Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File:                     bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier:          gEKChu3qDc1QIbDS532fpneA98vdNc5aEF8C0lA8h/I=
Subject key identifier:   6E:53:2A:CA:90:A8:79:28:AA:70:7C:8A:28:57:0D:72:CF:2E:CA:92
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer:       /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial:       0197B70ED2B38117F81CDE27C88FE53978B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number:          1247
Signing time:             Sat 28 Jun 2025 15:01:31 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:31 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:31 +0000
Files and hashes:         1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: nQWbxUJKvvU3qOMxk69n+oVPsW5iYKRqDh52xIjUkDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d2:b3:81:17:f8:1c:de:27:c8:8f:e5:39:78:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
        Validity
            Not Before: Jun 28 15:01:31 2025 GMT
            Not After : Jun 29 15:01:31 2025 GMT
        Subject: CN=6e532aca90a87928aa707c8a28570d72cf2eca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b8:88:72:44:49:2f:17:93:7d:13:d7:39:03:
                    cb:ef:51:a2:3f:9b:cf:89:aa:9f:3f:69:54:90:9d:
                    52:44:a0:02:b6:0c:c2:6b:24:3b:b4:d2:81:de:1f:
                    4c:d6:19:b4:f7:ef:87:77:1c:d3:2d:35:7f:ad:8c:
                    55:97:65:68:26:e3:50:ff:2c:c6:e5:6a:fd:c4:4d:
                    04:5e:42:28:4f:9b:ef:b9:d5:84:f3:6e:96:c5:23:
                    0d:3c:5a:9e:5f:4f:c7:27:8f:0a:e0:4b:6d:b5:34:
                    ef:23:c2:57:d5:fa:4e:65:71:ca:f8:cc:c8:74:e9:
                    1b:c6:f5:3f:80:0b:de:6c:a7:f1:30:06:37:4c:e8:
                    66:1e:f0:34:60:de:ea:64:04:1f:cc:f1:16:65:4e:
                    d9:77:3d:f8:63:50:2c:93:c8:f9:11:71:cc:fb:a2:
                    dd:10:99:5c:e3:81:b2:2f:7e:33:12:3f:a8:6f:20:
                    de:90:a0:c3:8e:28:2b:d5:1e:79:ad:2f:2f:7b:e0:
                    4a:8a:2c:ff:ad:04:f7:df:cd:cb:59:f8:52:03:d0:
                    7a:1b:c1:02:de:2c:72:5e:95:d6:f8:c5:01:a2:6e:
                    b5:22:7b:40:ed:98:86:59:66:ee:2c:ee:ed:07:81:
                    d9:18:08:96:cd:e4:5d:c8:f9:5e:9a:58:58:c1:0f:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:2A:CA:90:A8:79:28:AA:70:7C:8A:28:57:0D:72:CF:2E:CA:92
            X509v3 Authority Key Identifier:
                keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:b9:7f:17:7e:cb:5e:0e:17:78:40:2e:ac:c8:ef:92:f1:
         2c:92:95:1f:63:72:a9:27:2f:95:53:b1:85:ea:32:a0:f6:eb:
         06:4b:77:81:1e:ef:fe:d1:4b:f0:4e:dc:fc:45:82:77:cd:0a:
         d1:97:6e:3b:00:a4:91:27:d3:a2:93:a1:2e:c6:af:c2:a1:19:
         a8:f2:12:de:4d:ba:34:5b:4f:34:1f:e5:db:b7:51:09:b6:b6:
         60:91:9b:7f:4c:4a:cc:35:7a:ad:fa:7c:4f:2c:1e:99:91:87:
         89:61:2e:c3:8d:a0:89:99:58:8a:ed:72:e1:47:4f:e8:69:21:
         67:71:06:35:24:b6:40:73:b6:fc:6e:87:9d:a0:e7:3a:9b:6a:
         0e:7a:60:70:b6:1d:85:0b:c3:a5:9e:57:fe:81:dc:59:af:ae:
         69:5b:39:de:44:77:ff:af:24:34:21:8a:b9:31:92:28:b2:e0:
         9e:15:5c:b9:bc:ba:94:b2:a5:4c:eb:02:59:4b:3a:ff:25:5b:
         ac:c8:3c:d8:be:ec:96:b9:b7:05:0f:2c:2b:28:7f:a6:f8:eb:
         f9:1b:a7:06:07:21:e2:50:db:87:24:2f:c6:59:1f:bc:0c:3b:
         04:d5:63:36:c3:80:8a:14:c6:4f:95:b4:48:4b:bc:6c:65:9f:
         d9:3d:12:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:35 2025 by rpki-client