Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File:                     g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier:          pEx5+6qcA2WdwHMM6sex7ARLRoERy+Jp5EcpswBjQII=
Subject key identifier:   28:D1:8E:99:E9:88:EA:11:42:0E:AB:82:7F:64:22:42:D0:27:A3:7A
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer:       /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial:       01974A7A51EA1B29CB1D32A03F74F29ADEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number:          54
Signing time:             Sat 07 Jun 2025 13:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:19 +0000
Files and hashes:         1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: ghaYAAHpUynOgnK9Wu6rUuFzhnEfnWTsKz0jwF17L3A=)
                          2: msDEeS6sASlV5Nrug60HOmxHAjw.roa (hash: td9s2j9cTMVJ/N4A25CfBZ5lbq+TNEGFP43f11ycPe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:51:ea:1b:29:cb:1d:32:a0:3f:74:f2:9a:de:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
        Validity
            Not Before: Jun  7 13:00:19 2025 GMT
            Not After : Jun  8 13:00:19 2025 GMT
        Subject: CN=28d18e99e988ea11420eab827f642242d027a37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:3c:80:bc:a0:c3:27:a5:0f:e5:01:a4:8a:
                    71:99:df:6d:2a:fb:6a:f5:ed:9c:7f:06:85:a6:a5:
                    de:5f:0b:6b:fd:b4:d6:eb:41:cb:96:19:af:a6:e8:
                    f0:00:8d:90:cf:0f:cc:a9:85:5f:cb:03:68:b4:e1:
                    39:6e:e6:de:19:bc:d2:fd:e1:5c:9a:17:22:f9:6b:
                    3f:7b:0b:a9:7b:40:85:78:fb:cb:93:7c:69:1e:d4:
                    e5:ad:ab:5f:b3:7f:5c:45:a9:d6:08:c8:4c:34:ca:
                    e6:61:21:46:a0:7a:15:0f:b5:72:a3:9c:f4:f4:dd:
                    80:98:e3:2b:f1:a6:29:c7:0d:86:31:70:0f:23:e7:
                    0d:dd:f7:bc:b3:75:ad:fd:b6:88:c9:cb:25:58:f7:
                    78:d2:8b:7e:9f:5d:16:c7:50:dd:2c:cb:e2:13:6c:
                    6d:39:e9:aa:fd:bc:92:ce:67:7c:d5:3c:88:12:b5:
                    47:c3:43:99:f4:ba:4d:4e:d0:ab:81:5c:c4:cf:19:
                    89:7d:88:d9:ff:31:fa:d6:5d:70:b8:6e:c2:75:ef:
                    63:1e:6d:8a:6a:67:1e:16:6e:da:ae:ba:f2:4d:7c:
                    89:c1:51:7d:7a:ed:c0:f5:82:b0:d6:5b:bf:c2:65:
                    15:6e:69:51:a8:e3:5c:21:b0:c5:29:94:bf:0c:14:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:8E:99:E9:88:EA:11:42:0E:AB:82:7F:64:22:42:D0:27:A3:7A
            X509v3 Authority Key Identifier:
                keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:50:db:49:b2:85:38:17:e9:dc:05:b4:9c:bc:7d:28:07:e5:
         93:c0:5e:68:48:04:4f:01:d2:6d:9f:c6:54:f7:d2:da:58:51:
         70:5b:a9:fe:2a:5d:63:5f:55:d2:5e:66:4e:52:b4:93:73:57:
         e0:e2:fa:08:85:ee:4b:b4:db:dd:97:05:5f:7b:30:93:1d:29:
         f4:7e:08:bc:cb:08:19:26:83:b9:5e:aa:8b:89:7c:25:12:93:
         c4:02:5e:74:5b:77:39:14:0b:4f:7e:9c:a0:fa:45:75:b5:64:
         4d:1b:74:9d:ef:05:7d:06:28:e0:53:09:1d:b8:62:78:e9:61:
         65:b3:c5:63:cd:26:62:13:45:fd:8b:0d:f3:b0:56:26:52:06:
         72:20:83:43:47:84:79:56:20:35:28:d0:f0:f7:58:1c:cf:bc:
         96:75:e4:dc:0c:c9:55:85:7c:e1:fb:05:99:17:38:10:18:97:
         22:82:88:2a:e4:5c:a5:c1:2b:1e:f6:75:63:01:cf:7e:c3:b9:
         34:21:19:0e:11:fc:d1:f2:eb:55:23:19:fc:f7:cb:67:5d:dc:
         d3:33:cf:f2:29:97:b4:09:54:d3:fa:f6:e5:e9:92:9e:b7:7f:
         e6:4d:af:ce:07:77:92:15:63:92:09:b7:63:9c:a2:4e:ee:45:
         00:61:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:54 2025 by rpki-client