Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File:                     N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier:          17PZmpDzOHVlQnqE2k2un9OdNlwuEj7VGQmz1QYrcck=
Subject key identifier:   55:B6:E1:B8:38:6C:66:1D:38:BB:CD:DA:5A:0A:A4:04:76:49:21:2E
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer:       /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial:       0196B8FF1672E3033ECDB91488B543836B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number:          0357
Signing time:             Sat 10 May 2025 07:00:47 +0000
Manifest this update:     Sat 10 May 2025 07:00:47 +0000
Manifest next update:     Sun 11 May 2025 07:00:47 +0000
Files and hashes:         1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: 0LQmZuXmW7NQ+ahh6O33b+/XsP5YvyNsNd9LVOSJGR8=)
                          2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:ff:16:72:e3:03:3e:cd:b9:14:88:b5:43:83:6b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
        Validity
            Not Before: May 10 07:00:47 2025 GMT
            Not After : May 11 07:00:47 2025 GMT
        Subject: CN=55b6e1b8386c661d38bbcdda5a0aa4047649212e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:99:be:b7:03:9b:ba:4f:31:75:8a:96:11:
                    3b:57:2c:92:9c:11:37:30:f4:74:3d:16:f8:1a:77:
                    bf:76:55:79:dd:54:ab:08:48:a1:8d:4d:80:21:17:
                    ac:13:5a:37:93:40:d6:9f:7c:a6:fb:4f:7e:1f:19:
                    e1:6e:64:ab:8f:b1:98:9e:e8:c1:f1:15:ea:f9:f0:
                    0d:1d:34:bd:63:6a:de:d9:e5:d8:47:4f:b7:13:89:
                    b4:6f:c8:e9:46:87:c1:42:50:41:a9:9b:24:ad:ce:
                    ab:a9:2d:2f:41:79:38:0f:f2:fc:67:3c:0f:fb:5f:
                    91:d6:3f:6f:74:93:10:63:bc:ee:7d:75:df:a3:0a:
                    95:ea:20:be:3d:5a:48:e9:95:53:e9:4f:7e:df:44:
                    1e:fd:75:b7:ba:aa:03:0b:68:ea:74:56:48:43:0a:
                    e2:63:b7:b9:24:7f:c3:55:8d:87:05:d4:8a:cc:4b:
                    77:56:23:a2:32:f5:7c:a9:3d:e5:53:7a:57:06:9e:
                    f9:b5:88:2e:29:60:fd:95:7f:af:56:b4:4e:da:dd:
                    78:4b:2a:6a:15:76:56:70:2a:8d:8c:26:eb:e0:00:
                    10:d1:3e:d7:32:09:ac:b5:fb:54:68:20:8e:84:71:
                    e9:34:2a:a1:66:01:29:80:31:1c:d5:ae:3f:b6:6b:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:E1:B8:38:6C:66:1D:38:BB:CD:DA:5A:0A:A4:04:76:49:21:2E
            X509v3 Authority Key Identifier:
                keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:8e:f5:84:9b:7d:b7:b3:7d:dc:84:1a:38:57:40:b0:77:b1:
         a3:6c:52:23:40:bc:ee:47:db:ae:c5:80:d9:fd:10:4b:2b:c5:
         20:53:57:26:d2:98:12:b1:b0:1d:73:79:11:32:e5:05:86:36:
         6a:92:06:60:28:24:f9:25:6b:b7:11:25:9d:1b:8f:c4:4b:51:
         54:c5:b4:6d:75:dc:24:7e:1a:1f:96:e9:e7:f7:90:e4:25:54:
         b4:59:f3:6b:d8:ce:a8:af:1d:21:04:74:09:6b:d3:5c:49:b3:
         1d:d6:13:8f:e6:b2:0f:57:ba:b5:8f:78:0e:20:b4:4e:8f:0b:
         bf:17:a6:de:b3:58:08:06:a8:a0:ec:7f:cf:27:4f:64:b3:e4:
         ce:ed:ac:71:02:53:1f:ce:9d:1c:99:fb:21:a9:40:0d:04:5a:
         76:53:15:b4:11:7e:11:8e:e4:1b:ae:1f:4c:d2:31:56:96:d9:
         bf:f7:0f:c2:30:47:87:79:ec:66:32:ce:0b:b6:81:5b:d1:c7:
         60:ee:59:82:d1:b7:8e:b1:55:7b:e0:1f:ff:94:cc:78:9e:53:
         d6:b7:4a:9f:40:72:d4:64:c5:62:56:c3:da:48:84:a4:e3:cc:
         6a:c4:15:76:88:2c:d3:d1:a1:1f:f5:c5:f0:92:42:87:af:71:
         c2:55:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:51:01 2025 by rpki-client