Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          DudVSWBIfxpQ1ITiJpChzUYRp+HN733fX/g6yYX9h8I=
Subject key identifier:   C3:29:CC:53:CC:F1:5A:ED:07:F4:2C:CE:B3:A7:7A:FD:FB:39:EB:C0
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       019749313C7317E80D0B56B3DB761C65D235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0B25
Signing time:             Sat 07 Jun 2025 07:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:52 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: FKZ7+bjcAiPN/vhxpSzSMKT/kft8uC591b3VqSIz1Mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:3c:73:17:e8:0d:0b:56:b3:db:76:1c:65:d2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Jun  7 07:00:52 2025 GMT
            Not After : Jun  8 07:00:52 2025 GMT
        Subject: CN=c329cc53ccf15aed07f42cceb3a77afdfb39ebc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:da:c5:65:7e:62:99:ff:24:db:bb:94:3c:
                    82:77:f6:e1:b9:67:b2:7e:fa:a8:38:27:1f:0f:e6:
                    03:e2:e9:01:f3:1d:9c:88:f5:2a:f4:08:f0:b7:5d:
                    20:54:2f:be:b5:2c:ef:73:f1:97:bc:5d:fb:b3:fa:
                    6b:b6:64:36:22:3c:47:ba:0c:48:99:31:d7:ed:23:
                    29:00:10:ca:7d:17:39:57:66:96:e1:0f:89:b2:f6:
                    d5:15:ad:87:71:3f:c0:68:8d:bd:23:3c:9e:75:89:
                    97:ff:69:64:29:38:59:46:67:f0:0c:62:9a:ad:f7:
                    6c:70:43:96:e8:ac:ca:31:23:fd:21:35:8a:21:e0:
                    df:47:7a:2f:51:73:9e:cd:6c:cc:6f:8c:be:33:e7:
                    09:8b:b7:03:cd:dc:94:54:d2:74:ec:8c:19:1b:91:
                    d8:a1:5c:e1:43:5f:d6:18:cb:c2:42:06:25:7e:9c:
                    21:f3:2b:5e:7e:64:aa:c3:e9:fd:65:0b:fc:1e:df:
                    64:16:eb:3c:5a:44:65:b2:06:ea:54:a6:d9:6b:27:
                    5d:b8:01:2e:03:b2:5e:ca:89:68:cf:de:66:98:e8:
                    b0:bb:5c:5b:be:e1:2c:b0:64:a8:fb:e7:21:16:19:
                    97:bd:43:8d:6b:60:90:eb:d4:47:9a:4f:a0:ed:bc:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:CC:53:CC:F1:5A:ED:07:F4:2C:CE:B3:A7:7A:FD:FB:39:EB:C0
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:66:7b:5b:ce:c0:27:c6:7d:a0:17:69:1f:80:09:21:3e:cb:
         f7:cc:cc:bd:13:10:61:17:23:cb:8b:b6:39:64:81:45:ae:22:
         f9:68:f3:ea:88:8e:47:22:bb:18:bb:14:de:42:81:e7:75:d7:
         78:97:2c:e1:70:c0:49:f6:83:a9:f9:bf:1e:1c:94:ef:aa:41:
         6c:08:8b:8f:25:2d:87:15:e2:2f:0c:cc:49:39:e7:a8:ad:27:
         c5:68:a1:0f:66:4c:7c:cf:c9:3f:df:87:5d:03:4d:97:e8:fa:
         02:c9:d8:45:63:eb:da:8e:b2:7a:82:d9:bb:81:03:9e:11:78:
         76:6f:a1:f9:54:20:84:f7:dc:74:20:b5:22:bb:1a:86:f0:43:
         4b:c3:89:56:42:2d:d3:85:e8:c0:83:2b:16:78:c3:2a:79:cb:
         b4:be:23:4d:19:53:4a:6c:55:00:1c:92:26:08:bb:e1:37:62:
         18:b1:47:98:c5:fc:83:47:c1:10:6c:db:f8:8a:cb:a2:f5:b5:
         a1:3e:4f:10:ea:62:3b:de:83:5f:bc:3a:c2:99:c7:49:7d:40:
         7c:40:25:79:f2:df:98:cb:70:6e:d3:4b:36:fc:62:e9:ca:97:
         2a:45:03:51:d7:4e:f0:71:a1:cf:4c:f8:41:a6:b5:ae:d8:ff:
         10:7a:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:42:24 2025 by rpki-client