Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
File:                     nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json)
Hash identifier:          CWLTQoBB4M/PIBB56ncxplX13yixlur+fARXRJzZKj0=
Subject key identifier:   77:51:C3:DA:3A:57:63:7B:1A:48:EC:C4:0F:97:E0:35:73:C8:A0:89
Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Certificate issuer:       /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Certificate serial:       019749310F03673E1F9B0B68C2C57E4C63B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
Manifest number:          0661
Signing time:             Sat 07 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:41 +0000
Files and hashes:         1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: Zvcx6rGtpbC6X+oy+64xeqCQ+yZUGoEi+4HcZStj5OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:0f:03:67:3e:1f:9b:0b:68:c2:c5:7e:4c:63:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
        Validity
            Not Before: Jun  7 07:00:41 2025 GMT
            Not After : Jun  8 07:00:41 2025 GMT
        Subject: CN=7751c3da3a57637b1a48ecc40f97e03573c8a089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:b3:22:2a:f8:93:d5:6f:af:b5:f2:5b:98:
                    c2:52:be:bc:df:b6:e4:a2:93:5d:fd:e3:ac:f0:9a:
                    75:67:0a:c9:36:33:99:81:21:f7:76:6b:47:31:90:
                    74:e6:65:e9:bb:0c:02:a5:28:40:38:38:44:8b:b2:
                    f4:ad:ef:0c:36:5c:4a:86:80:f8:7a:41:3a:eb:d1:
                    06:87:6a:8e:60:e9:34:3b:d9:ac:c8:58:e9:84:af:
                    c6:ae:96:f5:2c:05:ee:13:a6:0d:47:a7:81:cb:da:
                    e7:2e:d0:11:a6:e4:32:c9:fe:31:2a:93:78:91:fa:
                    fc:bb:62:e7:d3:41:60:66:56:21:d6:3a:1b:8b:60:
                    26:88:50:ec:7a:c6:59:db:1e:15:c2:52:80:e3:65:
                    68:3b:8a:aa:2c:a5:78:90:d7:40:32:da:e4:0d:0b:
                    1e:24:4d:e4:af:0b:88:10:f0:35:1d:70:44:5b:d4:
                    3e:af:12:5a:74:f7:20:d8:fd:1f:cd:b2:b1:1d:64:
                    e4:dc:2b:d9:00:3b:38:ce:8e:73:7d:61:74:3d:55:
                    2c:21:d9:67:c2:d6:74:f1:be:e6:d9:65:38:2d:a8:
                    ee:ec:c3:56:d5:e0:4d:92:34:ef:57:4a:b1:95:21:
                    6d:e9:30:0e:3d:dd:7f:0d:54:2b:41:8c:c2:ad:58:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:51:C3:DA:3A:57:63:7B:1A:48:EC:C4:0F:97:E0:35:73:C8:A0:89
            X509v3 Authority Key Identifier:
                keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:57:c6:6e:b2:d3:69:9c:17:2b:70:eb:6e:1e:c4:fa:a8:
         04:41:db:7c:97:54:e5:05:22:dd:19:19:54:b0:c5:31:a0:2f:
         3b:94:d7:af:81:42:40:5d:fd:84:85:10:cb:da:9e:c4:ad:1f:
         8c:7c:30:79:00:a1:bc:d0:ea:fb:e6:1d:e1:94:c9:d3:bc:f3:
         80:80:17:49:98:46:38:b0:b6:a7:75:9a:b3:27:63:fb:fe:77:
         e3:b7:4f:b7:63:c8:e9:e5:72:c4:17:72:a2:d6:9e:f8:80:3c:
         eb:0e:17:fc:fd:1d:0b:92:d2:1d:bf:8a:e6:67:99:59:b8:ac:
         b1:fa:d9:5a:f7:80:e6:b2:c8:4b:c0:49:f8:45:e1:9f:94:53:
         37:bc:a0:af:cc:59:2a:3c:59:eb:e9:d0:77:57:cb:9a:44:7d:
         66:b6:7c:1e:e9:a3:fb:a2:6b:3a:cd:02:f2:b1:ba:b2:64:9c:
         97:5f:21:5d:c3:3a:86:e5:1d:61:21:f2:a6:8e:44:81:fb:9f:
         5c:b1:66:59:85:fd:d1:e4:16:00:ec:bb:92:a4:cb:4c:d2:40:
         89:06:b2:a7:b8:7a:2a:6b:49:ac:1b:bb:4e:89:84:5b:1a:fb:
         b7:11:12:11:ec:ea:a3:8c:58:ab:22:d4:d9:6d:b2:3e:f5:12:
         ce:9b:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:37 2025 by rpki-client