Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          +vsvaGrsYtZoMhrptE0Jlro5bLh3czcjfD56o4DFaZA=
Subject key identifier:   BC:45:B5:85:F2:58:79:B1:EE:E5:88:A8:CB:C4:8B:E4:EE:C6:66:C4
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       0197B6A157E46C919C41DF18AB1C2494CCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:01:56 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:56 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:56 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: S2GH+gEqs5I/v6+6DZsd5Ageia1/LDEVgZ9EWWLzjv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:57:e4:6c:91:9c:41:df:18:ab:1c:24:94:cc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Jun 28 13:01:56 2025 GMT
            Not After : Jun 29 13:01:56 2025 GMT
        Subject: CN=bc45b585f25879b1eee588a8cbc48be4eec666c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:c4:23:07:70:31:9b:aa:20:29:c4:43:60:
                    57:9b:75:bd:6b:6b:17:0f:8e:e3:8f:96:7f:39:8d:
                    18:04:f3:ef:29:46:af:bd:31:c9:f7:73:89:78:6b:
                    e2:45:06:2b:dd:06:dc:38:81:a6:08:3f:c5:bc:12:
                    ca:00:94:65:05:ad:c1:11:8d:13:80:39:32:85:3a:
                    fc:e8:07:a4:9e:01:15:a7:e2:19:47:ec:bd:3a:7c:
                    db:c5:61:a2:10:58:62:6c:51:94:28:18:a5:e8:1e:
                    6b:21:12:82:e0:63:f4:0b:25:2f:00:dd:8f:3e:5b:
                    d4:1e:05:3f:af:eb:93:bb:eb:55:3a:ba:c4:4a:27:
                    b7:92:1d:51:c2:10:d3:3b:5a:26:7b:55:99:e2:72:
                    ec:2a:34:b4:54:5b:31:ba:b7:cc:9a:94:f7:4b:7a:
                    2f:80:ca:78:af:54:58:07:3d:72:84:43:07:dc:a4:
                    d6:7e:4a:8c:e5:93:63:a1:5f:92:f8:fa:9a:7e:ce:
                    0d:39:ff:24:42:9f:48:d2:10:7d:ec:e0:f1:37:72:
                    99:0b:e3:a2:f2:27:69:d4:fe:e0:42:54:1e:71:59:
                    ac:d5:4d:70:b8:d7:ed:b1:2f:a1:67:87:b5:3a:00:
                    90:55:85:0c:f7:db:89:41:6b:d0:64:94:73:3c:18:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:45:B5:85:F2:58:79:B1:EE:E5:88:A8:CB:C4:8B:E4:EE:C6:66:C4
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:98:1e:c0:17:ad:57:1e:e7:59:09:62:eb:ec:f9:5e:f7:b9:
         74:7d:a4:42:b7:a9:d6:49:d6:15:14:20:26:78:18:6b:25:a9:
         d9:ab:1d:14:e3:a2:10:e2:93:90:c4:5c:6b:00:7e:d0:eb:81:
         54:70:0e:cd:ef:ac:40:a3:f3:17:42:e7:8c:f0:5f:c1:1b:60:
         0b:66:24:8d:0d:19:89:24:2c:a3:bf:cd:8f:99:04:80:5f:c7:
         a1:63:bb:6b:bb:85:17:1c:92:05:a2:e1:01:79:0f:2a:02:09:
         a6:7c:95:ce:d5:17:4e:8b:c9:0d:10:68:21:f8:ae:9e:68:78:
         56:29:04:89:49:03:b2:cf:7d:98:b2:85:66:bf:5e:86:53:d7:
         bc:9d:ee:04:90:44:f4:f5:7c:57:18:6a:d1:a3:60:93:f4:3b:
         07:9d:f2:2f:8c:60:c1:72:4f:b5:a5:6d:71:34:45:4c:4c:fc:
         a0:fa:a9:6c:21:ce:40:ba:0b:e6:f2:bb:00:b0:a7:67:cc:bf:
         50:ef:25:1b:57:05:8d:bf:ca:f4:cd:55:5e:7e:1f:ea:77:bc:
         70:80:e5:8e:cd:6e:d6:32:0d:e9:8b:8e:06:da:93:88:36:89:
         82:6d:93:3b:1b:78:99:ec:01:02:fa:0e:61:99:55:87:81:dc:
         0b:a4:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:03 2025 by rpki-client