Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File:                     NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier:          ubW/GtfbbAgrDCNIOApyY0MNSTwk7cFV6Y9/ta/+o2U=
Subject key identifier:   C2:4D:18:DD:9C:4A:7A:7A:12:72:3E:9E:FC:EA:17:EB:E4:34:CA:A0
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer:       /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial:       019749312D53B9D98D4E8C7C6B17F4410D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number:          077C
Signing time:             Sat 07 Jun 2025 07:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:48 +0000
Files and hashes:         1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: boVLhoKfVcDlVcLjrpD+JT5XW7RC+4Xf4nYsgWSLSV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:2d:53:b9:d9:8d:4e:8c:7c:6b:17:f4:41:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
        Validity
            Not Before: Jun  7 07:00:48 2025 GMT
            Not After : Jun  8 07:00:48 2025 GMT
        Subject: CN=c24d18dd9c4a7a7a12723e9efcea17ebe434caa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:fa:13:fd:aa:43:70:dd:28:a2:5d:7b:c8:
                    e9:4f:03:6c:57:cf:e8:1e:d9:b4:e0:84:49:4b:8a:
                    cf:c2:22:a8:2e:5c:bc:6b:19:90:63:52:17:99:74:
                    08:41:bc:d8:35:a0:95:e8:e6:ba:e7:0f:8f:c7:52:
                    42:09:68:8e:1e:74:e5:64:53:fe:90:00:ca:61:13:
                    13:91:80:55:33:eb:2e:e8:c2:62:cf:d4:77:01:20:
                    59:e6:cb:ee:01:b0:8c:98:65:5c:5f:9f:63:34:69:
                    05:06:dd:a1:fd:b4:50:7b:ca:e8:76:fa:8b:3e:79:
                    6a:b4:69:86:84:b3:20:ed:98:f0:d4:7f:34:14:0f:
                    84:fc:3b:df:b4:d2:5a:4e:92:3e:b8:36:83:85:2f:
                    e0:96:bc:76:52:c5:50:e5:83:2d:56:2d:1a:3d:66:
                    06:32:02:40:e0:e3:ff:99:6d:37:76:23:b1:a5:48:
                    d9:0e:9b:9f:52:a8:21:35:47:a5:40:0c:f5:32:9b:
                    08:16:39:fc:19:1c:f0:fa:df:23:5a:72:04:68:1b:
                    85:f3:cd:ab:0c:c5:66:92:e4:a0:08:6e:2b:77:90:
                    13:1f:33:44:32:e2:c1:84:69:8e:fb:60:7b:e5:d9:
                    4c:09:12:1b:eb:1e:6d:57:cd:4b:0e:26:ec:62:a3:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4D:18:DD:9C:4A:7A:7A:12:72:3E:9E:FC:EA:17:EB:E4:34:CA:A0
            X509v3 Authority Key Identifier:
                keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:3a:2a:c9:70:97:19:8d:4e:09:fa:94:a8:88:a4:82:a5:
         f3:a7:65:df:af:4c:1a:f3:87:16:7e:b5:a9:92:1f:83:e0:e8:
         1b:34:88:6a:5a:63:b5:ff:75:a5:46:52:ca:06:37:46:00:b0:
         9a:43:15:59:d0:1a:13:47:fa:40:99:93:78:b7:22:72:52:17:
         76:f9:a0:91:e1:b8:8c:29:ad:06:e2:e5:a2:67:1d:d2:71:e4:
         e7:91:86:bb:1d:ef:5b:b4:a6:12:42:7f:b1:69:2e:cf:15:e1:
         fc:00:b2:ab:89:4b:bd:6b:f1:7c:ee:8d:cf:5c:dd:c2:8e:07:
         c7:64:81:38:ce:73:6f:04:a9:20:c7:f0:6b:19:a1:84:76:75:
         23:01:96:39:31:c3:68:40:8a:83:7b:83:b2:a9:3a:1c:96:f4:
         37:0c:5f:95:fb:9a:06:86:de:c7:62:62:16:68:15:c3:2c:d2:
         54:fc:d8:d4:01:01:5b:b9:e7:6a:dc:f2:bc:34:0c:fb:87:0a:
         d8:9f:9d:1b:be:c5:c6:04:f9:93:20:ff:da:2b:9b:ae:3e:44:
         cb:4e:3b:83:7c:84:00:82:75:f4:72:87:eb:61:88:39:18:7d:
         4a:48:9e:9f:7a:2b:e3:90:a8:29:f2:03:7c:12:ed:35:bd:66:
         83:4c:ba:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:56:38 2025 by rpki-client