Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File:                     ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier:          ThNn0GqwYy/dL6ZTyIlrS4/8c6HGPagW9djni+gqNDA=
Subject key identifier:   AC:ED:CA:B8:BB:67:B9:A5:A8:F6:F9:EC:10:C8:F7:67:6E:97:AB:31
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer:       /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial:       01965801C7425B7D6E2718AA1270A01A3F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number:          14FB
Signing time:             Mon 21 Apr 2025 11:00:33 +0000
Manifest this update:     Mon 21 Apr 2025 11:00:33 +0000
Manifest next update:     Tue 22 Apr 2025 11:00:33 +0000
Files and hashes:         1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: EJhN/oLnLgyzAOkb2dX6yEGkhN7tT4XDlYVXCN0hZOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:01:c7:42:5b:7d:6e:27:18:aa:12:70:a0:1a:3f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
        Validity
            Not Before: Apr 21 11:00:33 2025 GMT
            Not After : Apr 22 11:00:33 2025 GMT
        Subject: CN=acedcab8bb67b9a5a8f6f9ec10c8f7676e97ab31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:8c:cd:f6:32:d5:21:a2:96:db:a2:96:ff:
                    a2:a2:e8:d1:59:3f:43:9d:43:e5:3a:59:f9:7b:fd:
                    f9:20:45:ab:c0:b0:6b:2c:10:28:ba:a2:69:81:df:
                    86:b4:4e:b4:37:2c:ca:56:ba:c7:c5:b2:95:16:66:
                    c4:6b:42:ad:25:cb:80:15:96:0a:9d:41:0c:9b:bb:
                    dc:81:6e:c1:04:d8:a0:ef:d0:3a:f8:e1:d0:a5:5f:
                    21:f6:15:95:84:72:0d:6b:86:a5:62:b8:28:b5:8b:
                    ea:06:82:89:54:b5:f2:bc:fa:e0:e8:94:b0:c6:fd:
                    e6:d9:fd:2b:bb:4f:b0:14:b7:49:85:a3:b7:12:9d:
                    26:59:54:4b:6b:e4:ab:42:43:e9:aa:bb:6f:91:8f:
                    61:be:00:62:12:b6:64:0a:87:9a:a2:f8:49:3f:33:
                    9b:5b:58:dd:a9:2e:0a:d2:ed:6c:7b:21:dc:18:fb:
                    98:12:e6:a2:36:21:40:26:6b:ad:1e:bf:3a:cd:f3:
                    78:80:86:44:4c:5f:96:9d:6b:af:a4:19:87:10:ee:
                    49:76:20:c5:e9:2e:8c:f6:c1:aa:17:f0:5e:1b:b2:
                    37:5c:fd:7d:2f:ce:be:a1:72:b5:60:6c:72:9b:02:
                    8e:97:98:bf:2a:9b:fb:2c:e8:28:e3:46:e3:17:d7:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:ED:CA:B8:BB:67:B9:A5:A8:F6:F9:EC:10:C8:F7:67:6E:97:AB:31
            X509v3 Authority Key Identifier:
                keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:23:11:1a:f6:e2:9f:cf:fb:fd:f5:04:52:03:af:00:f3:
         29:ea:c3:74:19:0d:81:50:f2:bd:2c:18:c3:b7:e8:e8:55:7f:
         33:1c:f4:f4:c0:a7:db:54:f5:91:fc:2a:45:ba:2a:51:56:d3:
         3d:24:a6:f4:90:71:c9:4b:e7:41:aa:50:55:aa:f2:44:2f:87:
         b5:f3:f4:0a:8c:68:f6:b9:18:30:08:84:f7:e4:7b:b9:31:80:
         cc:c0:a6:c0:50:d4:0c:fa:0d:13:a9:a5:24:47:5a:25:59:26:
         cf:de:cf:00:37:b6:9e:32:13:75:0a:04:0f:d6:80:ad:32:26:
         a8:34:45:d3:93:76:3e:4e:40:89:70:f6:93:c0:64:19:78:ec:
         a2:eb:3b:f4:78:b0:2b:5b:1c:ee:49:a9:8a:d1:01:bb:fb:5d:
         6f:29:00:d6:e7:67:96:cb:97:97:6a:ab:0a:4f:9a:10:0d:d0:
         d1:f9:50:0d:ba:60:0f:14:7f:2b:c5:9d:d1:65:84:22:64:a6:
         72:63:82:2e:5a:af:11:a8:19:2d:4c:6f:a2:77:1f:db:76:d3:
         fc:17:05:e0:24:ec:c3:92:8a:95:81:85:2e:3f:3a:91:27:f9:
         ac:af:84:6d:26:a2:85:7a:64:b3:26:de:d7:b9:f5:fd:80:d5:
         05:1a:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:19 2025 by rpki-client