Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File:                     cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier:          tlFG/8ABozq3t6Dv9uJ9w2IJzdsbMr4+Jy1YL6y043M=
Subject key identifier:   70:70:7E:C0:BB:B0:DA:C4:3A:AB:83:67:40:6A:35:C7:3E:BC:A8:66
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer:       /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial:       0196CF869C553010B69AA8D7F098D32A4BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number:          0499
Signing time:             Wed 14 May 2025 16:00:27 +0000
Manifest this update:     Wed 14 May 2025 16:00:27 +0000
Manifest next update:     Thu 15 May 2025 16:00:27 +0000
Files and hashes:         1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: UGc49UYhVnmxwEa3FxyKoNwmEAnOx3Y9dhriib80X/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:86:9c:55:30:10:b6:9a:a8:d7:f0:98:d3:2a:4b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
        Validity
            Not Before: May 14 16:00:27 2025 GMT
            Not After : May 15 16:00:27 2025 GMT
        Subject: CN=70707ec0bbb0dac43aab8367406a35c73ebca866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:25:f9:f6:0b:9b:d7:55:33:25:c5:0d:15:
                    14:a4:f8:d1:0b:23:56:bc:a2:38:7f:47:9f:d0:15:
                    fd:64:2f:98:00:a5:6a:9d:8e:63:32:52:74:41:cb:
                    de:3e:d2:79:4c:aa:90:a5:aa:b7:f6:81:37:9d:cd:
                    b5:21:44:af:72:32:b0:06:37:87:72:44:6d:e7:08:
                    8a:f4:e4:18:7a:7d:0b:20:cc:1f:71:1a:2f:ca:31:
                    8f:1e:be:83:a6:94:31:d8:de:b7:c2:da:91:a7:56:
                    3e:3a:0a:01:ef:80:7a:88:af:30:d3:b7:0e:e6:ed:
                    c1:bc:ec:f0:b6:a5:6a:9e:17:bf:f7:a0:24:b6:fe:
                    db:e3:c5:b2:58:15:18:56:fc:e4:2f:e3:86:49:58:
                    33:77:5c:e2:4c:14:6d:88:53:cb:09:2d:c6:55:6d:
                    e6:57:6e:3f:a6:55:ae:05:93:5f:b8:58:c4:c8:dd:
                    51:2d:3c:74:d5:eb:b1:c7:0a:68:8d:1f:45:57:06:
                    b6:72:0f:cc:d9:5b:1c:49:4e:c2:d4:8e:3d:72:e1:
                    25:90:7b:2c:46:90:94:24:2c:56:93:41:0c:45:2c:
                    17:68:66:38:2c:35:fc:a4:d6:5d:41:80:19:0f:de:
                    01:cb:7f:91:51:9a:15:31:3b:7c:da:4a:cf:0c:2d:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:70:7E:C0:BB:B0:DA:C4:3A:AB:83:67:40:6A:35:C7:3E:BC:A8:66
            X509v3 Authority Key Identifier:
                keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:32:5d:b1:eb:bd:45:39:56:ea:60:63:5c:24:97:63:d7:9f:
         f4:04:61:72:95:a8:7b:cf:a1:90:3c:40:0d:06:ad:52:5b:8f:
         a6:9f:71:8e:0d:2f:8d:b6:00:08:cf:05:0c:8b:24:54:68:5e:
         a0:10:85:4e:cc:47:22:24:ae:03:28:f4:b2:a4:4f:8e:c6:16:
         1e:65:a1:30:a6:4c:2c:28:94:34:21:cc:39:a3:47:65:8b:d5:
         a2:b1:b3:85:3d:6c:40:16:20:9b:5c:92:fe:58:36:9a:3f:e8:
         99:02:9b:71:7c:bf:95:f4:7d:70:db:98:03:bb:c4:60:3d:0f:
         c8:b2:5c:d7:6e:e1:d6:3d:01:7e:64:30:e1:85:c2:68:9a:83:
         b4:ae:41:ec:9c:3d:f7:df:01:47:df:fb:34:38:60:e2:fc:11:
         5c:04:62:14:d8:6b:dc:e7:2c:1b:63:4a:5d:9e:82:eb:32:fe:
         85:ca:ce:9b:f3:21:28:ac:f9:ae:f1:64:4c:09:10:5f:90:ef:
         8a:66:39:79:3e:3b:a6:84:ee:8b:ba:f0:cd:5a:bf:28:ca:92:
         01:37:2e:90:8a:4d:f0:3a:df:d3:33:57:0d:74:59:aa:bf:ec:
         33:8c:5c:37:22:6c:78:1e:93:3a:5d:72:bc:21:3e:aa:ff:a8:
         c9:3f:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:27:07 2025 by rpki-client