Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          X2/FLGkw6pRd8B26g78U0tx6qd+GQTgPkRYwSwo7CLk=
Subject key identifier:   A9:73:28:86:3A:72:C9:80:20:94:C3:13:E1:FA:6C:35:68:DA:0F:77
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       01974A7AA5370AB8DB05F66927FEF33151D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 13:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:41 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: mQSfNUxXqadAE5hMZApP5TK1Kf2K0NGkvcf+yHpW3Hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:a5:37:0a:b8:db:05:f6:69:27:fe:f3:31:51:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Jun  7 13:00:41 2025 GMT
            Not After : Jun  8 13:00:41 2025 GMT
        Subject: CN=a97328863a72c9802094c313e1fa6c3568da0f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:a4:0e:30:47:8f:c3:8e:ab:ed:c4:cb:b1:
                    13:eb:33:20:7a:65:53:b8:68:20:7c:a3:17:53:ca:
                    a9:6a:0a:e6:f0:6c:a7:95:56:78:98:de:35:64:62:
                    a6:6c:27:c0:66:9d:2d:1c:29:49:fa:c4:fd:eb:75:
                    7c:7c:4d:83:0f:c2:72:87:16:f5:70:c3:32:f8:a0:
                    09:54:6d:db:c7:81:a1:63:70:f2:c5:d1:b5:e2:ab:
                    50:ef:a4:27:b6:43:dd:f7:38:e1:53:07:0f:bd:f1:
                    7b:28:79:2a:7d:da:c5:b1:1a:44:fa:9d:dd:03:80:
                    cf:06:af:9c:3d:04:4d:73:cf:5f:91:fb:1b:50:71:
                    59:25:3a:ea:fb:f3:56:31:e6:f0:57:75:5f:d2:47:
                    41:f3:da:50:86:44:19:b2:cb:41:3a:35:c5:2e:57:
                    06:60:6d:23:34:37:16:a4:a6:db:c7:6b:c2:b5:5b:
                    06:7e:a4:10:a5:1a:08:05:f6:25:db:e4:d3:67:50:
                    82:37:9b:bd:2a:1b:55:e5:82:6c:e1:a6:06:2d:b8:
                    68:94:be:6c:78:9c:63:9d:8a:47:1f:c1:02:c7:46:
                    2e:69:9f:58:34:b8:49:fc:d6:6c:14:62:a0:d7:62:
                    cf:47:99:39:f8:59:eb:96:31:9b:e7:51:22:b6:1a:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:73:28:86:3A:72:C9:80:20:94:C3:13:E1:FA:6C:35:68:DA:0F:77
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5a:82:3f:f9:15:00:3e:a9:32:c4:bd:5e:0b:75:e1:9b:64:
         7c:d2:80:be:f0:24:f2:85:57:40:9a:d4:12:73:02:8c:2d:0e:
         02:aa:c5:7b:f1:79:b3:4a:01:4f:7f:06:51:da:52:9e:fa:b4:
         37:58:dc:f1:0d:06:aa:f3:35:83:d9:73:e8:14:9f:e8:f5:c1:
         50:ce:6a:20:25:9a:b8:11:95:0b:c8:23:f6:f4:80:f6:7b:80:
         fb:49:3b:bf:b7:4b:fe:79:5b:18:2c:7c:a4:e9:2d:04:64:d0:
         5b:67:82:b5:0b:84:bd:11:55:e0:6b:09:07:76:74:76:87:7f:
         ec:a6:d3:30:d0:3e:19:56:3a:f0:3b:51:cf:d9:9e:04:2e:53:
         ef:e5:a4:04:d1:f7:0b:69:e2:f3:9c:64:41:ea:5b:92:d2:a9:
         18:d9:d6:b0:48:c3:ba:20:ad:ac:f4:ce:bc:61:1c:d6:ef:6a:
         d9:43:ef:b0:16:cd:f5:87:14:a4:1b:80:3d:1a:44:23:29:a8:
         2a:4a:00:c7:5c:4f:60:16:98:27:f1:06:6d:98:c2:f7:c5:96:
         3a:df:eb:c5:e5:d3:93:2d:d7:e0:c3:14:2f:0f:1f:72:26:d2:
         d3:e5:bf:ed:d9:a7:9b:37:44:43:d8:03:38:da:a6:be:af:50:
         b7:e1:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:05 2025 by rpki-client