Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File:                     3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier:          QJXHQ9Ss9FXYanc1tujN83gy6e2IitrfeVL2tZ8DJGo=
Subject key identifier:   25:AB:E5:5D:12:6F:91:ED:6F:48:9C:62:92:8B:55:A1:C9:09:59:79
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer:       /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial:       01958B8445287D57EDA588BE6A9131837EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number:          1495
Signing time:             Wed 12 Mar 2025 18:00:56 +0000
Manifest this update:     Wed 12 Mar 2025 18:00:56 +0000
Manifest next update:     Thu 13 Mar 2025 18:00:56 +0000
Files and hashes:         1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: r0C7Fva4sxlrkfk4C8ghtsCTndevb2cbhjs78fafRQs=)
                          2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:45:28:7d:57:ed:a5:88:be:6a:91:31:83:7e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
        Validity
            Not Before: Mar 12 18:00:56 2025 GMT
            Not After : Mar 13 18:00:56 2025 GMT
        Subject: CN=25abe55d126f91ed6f489c62928b55a1c9095979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:4f:50:f6:d2:cd:01:e2:06:ba:d7:35:32:
                    97:07:8f:24:9f:3d:c0:8d:14:95:ad:30:1f:a2:ef:
                    be:a1:65:c7:51:48:26:4a:fb:e5:fa:98:53:e7:dc:
                    39:31:0e:cf:07:80:b7:b0:4c:e7:81:8d:9e:a5:71:
                    ac:39:0e:c6:2f:79:7a:77:d6:94:e8:b6:74:e4:9b:
                    8b:b5:a7:d7:ba:d4:a1:e4:3d:9a:2e:4a:9c:50:30:
                    f1:04:41:93:f8:42:fe:e6:9d:d9:7f:5b:66:ea:0c:
                    0c:68:18:7b:41:50:e0:00:58:87:56:80:5b:c9:9a:
                    41:16:70:68:56:60:89:42:57:b6:59:c5:68:18:37:
                    8f:2e:c7:2f:07:f5:6c:d0:5d:69:3f:1f:2a:44:59:
                    e9:32:52:e8:ed:a4:90:4c:f4:d9:f1:8c:39:34:ea:
                    20:3f:0b:da:84:dd:8c:44:07:52:7e:58:af:3d:48:
                    8f:da:cf:55:fc:ac:76:65:be:aa:18:28:51:2a:fb:
                    18:de:71:e5:2a:43:0e:7c:6d:f4:69:89:5c:5e:4a:
                    1a:e9:df:bc:d3:37:79:e3:10:05:a8:34:36:88:1d:
                    65:13:98:c5:37:9b:ca:fe:67:77:79:14:ed:bb:24:
                    7a:70:2f:53:eb:db:96:c4:59:f4:62:9b:cb:bd:2d:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:E5:5D:12:6F:91:ED:6F:48:9C:62:92:8B:55:A1:C9:09:59:79
            X509v3 Authority Key Identifier:
                keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:de:53:f6:63:45:19:38:7e:e0:a2:d3:a2:20:36:f8:61:
         02:ca:72:69:76:9c:2e:c4:01:04:0d:0f:e2:a1:12:56:37:21:
         64:ef:68:c5:f1:ef:fe:1a:85:77:cd:84:62:e3:d9:08:f1:05:
         13:49:c2:76:2e:d4:eb:2f:80:bd:19:29:d9:7c:6f:a1:1f:6e:
         30:23:e7:07:c0:11:ac:d6:9d:35:b1:c6:90:e9:51:39:24:51:
         bd:33:d5:5b:80:ec:c1:29:c8:a9:91:ae:97:e6:fa:0d:a7:c6:
         1d:8d:31:13:2f:da:d9:98:33:9a:c7:54:4f:f1:99:b4:78:a3:
         09:9b:6a:07:0b:20:d7:f4:f7:a7:55:52:11:55:b3:25:50:3f:
         39:84:ee:fc:35:6f:06:31:04:98:22:e0:3c:d0:68:0e:1c:ec:
         32:de:9e:29:1c:28:f2:3b:44:75:ec:88:d2:f4:92:45:83:2b:
         5b:61:f9:38:ac:9f:e8:47:9b:cb:bb:2f:cf:74:95:3d:0a:5e:
         90:bd:69:8b:44:9f:35:9b:67:c0:24:c7:64:25:27:df:e8:69:
         d6:bd:44:6c:68:19:9a:85:d1:83:1f:a4:60:31:45:c5:e8:de:
         28:b1:94:c9:9d:ad:1f:b8:d1:83:34:b6:c6:db:7f:79:c5:14:
         3b:f7:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:01 2025 by rpki-client