Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File:                     sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier:          a595G9DKb0SgWhpdge20FhiQKGOcUqBMaMa58MrS4M8=
Subject key identifier:   FF:B0:BE:A4:70:9A:78:14:0B:F4:37:53:90:F1:D0:9C:60:D5:9E:CF
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer:       /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial:       01974B56658FA97818382E873C012C8C8CFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number:          0E91
Signing time:             Sat 07 Jun 2025 17:00:42 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:42 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:42 +0000
Files and hashes:         1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: ypT4VDkC05br6R/27qsisCN/7b+/tiZKIkjf8Oj2K1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:65:8f:a9:78:18:38:2e:87:3c:01:2c:8c:8c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
        Validity
            Not Before: Jun  7 17:00:42 2025 GMT
            Not After : Jun  8 17:00:42 2025 GMT
        Subject: CN=ffb0bea4709a78140bf4375390f1d09c60d59ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:06:fb:b4:28:55:cc:b2:dd:c8:80:9c:ff:
                    d1:d2:d4:be:2f:dd:43:cc:e8:0c:b4:9f:84:4a:92:
                    49:e7:e3:e0:91:32:13:84:13:05:51:36:43:c2:3e:
                    80:1f:9b:45:47:99:a8:84:fe:a5:e8:ea:8e:df:ff:
                    53:0a:6b:6a:48:f4:4b:17:23:b9:6c:31:68:d9:68:
                    cd:a9:ea:cb:87:0a:6e:bd:be:15:25:62:ad:36:1f:
                    60:70:37:b2:98:7c:7c:c6:d8:f0:e3:a9:3d:39:60:
                    2b:ea:c6:13:d6:38:c4:eb:8a:bb:f4:39:03:c3:06:
                    aa:77:8a:93:ab:d9:f8:69:a8:02:c8:68:f3:ab:98:
                    e6:f0:4d:58:4a:39:57:81:7d:7f:f4:23:f4:dd:2d:
                    4a:6d:c2:12:87:5b:9b:f4:da:08:cd:f9:78:51:eb:
                    45:6d:07:6f:b2:c9:78:8b:9d:b1:fd:6d:74:85:eb:
                    e8:9d:38:50:a3:5d:09:67:e6:d2:fa:b4:a8:60:6c:
                    31:aa:11:7c:e4:86:6c:cd:2d:5e:11:22:59:41:07:
                    5f:df:17:c3:df:77:0b:8b:43:6b:6f:ce:e7:2c:db:
                    44:7d:89:94:ca:cf:db:bb:a2:92:ee:d2:15:6b:4a:
                    1e:f8:3a:f0:b4:cd:25:64:1f:3d:5f:68:52:a0:b8:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:BE:A4:70:9A:78:14:0B:F4:37:53:90:F1:D0:9C:60:D5:9E:CF
            X509v3 Authority Key Identifier:
                keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:87:84:72:96:8b:85:58:3f:be:e9:1f:36:0d:72:59:1d:
         d0:eb:c5:c6:80:49:7b:28:ef:73:2f:a7:ce:6a:e7:c5:5d:a5:
         b9:fb:94:3b:eb:97:60:74:76:6e:13:05:40:3e:1e:ef:a5:1c:
         61:80:d0:30:27:09:8f:1f:44:c6:53:2d:cc:bb:c2:c9:ed:da:
         6d:28:9b:78:98:3b:e1:d6:fb:b0:f4:21:ce:1f:a9:5a:73:9d:
         87:83:81:03:2a:d3:18:36:04:25:98:9c:18:a0:7a:53:ff:14:
         9d:25:1b:c4:8e:01:64:4c:12:34:3f:aa:47:3a:79:f9:c9:53:
         c0:83:6b:02:f9:8e:0e:7e:41:12:cb:d1:f2:ab:28:b4:ab:9f:
         5c:e6:f4:98:3f:ae:2b:2d:2b:f7:9a:32:a2:f2:59:4c:e2:3f:
         f5:26:20:05:6b:bd:0a:a3:12:5a:9c:38:9b:ba:bd:d1:2e:7d:
         8f:e0:06:80:c3:1d:b6:f5:6a:b2:37:53:fe:49:40:ac:3e:6c:
         2d:f3:1f:e6:25:ca:16:69:59:b7:dd:f7:c6:e2:90:e1:a1:09:
         c4:31:c7:64:3c:58:0d:7c:3a:c8:6c:62:c9:70:ab:6f:9f:22:
         c2:77:c2:2d:0f:06:26:72:b6:91:3b:d7:b0:b3:f0:08:80:ef:
         54:46:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:24:05 2025 by rpki-client