Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File:                     zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier:          dtk8xjsiP/AG0GhBLGQacgsc7sT8+oJAqOZWr5Z1L4Y=
Subject key identifier:   47:F3:8F:37:01:49:22:DA:6D:D1:CA:5F:5F:DA:B4:AE:5A:8D:D6:F2
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer:       /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial:       0197B6A1E6E63D80E2A5A788FB29D5BD5932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number:          07D3
Signing time:             Sat 28 Jun 2025 13:02:33 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:33 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:33 +0000
Files and hashes:         1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: aVkHgfq92A0rAuQtj4fruz/E/v/Vhy8cewpLL+OFCcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:e6:e6:3d:80:e2:a5:a7:88:fb:29:d5:bd:59:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
        Validity
            Not Before: Jun 28 13:02:33 2025 GMT
            Not After : Jun 29 13:02:33 2025 GMT
        Subject: CN=47f38f37014922da6dd1ca5f5fdab4ae5a8dd6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:62:4f:e1:55:c6:b4:b4:51:8a:0b:a4:22:
                    b5:d3:01:86:49:5c:e1:f1:63:de:4a:78:90:85:40:
                    46:36:30:59:b7:c1:72:be:2d:56:73:16:5b:a5:63:
                    80:46:2d:f5:1e:fb:61:22:84:77:36:bd:c6:44:73:
                    72:c6:cf:f3:51:f2:9b:d1:a5:8d:1f:d6:32:d4:07:
                    15:1d:21:cb:c1:39:bd:f6:22:fb:61:b1:2e:92:37:
                    6d:fa:15:16:c1:1f:54:25:44:3f:15:bc:62:c3:0f:
                    e2:f9:30:07:86:52:05:60:b6:13:a6:62:c7:5d:d5:
                    3c:a0:5e:da:64:e0:bd:f4:ff:d0:52:2b:67:04:28:
                    f2:5d:42:04:68:7e:fc:7a:37:f4:82:59:1b:9a:b9:
                    d4:2b:c3:f7:6b:94:65:bf:cf:b9:c0:74:af:40:67:
                    94:db:39:fa:43:31:37:3e:fb:4e:c3:ef:05:11:d0:
                    18:b2:14:fb:37:43:b3:56:33:be:1f:1c:29:7d:d4:
                    80:e4:03:65:8b:97:cc:2d:29:57:fe:03:14:d2:2d:
                    d8:07:28:9c:dc:be:f6:c9:a2:88:bf:c0:25:87:dc:
                    04:a8:dc:92:d0:cd:23:bc:51:55:37:94:9a:1c:11:
                    c1:8c:43:06:0e:02:08:6f:35:be:d1:ce:d9:3d:96:
                    50:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F3:8F:37:01:49:22:DA:6D:D1:CA:5F:5F:DA:B4:AE:5A:8D:D6:F2
            X509v3 Authority Key Identifier:
                keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:cc:4d:ea:5f:3b:a8:31:fd:8b:fd:e4:75:2e:03:e4:58:
         4c:c3:f8:77:a3:bc:6b:85:0d:d3:76:9b:9d:78:1b:16:92:03:
         b5:e6:e5:08:07:43:37:34:45:ff:30:4b:5a:8f:52:7b:8a:b7:
         e3:df:31:1b:ee:da:ea:59:6e:b7:25:d3:d3:1d:2c:6e:92:ae:
         7e:52:94:4f:c2:5f:01:0d:53:ca:71:77:b0:a3:8f:0e:69:1e:
         d9:c8:0c:a5:1e:b4:4a:49:78:0a:0e:ad:51:4b:83:e5:da:ea:
         aa:38:01:48:4e:57:fc:4a:33:68:71:3c:a9:25:11:80:93:d8:
         01:09:c3:17:a0:c4:17:cc:a6:cf:fd:59:1d:f5:90:b4:f5:3e:
         49:c2:3f:4a:53:b1:eb:08:23:a6:1d:a1:ab:a5:97:c1:9f:c5:
         d4:56:6e:8e:b7:aa:fc:38:b2:9b:76:0b:ee:ff:2c:27:03:dc:
         de:55:30:a4:01:93:83:be:87:7f:c9:86:4e:ce:4c:df:0b:99:
         a9:89:99:6c:11:b2:13:76:65:24:0a:f2:5e:24:c3:33:c5:17:
         14:51:20:e2:a8:e3:bd:13:0d:c1:7d:87:e2:ac:67:64:32:16:
         79:1a:9a:a4:84:3c:4e:76:4d:ff:57:fd:6e:3c:ea:f9:33:19:
         2a:4d:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:01 2025 by rpki-client