Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File:                     ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier:          YltScKECMnHs/B1YhGvW03K0f36hva2QRPeBqw+8Nhg=
Subject key identifier:   33:92:1A:88:D6:DC:9B:0E:A5:21:5C:F0:E8:15:82:4B:39:E2:FD:43
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer:       /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial:       01976A060A820BC7FC51137D0CE5AE9881C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number:          1136
Signing time:             Fri 13 Jun 2025 16:01:10 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:10 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:10 +0000
Files and hashes:         1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: tWxUPheBShceYoU1gtJRrD9nqqnJzD4bjhtscXJVghs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:0a:82:0b:c7:fc:51:13:7d:0c:e5:ae:98:81:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
        Validity
            Not Before: Jun 13 16:01:10 2025 GMT
            Not After : Jun 14 16:01:10 2025 GMT
        Subject: CN=33921a88d6dc9b0ea5215cf0e815824b39e2fd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:1f:49:b6:0e:79:88:90:42:8a:a2:2b:05:
                    03:f4:35:7e:32:fb:0e:2d:3e:88:2b:87:32:51:1f:
                    f5:10:1e:22:5e:06:38:32:73:8c:5d:a2:82:9c:6f:
                    4c:a6:d2:4d:78:78:b2:26:0e:05:41:02:c1:a7:37:
                    7d:c8:2b:fd:30:c3:e4:38:d9:af:3d:d4:77:5e:9c:
                    37:c0:23:77:0a:83:63:9b:37:ef:54:06:37:30:d3:
                    4c:c8:ad:ee:f4:ef:84:06:23:bf:c0:a6:39:35:db:
                    de:eb:b1:f8:48:6b:e1:5f:c2:a6:19:0c:16:ad:3d:
                    6b:09:af:16:a7:9e:a6:70:92:3d:d8:82:90:fd:b9:
                    1d:c0:67:83:c1:59:38:e8:34:6c:b1:00:74:21:f7:
                    11:79:e2:f2:bb:28:e9:a9:90:b6:84:5e:f2:94:cf:
                    2f:16:21:d5:0a:9f:52:e4:34:e5:fc:c9:f4:c4:a1:
                    2b:c8:93:05:c5:ba:b0:4e:1e:2f:24:2e:9a:48:1a:
                    9c:6f:c1:cc:f0:a9:9e:4a:dc:c8:5d:14:a3:82:84:
                    90:29:f0:31:e8:58:56:be:d3:7b:e1:f5:15:b1:28:
                    42:0f:69:ca:df:ee:86:3b:1c:75:1b:a6:57:c7:ce:
                    eb:05:bd:4d:b1:bc:47:32:b5:f2:e4:0d:87:05:84:
                    0f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:92:1A:88:D6:DC:9B:0E:A5:21:5C:F0:E8:15:82:4B:39:E2:FD:43
            X509v3 Authority Key Identifier:
                keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:9a:e4:57:5a:44:95:d0:eb:79:71:84:48:4a:fb:33:1c:
         1d:7a:97:49:de:7f:9b:1e:72:9f:6b:4d:bd:e3:cd:b1:e9:49:
         ab:8f:65:c5:18:cf:e0:c6:82:a5:de:26:8d:4c:10:9b:4d:30:
         eb:29:c5:7a:86:e8:e8:85:e1:ac:9a:d0:fb:f0:1f:2e:3d:d6:
         a5:24:c1:70:79:19:8f:6d:87:73:cf:89:7b:6e:3b:f0:2f:a0:
         04:d1:60:26:de:8d:a8:f8:41:89:db:91:4d:54:63:ff:52:08:
         8a:6b:12:32:cc:52:89:71:07:51:52:dd:5a:1a:a7:a2:c4:35:
         aa:c3:3e:5f:f6:91:5c:fd:2f:b7:2f:f4:d8:fd:f1:4e:2a:a9:
         21:c1:90:4a:47:c2:a9:cf:b2:ab:a2:c5:a3:d7:e9:1c:80:21:
         98:1a:6a:82:ea:cd:ca:a9:2a:69:fc:da:92:50:ff:f7:8a:50:
         c8:7c:a6:c6:f6:5e:a2:69:e2:37:3e:6e:bf:76:31:07:1b:7f:
         4f:3d:25:c5:47:50:fb:f9:8d:04:f6:6f:62:96:2a:ce:ea:27:
         62:dd:d7:34:db:ee:37:b8:85:35:4e:a1:d0:29:11:25:11:04:
         cb:8c:68:be:7f:68:6a:da:93:ac:07:aa:73:a7:d1:61:eb:da:
         1b:4d:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:46:28 2025 by rpki-client