Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          Zf4Ybu0fNBSqHHG35BZIDnDsObCFiyrp5njHRfgxk/k=
Subject key identifier:   CC:45:42:81:15:BC:07:C1:95:D0:26:69:F3:D7:E8:C6:DA:7C:83:D6
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       01964D4755A94B4C2F0401D72428A5CFBB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          0234
Signing time:             Sat 19 Apr 2025 09:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:42 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: 6v8bs7yNQMw/AaIwvBe73+0oFeljAzfPB25tdtYuP6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:55:a9:4b:4c:2f:04:01:d7:24:28:a5:cf:bb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Apr 19 09:00:42 2025 GMT
            Not After : Apr 20 09:00:42 2025 GMT
        Subject: CN=cc45428115bc07c195d02669f3d7e8c6da7c83d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:38:0d:44:9d:6c:ba:d1:17:4f:b6:07:56:
                    5d:2f:bf:cc:4f:24:8f:bd:04:23:8a:19:78:e5:13:
                    16:44:f7:e2:c0:47:18:55:84:05:3d:ad:9d:0b:b9:
                    62:58:d1:b8:43:28:cb:b8:ac:79:ff:6d:ce:d3:ca:
                    2c:a1:c1:cd:5a:da:4c:5e:5d:7b:c0:2f:08:cd:b7:
                    39:ad:48:54:24:64:ff:6b:ea:4e:59:c7:70:97:83:
                    d9:17:bc:aa:ac:e9:0f:82:77:90:a2:f7:c4:94:cd:
                    cc:a8:88:a2:13:4a:6f:18:2a:15:42:a3:95:30:f5:
                    e4:fb:b2:a9:fa:5e:b2:83:21:5f:93:8c:00:a4:ea:
                    5a:cc:60:c7:0a:b2:ae:be:e7:29:cf:87:f7:15:ca:
                    5d:bb:1b:a0:ff:bc:43:57:64:50:6d:f3:4d:11:79:
                    f8:07:26:89:4f:c4:89:5a:75:7a:af:b3:b5:53:f2:
                    f3:b3:e2:65:1a:15:86:ba:b8:eb:bb:33:b0:d6:63:
                    cb:a9:4d:e9:3d:65:b9:1f:0b:ca:94:9d:0d:81:3c:
                    8e:0d:d6:4e:a8:64:5d:94:88:93:45:4f:43:09:6f:
                    88:ab:84:7e:2f:c5:f1:bf:21:43:80:97:77:1c:cb:
                    ca:1d:cb:09:4a:43:4e:1e:91:8e:f9:11:ed:30:23:
                    61:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:42:81:15:BC:07:C1:95:D0:26:69:F3:D7:E8:C6:DA:7C:83:D6
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:39:44:f1:ce:0a:c0:56:a1:54:e5:d4:c3:40:07:9d:8c:
         e4:e1:31:0a:af:9b:04:b3:90:ec:19:03:eb:ad:0a:6f:3b:50:
         d9:cb:28:f9:66:46:3d:99:8c:d8:6e:0b:2b:20:88:14:52:2c:
         fa:0c:3d:90:37:9e:bf:8b:bf:4d:dd:18:50:e2:2b:51:ac:a9:
         e7:12:2b:17:9c:c4:5e:4f:e2:4e:49:c7:2d:c6:1d:55:ef:46:
         55:10:bd:69:64:07:6e:90:2e:ad:f2:ef:3f:f7:12:10:22:36:
         58:ed:ae:89:08:0a:e0:34:7f:c8:ca:d5:02:fc:35:8d:46:c9:
         01:f0:6d:67:f7:1a:e9:02:25:83:56:48:b9:89:51:e6:21:69:
         8e:2b:94:1b:f8:df:4d:4f:13:f4:6c:10:c9:c2:65:fe:85:27:
         7e:36:97:e8:c6:15:69:75:22:13:ed:76:e6:9d:5c:3a:68:66:
         ab:4b:28:66:eb:71:d0:06:3e:f3:ae:9f:16:a9:24:67:9c:a7:
         ba:c4:e1:f1:5c:4a:84:61:cc:9a:c3:7e:83:f9:60:6c:7b:63:
         39:52:a0:62:6d:61:22:1c:16:47:fa:bb:aa:3a:2f:12:e8:f0:
         45:72:da:01:eb:64:13:13:4b:50:d9:e0:5c:1d:f9:59:97:5d:
         fd:fe:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:24 2025 by rpki-client