Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
File:                     Fr_GV2_0KHqI6d4-IQuewOERta0.mft (raw, json)
Hash identifier:          +Z8B+xF+o1qVQ+UuaIPh6DA3nNLnq/RHfhaYgWEp0DM=
Subject key identifier:   81:F7:DB:C2:42:EC:4A:52:01:7D:42:3A:63:85:1A:98:C4:0C:46:DA
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Certificate issuer:       /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial:       01974AE8A9CEA5C407B9E8802C16CC5281E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
Manifest number:          155C
Signing time:             Sat 07 Jun 2025 15:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:51 +0000
Files and hashes:         1: Fr_GV2_0KHqI6d4-IQuewOERta0.crl (hash: vwpcmYfU2YcVKnw1LJxpDcc498WfX+6mc293zn7biFQ=)
                          2: SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa (hash: 0MJ7luF7f9Ym0N4wsCYetV/WSW9M7iM6g72fAyA37+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:a9:ce:a5:c4:07:b9:e8:80:2c:16:cc:52:81:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
        Validity
            Not Before: Jun  7 15:00:51 2025 GMT
            Not After : Jun  8 15:00:51 2025 GMT
        Subject: CN=81f7dbc242ec4a52017d423a63851a98c40c46da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:a3:07:6a:67:b2:87:f5:a0:de:f5:ea:a4:
                    ae:a2:4c:d5:b7:3f:5f:23:c1:f9:da:13:f0:58:c8:
                    4f:d7:cd:45:f6:53:16:38:5f:0b:67:db:bf:97:a8:
                    63:ee:18:44:f8:1f:ee:e9:ab:37:56:5c:4a:37:b8:
                    4f:08:84:89:1a:cb:64:6e:6b:77:5a:7d:93:56:33:
                    81:b6:06:81:19:97:0d:b2:ee:b1:9d:cb:64:3e:1f:
                    f8:75:8f:6d:74:f0:10:06:ce:6d:15:59:e7:88:da:
                    3f:b0:f9:70:ac:86:a4:ec:38:8c:c3:c2:21:64:96:
                    63:f1:88:72:96:d0:0a:90:e1:c6:2d:93:4a:20:25:
                    5a:97:17:76:b2:ab:d1:38:4b:12:1d:df:0a:70:ef:
                    3f:38:32:9b:6b:fc:58:4d:28:ad:13:cd:0f:72:f3:
                    56:e1:77:14:44:63:3d:b3:ef:81:f5:89:e9:db:b5:
                    f3:96:89:74:f4:39:f9:f2:11:3f:6c:83:58:66:02:
                    60:3d:9a:63:f9:55:49:03:e1:c9:14:fa:e5:1f:4c:
                    1f:0e:96:3d:43:59:f2:d3:0e:04:bc:ad:02:21:17:
                    db:96:b5:90:5c:bc:3e:3c:12:83:1b:41:35:b3:1f:
                    c4:7b:48:13:45:ae:f1:fe:2d:27:5c:dc:af:bb:b8:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:DB:C2:42:EC:4A:52:01:7D:42:3A:63:85:1A:98:C4:0C:46:DA
            X509v3 Authority Key Identifier:
                keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c4:a2:a2:c0:ab:95:9b:33:df:7e:2c:a1:82:75:06:4d:59:
         ef:a7:d3:17:a1:15:2b:80:17:fb:98:f1:61:b9:e1:7a:92:7a:
         84:8d:8d:28:47:2d:cb:d1:09:cf:98:e2:67:4d:10:f9:43:16:
         f7:d3:1f:04:55:a8:51:92:d9:0f:fc:39:03:56:6d:7b:8a:67:
         1f:40:cf:39:a8:9e:a0:f1:20:80:59:f2:03:50:56:6e:41:69:
         d7:69:9e:3c:a5:4c:22:e5:91:0c:1c:8e:bf:b3:d5:fd:fc:15:
         ee:d8:15:74:37:60:d7:4d:57:87:f5:6d:5c:5d:c0:25:70:40:
         df:fb:83:e0:5d:1b:0f:e7:ad:87:8b:05:10:70:19:27:cd:9a:
         10:65:36:12:36:c0:e2:df:7a:f6:14:17:81:52:e5:d6:d0:ae:
         97:5b:e5:dc:ff:ee:33:d4:46:48:6a:ce:54:b6:a9:d1:76:75:
         4d:59:3c:53:2e:a4:a9:bf:b4:87:b0:7e:00:89:63:a8:e7:12:
         9a:cd:a9:96:29:25:27:07:fa:be:1f:7c:ee:b6:ad:67:37:df:
         71:9c:df:36:b7:52:a0:2c:08:33:d6:cf:0e:49:92:d4:c2:b7:
         b0:fa:18:f8:dd:8a:b6:a8:10:fb:47:b0:8b:e3:1b:83:cf:8d:
         cf:fa:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:55 2025 by rpki-client