Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
File:                     yS0-Y6HAGI17pgy4TXDk64m4rlE.mft (raw, json)
Hash identifier:          Hvur4WQDWI2foRFn4noXavrQ2AycTaWs3xu9L0PrgxM=
Subject key identifier:   ED:BD:B3:D4:A3:5B:9F:69:B4:05:73:2C:61:93:C1:20:EC:71:D7:92
Authority key identifier: C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51
Certificate issuer:       /CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
Certificate serial:       0196DA7912596D6B58453F82F46E0CB53939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
Manifest number:          05CB
Signing time:             Fri 16 May 2025 19:01:29 +0000
Manifest this update:     Fri 16 May 2025 19:01:29 +0000
Manifest next update:     Sat 17 May 2025 19:01:29 +0000
Files and hashes:         1: yS0-Y6HAGI17pgy4TXDk64m4rlE.crl (hash: aOW4gPhm8BFpOi4LJUn9IIddi/V3qQQYh6IXoGvoXnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:da:79:12:59:6d:6b:58:45:3f:82:f4:6e:0c:b5:39:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92d3e63a1c0188d7ba60cb84d70e4eb89b8ae51
        Validity
            Not Before: May 16 19:01:29 2025 GMT
            Not After : May 17 19:01:29 2025 GMT
        Subject: CN=edbdb3d4a35b9f69b405732c6193c120ec71d792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:7c:af:58:74:4a:02:ef:ff:12:b1:e8:39:
                    6e:83:97:62:fb:51:30:b4:c8:cd:00:ab:9c:69:72:
                    2d:97:dc:24:e9:aa:24:e0:a8:bb:15:d4:64:8b:4a:
                    3d:b5:98:8b:73:d3:e0:52:63:e8:9d:82:f1:55:90:
                    12:ed:84:62:c3:06:f5:33:72:0c:0e:0e:2a:7a:51:
                    54:39:12:24:07:51:72:fd:2f:54:87:2e:f4:ab:56:
                    50:34:c0:b9:0c:c2:ee:ca:3d:c5:72:38:04:91:23:
                    06:81:3a:f6:10:4e:24:8b:b0:47:c7:db:d4:c3:70:
                    36:72:09:9d:ec:d9:2d:f1:2f:31:56:4b:2d:b9:77:
                    bf:4c:50:15:fc:07:c6:39:69:49:33:09:ef:b8:43:
                    2d:28:8a:08:3d:29:7e:b4:ec:7b:fd:79:f0:fc:98:
                    42:4d:09:e2:bb:5d:b4:81:e9:0c:c2:3a:5b:a8:d4:
                    1b:6f:40:4b:6e:ef:b2:56:6a:7e:3a:14:41:8f:b5:
                    49:27:12:c5:44:ba:d5:f1:b0:5d:74:37:21:4c:b2:
                    ac:e8:56:ef:8a:a4:a4:75:7f:bd:f4:3f:0f:57:db:
                    d3:15:b0:f4:c0:92:30:93:78:0e:22:88:1f:c7:3e:
                    83:e7:c2:aa:b5:21:c4:21:9a:ac:b9:94:07:df:c3:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BD:B3:D4:A3:5B:9F:69:B4:05:73:2C:61:93:C1:20:EC:71:D7:92
            X509v3 Authority Key Identifier:
                keyid:C9:2D:3E:63:A1:C0:18:8D:7B:A6:0C:B8:4D:70:E4:EB:89:B8:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yS0-Y6HAGI17pgy4TXDk64m4rlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7c39c-61c7-41d6-a816-7fef23f97a34/1/yS0-Y6HAGI17pgy4TXDk64m4rlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:15:5d:c1:b4:5f:b9:4d:15:85:1f:14:10:19:51:d4:7b:
         b6:69:45:15:59:c1:3a:48:fa:01:f7:cb:2b:5f:63:54:34:7c:
         a2:88:dc:a1:6d:54:db:60:24:07:ee:3e:b3:ad:e6:ff:04:6b:
         fd:2d:4d:d6:37:34:71:33:9a:87:47:ae:79:2a:c4:1e:ba:99:
         03:2b:ab:1d:1b:fe:50:48:7a:c2:94:fc:7b:9c:76:df:eb:49:
         6e:b9:66:8e:be:c0:94:83:d3:c3:de:6c:ee:ab:a3:94:f4:c6:
         f9:19:1d:44:09:7d:2b:77:35:8e:a5:9b:c4:ee:31:62:ed:dd:
         af:87:5a:7b:bf:79:b7:72:58:8a:60:ca:ed:7a:71:ce:db:7f:
         78:27:e5:f7:8a:1f:2f:02:aa:48:1a:70:ea:79:80:94:d7:3f:
         2d:ca:bc:e1:fa:39:df:8b:63:21:10:28:e6:a7:b0:8c:18:31:
         02:fd:c4:44:73:76:b9:08:d4:2f:73:35:aa:c8:8d:37:2c:c5:
         6b:f3:51:e4:58:f1:f1:68:b2:31:66:1a:29:0e:31:9f:9d:9e:
         8e:89:9d:fd:91:29:1e:93:79:c4:70:94:95:57:4b:8c:76:6e:
         c3:22:75:e8:2f:1e:b9:17:af:d4:ab:83:fe:6a:93:76:1e:d9:
         71:2a:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:21:38 2025 by rpki-client