Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
File:                     ujSP3hs60izyj-ZAMK4v5PIst_s.mft (raw, json)
Hash identifier:          lnXRL76gVsGuhDdTxGAE/jf02xidHJ8I2MVi74RM0xQ=
Subject key identifier:   18:1A:30:15:E6:4A:13:53:E5:18:7D:8D:8B:03:39:E2:9C:17:3E:98
Authority key identifier: BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB
Certificate issuer:       /CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
Certificate serial:       01974A7ADA5FAC36DB3E8CD086ABF766C72D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
Manifest number:          125C
Signing time:             Sat 07 Jun 2025 13:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:54 +0000
Files and hashes:         1: ujSP3hs60izyj-ZAMK4v5PIst_s.crl (hash: W8lGEVLlax/JQr4F1VHsBAKKUYpeuv+M0tdUt6tzNT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:da:5f:ac:36:db:3e:8c:d0:86:ab:f7:66:c7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba348fde1b3ad22cf28fe64030ae2fe4f22cb7fb
        Validity
            Not Before: Jun  7 13:00:54 2025 GMT
            Not After : Jun  8 13:00:54 2025 GMT
        Subject: CN=181a3015e64a1353e5187d8d8b0339e29c173e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:21:6f:fa:f0:72:fa:74:cb:6a:22:33:b2:
                    0b:35:0c:96:56:3d:18:71:42:78:30:de:83:8e:75:
                    2e:26:62:13:bf:d0:23:8c:8f:47:c5:c0:8b:15:77:
                    df:7e:eb:d0:0a:09:b5:22:57:60:5e:a2:ab:44:d8:
                    8a:7a:b4:4f:59:2d:72:57:21:a5:f5:29:bd:52:58:
                    11:28:f6:23:76:dc:5b:10:9d:e9:b6:f5:9b:d4:1f:
                    e3:fb:44:72:8b:ec:5f:a9:a7:32:cb:85:7a:b4:cf:
                    ee:3b:5c:ca:97:75:64:9e:91:92:28:2f:2d:27:73:
                    f8:7d:d3:b0:e7:5e:7a:c1:fe:9f:a0:cd:93:b4:0a:
                    21:71:b8:de:d7:e5:30:86:0f:76:01:a3:87:57:7f:
                    91:68:4b:2c:d8:4a:88:65:77:53:d4:b4:52:a0:46:
                    b9:3b:2e:b1:1e:69:19:17:3f:07:00:2e:fa:e4:45:
                    0d:2f:b3:a4:c0:59:37:0b:4d:bf:ee:50:45:23:2f:
                    10:ac:88:31:6f:ca:bd:a1:da:75:7a:69:c2:a5:11:
                    32:b3:30:a3:1f:7e:e0:4b:85:81:e7:b1:67:db:d6:
                    23:7d:1c:76:c6:d4:3b:a2:84:38:b3:c1:e4:35:f4:
                    01:22:e5:60:01:0d:8e:99:a1:80:3c:c9:a6:85:c5:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1A:30:15:E6:4A:13:53:E5:18:7D:8D:8B:03:39:E2:9C:17:3E:98
            X509v3 Authority Key Identifier:
                keyid:BA:34:8F:DE:1B:3A:D2:2C:F2:8F:E6:40:30:AE:2F:E4:F2:2C:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujSP3hs60izyj-ZAMK4v5PIst_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/67cae8-2ed2-4517-9b2f-a5476036ff31/1/ujSP3hs60izyj-ZAMK4v5PIst_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:db:90:cb:20:7c:28:e0:63:ca:c9:1f:e1:42:eb:f8:08:a3:
         ea:73:28:4f:99:33:61:7d:17:b7:c1:cd:e7:29:ff:60:c4:5c:
         72:4a:87:16:5c:df:64:be:80:32:23:65:1a:a5:39:03:4c:a4:
         fe:8c:1b:a5:8b:7e:15:55:00:6a:28:5b:6b:d2:b8:a4:d2:10:
         83:32:c1:2f:dc:c9:c1:4b:6e:fd:d8:b5:7c:90:d4:26:0f:07:
         3d:bf:17:39:9f:97:97:25:ea:34:0c:e7:42:33:32:23:f0:c1:
         67:7c:6e:bd:e7:28:51:fa:92:2d:19:f9:ea:1f:1f:30:96:33:
         bd:ef:01:4d:38:ed:fd:49:46:e7:a2:2a:7b:a0:c9:c0:e8:17:
         b3:9c:52:3c:67:ac:54:f6:8a:b2:49:75:c3:8b:e1:ef:76:1e:
         10:11:1b:73:67:59:6d:4f:82:01:db:af:0c:af:d1:eb:fe:26:
         0b:4c:18:4d:83:05:36:08:fc:54:aa:10:f6:7a:32:70:f6:6a:
         f9:66:5a:c2:46:68:a5:b3:8e:a2:54:4e:4a:05:61:f8:7d:ae:
         ca:65:ab:8b:6c:70:e5:11:2a:e4:ab:21:15:ab:53:9e:29:10:
         89:9d:cb:6b:48:65:11:22:5b:0a:19:e2:8c:05:67:cb:e8:fd:
         35:0e:0f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:29 2025 by rpki-client