Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File:                     qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier:          McTpROMBCMJGVhG1HxpHUitqO3Bm93ttZ4LstXJlcro=
Subject key identifier:   CE:AC:98:82:46:89:5D:C8:17:9E:5E:9F:7D:BB:85:CC:05:6A:40:02
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer:       /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial:       01974B1F548E2F6CFBD596414EC9F92E38C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number:          14ED
Signing time:             Sat 07 Jun 2025 16:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:33 +0000
Files and hashes:         1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: l7270aFpZcCWOssHPCWaBS3KYjakskq06xmcBjTsjlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:54:8e:2f:6c:fb:d5:96:41:4e:c9:f9:2e:38:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
        Validity
            Not Before: Jun  7 16:00:33 2025 GMT
            Not After : Jun  8 16:00:33 2025 GMT
        Subject: CN=ceac988246895dc8179e5e9f7dbb85cc056a4002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:ff:0d:b8:cb:ec:52:36:ff:8f:a9:14:c5:
                    dd:2b:66:6e:c0:9a:a3:98:2c:8d:29:f7:48:65:12:
                    7d:85:7b:fd:ee:ad:d0:61:35:83:61:b1:50:7b:16:
                    98:1b:b6:db:10:a3:32:52:11:b0:0e:8c:5b:55:a1:
                    f5:ae:90:b1:d2:52:08:1b:ac:ee:e5:8e:65:e5:0e:
                    7e:3f:4a:9e:ad:ff:f1:76:b6:48:f8:43:4b:24:93:
                    89:67:0c:9e:71:02:83:cf:cb:94:e3:33:1d:d6:c9:
                    41:ee:80:4a:d0:22:0f:54:4f:21:62:f9:a2:fb:81:
                    b9:d3:5f:31:a6:dc:70:92:48:c7:72:44:6e:88:c1:
                    08:44:33:96:73:ef:1d:8b:94:3d:60:b9:cd:9b:4f:
                    2c:b3:f3:99:a9:5b:f0:b7:82:65:d5:bf:21:24:c6:
                    ed:76:a8:c7:38:af:e6:ea:1a:43:53:d9:bb:08:50:
                    da:53:b8:17:9d:34:c3:fc:35:7e:0d:f8:9f:cb:a0:
                    ac:fe:12:6b:79:bd:ec:6d:fa:6b:fa:b2:a3:8f:f3:
                    fc:54:ff:0b:bb:d4:9c:80:d6:82:bd:4a:c2:4a:e8:
                    52:44:1d:00:e5:4c:49:36:59:55:a8:4c:fd:0b:72:
                    97:aa:34:ed:a8:71:cc:a8:98:aa:55:88:9b:a4:5f:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AC:98:82:46:89:5D:C8:17:9E:5E:9F:7D:BB:85:CC:05:6A:40:02
            X509v3 Authority Key Identifier:
                keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:19:1d:2a:68:35:46:60:73:16:5b:62:5e:cb:45:0a:df:e7:
         c3:6d:e2:6d:ab:16:22:46:e4:16:2d:44:3f:14:f9:e0:eb:a5:
         8b:49:a8:49:de:57:d0:94:22:5e:c5:53:72:38:60:9e:1a:11:
         bb:b5:de:72:c4:89:27:a0:f5:67:76:41:f8:ac:af:0d:d3:aa:
         3b:cb:ef:8d:65:1d:84:6f:07:8e:37:2e:3c:60:05:2c:f8:64:
         30:ec:cd:f8:0a:1b:c9:3e:6b:e8:d3:71:d2:02:bd:17:a4:86:
         c0:ad:3f:6b:85:46:f5:ea:66:22:08:bd:6c:51:4d:ee:98:86:
         e6:40:f9:ad:f0:fa:00:e6:9c:1f:24:91:b7:ad:52:ee:09:53:
         2b:d3:0a:7b:bc:ae:00:6d:2a:f5:1d:27:a0:07:44:8f:13:37:
         d5:0c:a0:95:d6:45:39:2c:45:82:27:3f:0f:7e:d2:17:6e:e8:
         d3:c3:34:85:86:ef:56:15:93:8f:f1:54:78:bb:51:11:46:44:
         bd:f4:30:f7:ad:af:c4:4a:8c:76:a2:a9:cd:b8:a8:e7:8e:3a:
         05:37:86:cf:f6:c5:d3:62:c4:fb:14:c6:4d:3e:ad:e2:b4:d0:
         cb:06:ab:ea:7b:7a:1a:57:18:b2:8c:a5:2c:91:54:f1:8d:e6:
         6c:08:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:25:55 2025 by rpki-client