Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File:                     ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier:          w6LBn1twLX783QELmg1B1UEPhqmGkHauZfDOUo2f9a8=
Subject key identifier:   0D:CC:D7:50:05:4E:89:D0:A2:91:C1:F0:94:30:54:30:D8:B5:CE:80
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer:       /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial:       0196C494D77E6E21ABDE5D2ED60314003250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number:          120E
Signing time:             Mon 12 May 2025 13:00:10 +0000
Manifest this update:     Mon 12 May 2025 13:00:10 +0000
Manifest next update:     Tue 13 May 2025 13:00:10 +0000
Files and hashes:         1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: P/qEGDKe3TYJ/sCPUk8+eStboYpUba1CDbEcwK+1Z5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:94:d7:7e:6e:21:ab:de:5d:2e:d6:03:14:00:32:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
        Validity
            Not Before: May 12 13:00:10 2025 GMT
            Not After : May 13 13:00:10 2025 GMT
        Subject: CN=0dccd750054e89d0a291c1f094305430d8b5ce80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:78:45:6d:0f:0d:56:32:b1:2e:97:21:c2:
                    38:a1:a8:1e:38:3d:02:9e:d3:5c:1d:f2:92:ae:4b:
                    73:d6:28:55:e6:84:f3:0e:29:c4:71:94:60:23:d8:
                    da:49:b0:26:7d:79:7c:50:2a:f0:7c:ac:ae:c7:e8:
                    35:68:cf:30:52:9d:09:31:63:5f:a4:c2:01:4d:1c:
                    5d:f7:be:34:f4:6f:45:89:27:fa:65:eb:02:22:66:
                    ee:1a:e5:a4:18:d5:26:0f:f5:1d:5f:6b:9c:8f:55:
                    0d:f3:de:eb:aa:4a:f7:6c:a7:49:45:69:c4:80:ce:
                    58:34:06:a2:7a:79:13:e3:a4:0d:7d:36:b5:57:bb:
                    bd:79:8f:eb:b3:ec:12:d8:87:0e:d7:73:c1:82:65:
                    7f:3d:e4:3e:7f:4c:f1:05:c4:84:fc:91:67:b8:32:
                    24:5c:ab:37:40:fc:77:32:93:8f:ae:b5:1c:21:85:
                    4e:c9:54:f2:a5:39:8f:1e:e8:00:c1:65:57:34:e5:
                    9c:fb:c0:97:d0:d0:ca:a9:38:81:3e:7e:b0:b1:8b:
                    b6:ca:da:43:b3:f6:04:f8:54:bc:eb:01:d5:c1:ee:
                    59:49:45:b6:25:9e:8c:a3:fb:bc:6d:fd:34:70:ed:
                    df:8d:de:74:e2:97:55:48:af:47:c4:67:85:9a:aa:
                    6d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:D7:50:05:4E:89:D0:A2:91:C1:F0:94:30:54:30:D8:B5:CE:80
            X509v3 Authority Key Identifier:
                keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:33:94:58:8e:e2:50:98:d7:13:10:5e:17:34:65:69:86:
         3c:a4:e7:f0:46:20:7d:3a:2d:b0:a9:4c:af:4b:45:6f:4f:18:
         9b:73:b3:d8:5d:07:17:a6:ab:5b:e8:ce:11:87:c9:d5:04:3e:
         f5:bf:17:00:c5:3c:45:09:f9:fe:8e:05:f2:0c:fd:77:27:53:
         46:04:f4:82:2a:e6:ca:3c:e8:e7:1f:61:a3:7e:a3:02:a7:7e:
         fb:4b:56:5a:da:0d:6e:fd:26:ae:79:72:50:bb:5f:b9:c5:4e:
         ca:8a:0f:53:15:0f:47:58:20:6a:3e:c5:a5:46:25:2b:16:1e:
         e5:cd:86:d9:c7:32:08:3f:1a:6a:0b:b9:b7:01:ef:83:89:cc:
         50:72:03:d9:57:16:8b:44:fc:b9:2d:d5:9c:39:50:88:d9:a4:
         90:80:fa:b0:3f:c0:18:3d:11:fe:5f:ba:82:8c:90:33:38:83:
         57:b6:92:01:ca:9f:a3:88:f5:fc:af:44:b9:61:07:15:eb:b3:
         c7:85:ed:fb:43:4e:62:95:85:db:06:43:f3:c8:b9:ff:c8:e7:
         f0:e4:f0:14:b3:45:10:95:9b:f7:c4:2d:61:d5:2a:cc:50:58:
         91:a9:93:3a:50:e3:cc:4b:68:24:70:7e:a0:f6:e1:d5:59:a1:
         28:65:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:54:35 2025 by rpki-client