Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
File:                     LHPvCB4tVzHERXQ5c6lqv96xQss.mft (raw, json)
Hash identifier:          yWUgCFwSeLvnCuTa5f3PDaroxT2BD4B+bysBry9rnT8=
Subject key identifier:   61:89:FC:2C:D8:A7:B9:F4:C4:4C:88:63:B4:B3:4D:F3:47:CC:D5:69
Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB
Certificate issuer:       /CN=2c73ef081e2d5731c445743973a96abfdeb142cb
Certificate serial:       0197469DEECA144B7C6BE1810CD717F6B99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
Manifest number:          0674
Signing time:             Fri 06 Jun 2025 19:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:44 +0000
Files and hashes:         1: LHPvCB4tVzHERXQ5c6lqv96xQss.crl (hash: nKZBhw6Mgf3f0Yje9AzOEkodjUPw+Kgl4PD5YvPp3e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:ee:ca:14:4b:7c:6b:e1:81:0c:d7:17:f6:b9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb
        Validity
            Not Before: Jun  6 19:00:44 2025 GMT
            Not After : Jun  7 19:00:44 2025 GMT
        Subject: CN=6189fc2cd8a7b9f4c44c8863b4b34df347ccd569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:10:e6:ae:ca:ca:db:f4:3f:93:2e:6c:7d:
                    3c:0a:82:fc:6c:7c:83:c5:4f:90:10:c8:65:dc:7f:
                    1e:1c:9b:0b:3c:01:c8:6e:86:1e:2d:28:55:a7:29:
                    26:7f:b5:10:d1:cc:77:33:23:05:da:02:ea:5e:a7:
                    da:3d:56:87:c6:e7:24:9a:6a:a3:ab:30:10:33:88:
                    6f:06:9d:1e:c6:60:47:e5:c7:c7:73:16:0d:15:23:
                    16:e7:51:25:f5:9a:4f:be:77:0a:53:23:4f:8a:fc:
                    a4:6a:a5:f2:71:7c:34:c0:79:27:c7:7c:ec:0e:a3:
                    b2:66:79:8c:57:aa:43:36:63:02:31:75:b6:25:69:
                    4e:de:b9:b2:af:07:e7:1b:a0:17:63:f6:cf:e1:3b:
                    7b:72:4b:9e:db:ae:79:51:51:53:b3:5b:01:75:4d:
                    75:c6:41:d2:4d:33:a5:4a:93:72:9b:ac:67:0f:ea:
                    ed:18:22:41:bf:b0:eb:96:25:02:03:b5:4f:94:4d:
                    37:ce:38:97:91:5e:70:66:95:3d:d1:9c:cb:1a:c6:
                    e7:e2:81:65:eb:6e:1f:3b:eb:fd:04:60:3e:eb:e2:
                    0d:99:ae:b2:3a:57:0b:5c:0a:d8:a7:ec:d2:8b:b7:
                    d3:8b:eb:05:86:cd:da:b3:e3:22:d8:79:20:97:d9:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:FC:2C:D8:A7:B9:F4:C4:4C:88:63:B4:B3:4D:F3:47:CC:D5:69
            X509v3 Authority Key Identifier:
                keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:45:cb:f7:b3:ec:ed:57:70:86:34:b9:79:06:e9:16:b1:a1:
         31:fb:8c:f3:39:95:21:c3:67:45:0f:8a:2d:c5:5e:90:a9:6b:
         26:f3:95:7d:59:58:f1:98:9c:c0:de:4c:82:83:41:95:c5:2d:
         a4:b7:19:31:9e:7b:14:b3:99:77:5b:c1:b3:f2:77:f2:27:c2:
         e7:77:55:fb:3f:7a:8a:57:d0:f7:07:18:f4:11:5f:5a:cb:5b:
         21:76:8b:12:fe:25:83:70:ca:92:cd:64:c8:ca:16:26:d6:a2:
         35:1b:45:75:b5:1d:ee:33:ff:b3:58:ff:80:f6:e4:46:4d:79:
         84:78:9f:d0:69:34:89:d2:87:ff:7d:9e:8c:10:ef:b5:80:38:
         50:55:54:21:11:88:d9:92:ec:9f:51:a9:3d:c0:b3:65:3b:89:
         a3:82:29:a7:59:ca:d9:93:b4:f7:b6:31:cd:15:9d:40:23:fd:
         d7:4c:74:f1:bf:fa:6d:c2:ff:7f:1f:39:32:03:ae:25:dd:31:
         6f:9e:d1:80:af:f9:83:e0:1b:6a:33:b1:71:03:6c:3c:4d:b7:
         cc:a3:ac:b0:91:a5:e2:eb:30:56:1c:d4:6c:3c:4c:29:89:71:
         36:8b:15:3b:9d:2a:c2:ef:cd:ff:f4:b1:9f:d4:41:68:e5:6f:
         e7:90:7d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:04:53 2025 by rpki-client