Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File:                     ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier:          CrDcDnph6bR8b/NElwoAbu1Hle2UYB7KQQ8bhZWfdjc=
Subject key identifier:   4F:F2:29:83:54:AA:94:40:71:B7:73:ED:89:99:AF:7B:49:D4:5A:19
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer:       /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial:       019638AE6913CB94E277A22963FFC42A65CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number:          06F8
Signing time:             Tue 15 Apr 2025 09:01:16 +0000
Manifest this update:     Tue 15 Apr 2025 09:01:16 +0000
Manifest next update:     Wed 16 Apr 2025 09:01:16 +0000
Files and hashes:         1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: EFdXvrbnfkcarJresU1MwUQycayixWmromVQZl3wipA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:ae:69:13:cb:94:e2:77:a2:29:63:ff:c4:2a:65:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
        Validity
            Not Before: Apr 15 09:01:16 2025 GMT
            Not After : Apr 16 09:01:16 2025 GMT
        Subject: CN=4ff2298354aa944071b773ed8999af7b49d45a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:a7:3d:91:cd:fb:7a:9d:9b:71:3e:61:bc:
                    fb:f3:b1:bb:9f:b6:3a:6d:9c:af:d5:39:35:b0:b8:
                    d1:f1:4d:f0:f4:90:11:f0:f1:e8:39:65:6d:80:bc:
                    d8:05:6a:de:52:15:db:f9:75:8f:c0:89:4c:7c:40:
                    a3:87:21:01:c0:f3:2a:18:49:b0:52:51:be:78:07:
                    cb:82:23:b3:12:64:d4:d3:7d:4c:4d:31:5e:e6:3b:
                    19:ee:9b:3e:98:58:9e:6a:dd:10:4f:eb:3f:dd:1c:
                    2e:e7:16:50:2a:b1:75:0b:10:15:67:c1:18:30:8c:
                    e8:12:4e:3a:69:2d:a1:c5:23:46:d8:b1:60:19:e4:
                    b6:ef:16:0d:f7:a4:8b:d9:32:3d:ee:d1:c4:94:ec:
                    05:66:18:98:8b:06:45:e8:9d:8a:a2:27:0a:a4:8e:
                    cd:61:04:b3:7f:88:3b:65:68:1c:59:87:07:2a:24:
                    24:d5:ef:fc:44:98:70:96:58:3f:57:9e:80:71:bb:
                    19:7b:f3:30:ef:be:dd:ba:64:58:b8:65:68:40:c9:
                    5e:0c:70:c9:fb:3f:17:2b:bb:b0:bf:66:11:47:60:
                    8c:aa:1c:b8:e0:4e:28:9d:7a:08:c9:7c:1a:25:26:
                    22:d7:f2:56:79:34:48:42:c8:b6:58:ea:61:fe:3e:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:29:83:54:AA:94:40:71:B7:73:ED:89:99:AF:7B:49:D4:5A:19
            X509v3 Authority Key Identifier:
                keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:67:03:4d:ba:62:da:02:e3:f6:03:a4:27:54:7e:52:83:
         69:e8:6b:ec:47:cb:34:f5:b1:14:64:46:d8:86:cf:7b:27:61:
         6e:03:69:82:9d:39:ed:d2:af:47:2b:e6:34:5c:2d:05:68:1d:
         6b:7b:4c:74:9c:2b:dc:68:10:59:8e:8e:84:c5:e4:49:ac:d1:
         8a:03:08:1c:09:90:8a:54:4e:c3:65:ec:e5:a5:f6:a6:d7:c7:
         c0:64:a9:8d:9b:7c:8e:77:26:0d:e9:f8:6c:70:80:1d:56:fd:
         f0:ee:25:1a:18:11:8f:7b:b3:1a:de:f8:7c:74:c2:8f:66:30:
         62:70:f0:ec:7c:60:da:7b:52:b1:cc:2c:ec:39:23:c2:b3:ff:
         1c:b1:1b:0c:cf:87:3f:68:8b:2a:54:26:53:6d:02:fa:c4:5a:
         6d:65:4e:cf:b8:4c:5f:42:e6:e9:82:a4:56:87:5b:b6:91:d2:
         e9:c1:01:e1:b1:d0:a7:39:a5:27:57:9d:93:bc:68:22:fd:1f:
         72:4c:bf:1e:06:50:f4:32:7e:84:7c:78:68:d8:19:82:c0:cf:
         57:02:29:75:e3:c7:94:91:06:9d:f4:2a:f3:e8:b3:97:d6:14:
         bc:9b:b7:6d:65:b3:07:cd:ab:9a:ab:f5:23:b3:f7:f1:95:cb:
         3e:27:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:15:09 2025 by rpki-client