Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          WK6/ztk4PUy1pTjLhoRLT252CHlg6EaH30ubwRf3N+c=
Subject key identifier:   AE:2D:E6:84:4C:2C:FD:19:DE:1D:42:14:41:87:11:8C:7C:17:5A:20
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       01959073E174123A4EF929B89B50FD2B44C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          017F
Signing time:             Thu 13 Mar 2025 17:01:08 +0000
Manifest this update:     Thu 13 Mar 2025 17:01:08 +0000
Manifest next update:     Fri 14 Mar 2025 17:01:08 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: 0u7/m+QGtjzFVwPJ250r3a271na++vtjFxXCpc/3i5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:73:e1:74:12:3a:4e:f9:29:b8:9b:50:fd:2b:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Mar 13 17:01:08 2025 GMT
            Not After : Mar 14 17:01:08 2025 GMT
        Subject: CN=ae2de6844c2cfd19de1d42144187118c7c175a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:9b:7a:17:4c:d4:ad:c9:8a:9c:00:5e:9e:
                    a1:3f:d9:32:ae:a0:dc:d7:fe:ca:82:b5:3f:f3:25:
                    bd:5e:7f:a6:2a:51:94:44:eb:06:b0:c9:f2:69:78:
                    f5:6f:7e:d8:18:23:0f:79:f1:8d:07:b9:f1:39:fb:
                    05:d8:4c:d3:b9:d3:ef:87:2a:e9:fb:56:1c:a1:19:
                    86:fb:93:68:4f:d6:12:31:55:84:29:29:b3:98:15:
                    e7:92:c0:65:5c:50:34:4e:b3:b8:a0:a1:b4:31:7f:
                    f8:53:06:68:f3:00:2c:e3:bc:ab:cf:df:a5:d0:1e:
                    a7:3a:f8:4f:b1:9c:36:c5:87:e1:a1:02:27:45:59:
                    45:a4:b1:47:6a:c5:5d:73:b6:da:5b:51:bb:b1:94:
                    a3:02:4d:de:c1:de:2e:3b:c5:9a:02:86:fa:7f:a9:
                    ce:02:fd:c5:fa:ef:5a:e7:a1:26:ae:bc:12:2a:c6:
                    8c:5c:7d:53:5b:4a:73:fb:7f:66:3b:3e:a7:67:87:
                    52:cc:8a:9e:f7:14:13:b0:b5:a3:7d:f1:c0:d0:c2:
                    fe:9e:d4:e5:d4:f3:32:59:08:cd:b0:b4:f9:ee:d8:
                    de:93:6f:3e:34:df:79:41:e7:bd:60:42:c2:49:d4:
                    1a:1f:d7:04:a4:7f:a3:65:a6:4c:55:c1:8e:42:4d:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:E6:84:4C:2C:FD:19:DE:1D:42:14:41:87:11:8C:7C:17:5A:20
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:91:67:39:66:00:1b:3c:6f:4e:48:87:da:73:c4:fd:0b:
         74:5e:3a:6f:fb:69:fe:20:98:a6:c8:62:36:08:6c:93:8b:c8:
         9d:fd:b6:ab:19:df:e7:ad:58:61:ed:80:d1:14:34:52:49:7d:
         66:34:32:fa:9f:ad:d7:d1:8a:f0:38:1c:e4:d6:2a:57:bb:c0:
         e0:87:53:00:32:f6:d6:f3:a6:60:94:f6:b4:da:f1:47:d1:16:
         fc:0d:81:5a:46:57:1d:e2:4a:67:66:74:8d:c4:64:e0:a6:13:
         98:8e:f4:b1:6e:1a:7e:bc:25:d1:1f:0b:66:25:04:97:83:79:
         63:42:be:0c:e6:52:f6:bb:81:57:fa:ea:24:d5:7a:5e:e4:05:
         5e:6b:a1:0e:19:24:ac:63:68:19:18:6f:3a:ac:02:af:cf:2f:
         dc:48:85:52:ec:4a:2d:45:f4:87:7a:e7:38:67:f3:3d:92:17:
         b7:9c:fe:c5:41:f4:98:57:40:21:b9:53:eb:ad:64:9a:bc:cc:
         7e:18:f0:c7:07:be:bd:ca:f1:f1:75:97:96:d4:f8:29:89:aa:
         33:c2:ab:f6:aa:cb:87:f7:a1:09:54:b3:3f:fb:bf:08:c3:dd:
         dc:b8:10:92:79:d8:26:71:69:be:f1:11:8f:67:5a:77:ef:29:
         2f:39:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:46 2025 by rpki-client