Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
File:                     7zxxAAZFDN50pBmnFDKY5VBm8mw.mft (raw, json)
Hash identifier:          Xcc8ox+mmivfv368zQFu+kpjMgXyEvq/QTYi0907pSE=
Subject key identifier:   18:C9:EF:3F:75:48:5E:66:35:0B:8F:9A:F4:A8:5A:29:F3:CC:8F:41
Authority key identifier: EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C
Certificate issuer:       /CN=ef3c710006450cde74a419a7143298e55066f26c
Certificate serial:       0197B5FC61696077B82C05D8B0942ED1B45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
Manifest number:          04AF
Signing time:             Sat 28 Jun 2025 10:01:45 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:45 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:45 +0000
Files and hashes:         1: 7zxxAAZFDN50pBmnFDKY5VBm8mw.crl (hash: MirfCt8/+DU0rp/spSBEaiZxX7V7+HMq33Z1i3Kx+JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:61:69:60:77:b8:2c:05:d8:b0:94:2e:d1:b4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3c710006450cde74a419a7143298e55066f26c
        Validity
            Not Before: Jun 28 10:01:45 2025 GMT
            Not After : Jun 29 10:01:45 2025 GMT
        Subject: CN=18c9ef3f75485e66350b8f9af4a85a29f3cc8f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:8a:db:70:da:79:e1:e8:e7:91:69:72:a1:
                    c2:a4:92:c6:5a:5d:ed:c4:11:35:14:98:18:d0:de:
                    45:45:ae:c0:5f:38:7c:8a:19:a9:0b:25:f6:68:50:
                    64:25:8a:b9:27:fb:ef:d6:ee:4b:9c:07:b6:2e:9e:
                    b2:a8:29:65:8f:b0:56:78:ce:65:b6:1c:d7:de:1e:
                    96:f2:f8:45:15:d2:9e:12:69:cb:62:1d:16:51:85:
                    53:73:cb:cf:12:af:e1:da:bc:61:69:03:27:8b:0c:
                    6b:27:e6:7e:8e:3a:6d:a1:58:32:b1:6c:ce:4d:fd:
                    bd:c1:2a:79:93:ed:19:b0:dc:d9:b6:15:01:0a:55:
                    a4:0b:b5:34:ea:ed:fb:c8:30:d6:14:08:9d:e5:36:
                    ee:b1:de:05:95:8d:0f:80:5e:c7:63:67:12:21:9e:
                    93:d0:ef:31:33:58:38:dc:fc:4a:18:c2:45:b1:99:
                    fe:05:6c:5a:96:75:ca:64:c2:e1:aa:dd:f4:7f:e6:
                    07:fc:f9:a0:01:71:09:94:0e:a5:3c:03:b8:3b:d7:
                    aa:da:ec:6c:5a:c9:2f:02:de:e0:b9:c1:b7:f8:26:
                    28:8f:26:e0:23:3f:c8:3d:27:d3:09:ad:1a:fb:08:
                    80:33:37:31:5c:7e:63:a7:e5:97:fc:39:a1:c4:4a:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C9:EF:3F:75:48:5E:66:35:0B:8F:9A:F4:A8:5A:29:F3:CC:8F:41
            X509v3 Authority Key Identifier:
                keyid:EF:3C:71:00:06:45:0C:DE:74:A4:19:A7:14:32:98:E5:50:66:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zxxAAZFDN50pBmnFDKY5VBm8mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eb1683-7835-43f9-8940-4dbd52d45410/1/7zxxAAZFDN50pBmnFDKY5VBm8mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c0:da:f2:19:3c:ab:1c:22:8a:03:93:5c:22:18:23:43:5d:
         94:39:c5:b3:17:b1:f9:60:cc:ad:6d:82:bc:92:e1:08:32:d2:
         e3:e5:84:9c:a6:4b:fc:7b:42:94:57:6e:30:2b:35:3c:f5:55:
         73:13:52:7f:45:f1:45:f8:62:72:68:5c:80:97:81:7b:d6:82:
         77:85:37:ef:da:af:83:2a:2a:d2:40:c3:fa:b5:d0:f0:6c:f6:
         01:7a:0f:67:8d:da:33:67:ec:6f:34:63:27:e7:2b:b3:18:38:
         61:f1:21:65:bb:14:16:0f:b1:1c:ce:d0:a3:09:99:56:a5:fa:
         78:40:97:90:51:69:c8:62:15:eb:f0:81:79:ba:eb:ac:ab:b7:
         47:64:fb:8b:86:25:24:43:1f:93:df:c4:91:d1:b8:81:6f:48:
         4f:32:65:6f:47:3d:15:46:35:b2:e6:3e:36:5b:52:a5:2a:4e:
         c4:45:03:b4:5a:9e:27:a8:f9:82:1f:e6:03:01:78:77:b8:d5:
         b7:4a:f2:3d:7e:2e:aa:4c:6e:de:37:70:8c:23:e7:a8:74:0b:
         f3:20:42:72:5e:f0:69:b8:19:9a:31:01:1a:1e:d3:b1:26:db:
         17:3f:76:a2:00:ec:5f:9b:dc:99:d6:22:d6:98:0e:f1:ab:21:
         31:4f:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:44 2025 by rpki-client