b3:94:88:d6:
         ab:7b:aa:6c:aa:7a:72:c0:45:29:3b:b1:7c:41:f3:35:da:f5:
         0f:9d:ae:f1:36:d0:45:9e:a0:f7:c0:b5:0a:ee:a5:82:e3:0e:
         d2:ef:cc:18:a4:76:7b:92:1f:ba:41:b0:fd:99:ad:bd:fa:c2:
         dd:df:ad:9f:5a:f1:35:9c:cd:ae:a9:59:e7:85:40:b5:76:f1:
         fe:8d:24:09:c3:a6:c0:2f:73:90:48:13:97:56:f1:82:98:f6:
         5e:31:54:86:16:0e:4e:80:3a:04:9a:99:3c:ae:f8:c0:ce:86:
         02:83:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:44 2025 by rpki-client