Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
File:                     7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft (raw, json)
Hash identifier:          ENcZDpynmHXICBTWbYKKYTbYW+uD2gH3nnor4uC26Fg=
Subject key identifier:   D0:3F:CF:48:2D:88:56:43:F7:15:EF:FC:1E:EE:1E:06:74:5A:14:58
Authority key identifier: EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8
Certificate issuer:       /CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
Certificate serial:       0197684DF3E6FA74A51041D39D1EE7117F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
Manifest number:          CA
Signing time:             Fri 13 Jun 2025 08:00:28 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:28 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:28 +0000
Files and hashes:         1: 7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl (hash: bOYQRE7Nblau+y6n5BAlovhfagoKofMPlKmJbBkORMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:f3:e6:fa:74:a5:10:41:d3:9d:1e:e7:11:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec82c30f964ff2afd0cf08f38c8b274df22714f8
        Validity
            Not Before: Jun 13 08:00:28 2025 GMT
            Not After : Jun 14 08:00:28 2025 GMT
        Subject: CN=d03fcf482d885643f715effc1eee1e06745a1458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:ca:45:17:80:3e:21:0c:f7:95:3c:bd:71:
                    9b:2e:bf:f5:2e:70:a6:7a:32:fa:0e:88:54:5e:65:
                    de:62:8b:4b:eb:65:3b:a1:93:3f:cd:88:b7:e6:14:
                    42:0a:4b:a9:ba:14:4f:d1:bb:38:31:59:fb:25:f0:
                    1b:43:55:80:52:f5:7d:36:63:7c:af:e7:97:65:7b:
                    39:d8:7a:21:8b:08:6c:24:a7:bf:ff:85:87:2e:67:
                    60:5d:aa:a9:8c:c5:81:3f:fb:ce:ec:c5:22:ab:5e:
                    b3:c6:16:05:d0:6f:7a:9b:70:9a:90:33:63:b5:59:
                    41:69:d7:7d:1a:e2:32:18:45:54:8f:ce:83:b0:41:
                    e3:13:8d:6d:ce:41:6e:a3:7d:27:b5:75:40:3e:61:
                    01:b0:d0:21:d3:76:60:fb:9a:47:b5:5a:03:3a:f4:
                    00:51:55:03:43:f3:9b:03:84:f7:a0:f5:14:5d:77:
                    0a:b7:d0:d6:37:a7:22:10:3b:7f:6d:94:27:87:0e:
                    78:4d:35:b6:ca:dd:0b:e4:39:6b:60:84:bc:b9:57:
                    a8:f4:a5:4a:fd:5d:01:76:9d:c8:32:76:a5:81:be:
                    e9:13:ff:97:c7:54:32:46:c1:e3:c7:43:5a:5c:9a:
                    10:fb:57:59:66:6f:59:63:40:1d:d5:9a:3f:39:8d:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:CF:48:2D:88:56:43:F7:15:EF:FC:1E:EE:1E:06:74:5A:14:58
            X509v3 Authority Key Identifier:
                keyid:EC:82:C3:0F:96:4F:F2:AF:D0:CF:08:F3:8C:8B:27:4D:F2:27:14:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ILDD5ZP8q_QzwjzjIsnTfInFPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9a8ceb-27ca-4a21-848b-0b954fff9b25/1/7ILDD5ZP8q_QzwjzjIsnTfInFPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:de:5e:3b:b6:31:25:48:e5:d7:44:5f:22:b7:e4:b3:95:
         1f:85:a1:62:de:77:2d:8f:19:4f:dc:e3:cc:cb:1d:38:f7:de:
         fc:2f:f7:92:db:8f:f4:eb:73:22:eb:bb:26:97:af:a9:b7:d9:
         95:3c:ed:ee:9a:8d:49:2b:8b:95:b0:45:7e:f7:51:ef:91:c0:
         2f:0f:c6:ef:b6:d7:20:7c:42:b8:62:48:a4:90:d2:32:bd:1f:
         0e:b9:d0:6c:71:d3:b6:40:3e:1a:f7:68:78:79:ec:0e:ec:cc:
         f3:ca:3d:7c:35:02:d7:27:19:76:e3:84:a9:76:7f:e2:3e:21:
         21:17:80:79:77:a6:07:54:b8:68:b2:b0:d6:eb:5c:b9:4a:af:
         f4:83:8b:86:04:9e:06:1f:b6:8f:bb:d9:e5:fe:a8:d3:84:d6:
         05:59:13:64:2d:42:9a:6e:75:21:75:36:f7:41:20:5f:a1:c5:
         40:1a:cd:8a:cf:3e:aa:08:39:40:43:dd:e6:89:35:e3:2f:db:
         f2:01:e8:53:ef:2c:d1:de:7f:78:44:dc:24:03:8b:ad:04:79:
         5e:db:0b:c3:73:99:4b:db:6e:bb:95:d7:4b:9b:b1:0c:df:14:
         9d:d1:ec:7d:bf:6d:68:a5:ab:8f:8f:47:1a:d1:24:e9:51:34:
         9d:3c:9b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTfPm+nSlEEHTnR7nEX8rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjODJjMzBmOTY0ZmYyYWZkMGNmMDhmMzhjOGIyNzRkZjIy
NzE0ZjgwHhcNMjUwNjEzMDgwMDI4WhcNMjUwNjE0MDgwMDI4WjAzMTEwLwYDVQQD
EyhkMDNmY2Y0ODJkODg1NjQzZjcxNWVmZmMxZWVlMWUwNjc0NWExNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjTKRReAPiEM95U8vXGbLr/1LnCm
ejL6DohUXmXeYotL62U7oZM/zYi35hRCCkupuhRP0bs4MVn7JfAbQ1WAUvV9NmN8
r+eXZXs52HohiwhsJKe//4WHLmdgXaqpjMWBP/vO7MUiq16zxhYF0G96m3CakDNj
tVlBadd9GuIyGEVUj86DsEHjE41tzkFuo30ntXVAPmEBsNAh03Zg+5pHtVoDOvQA
UVUDQ/ObA4T3oPUUXXcKt9DWN6ciEDt/bZQnhw54TTW2yt0L5DlrYIS8uVeo9KVK
/V0Bdp3IMnalgb7pE/+Xx1QyRsHjx0NaXJoQ+1dZZm9ZY0Ad1Zo/OY1LaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA/z0gtiFZD9xXv/B7uHgZ0WhRYMB8GA1UdIwQY
MBaAFOyCww+WT/Kv0M8I84yLJ03yJxT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGIt
MGI5NTRmZmY5YjI1LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85YThjZWItMjdjYS00YTIxLTg0OGItMGI5NTRmZmY5YjI1
LzEvN0lMREQ1WlA4cV9RendqempJc25UZkluRlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnreXju2
MSVI5ddEXyK35LOVH4WhYt53LY8ZT9zjzMsdOPfe/C/3ktuP9OtzIuu7JpevqbfZ
lTzt7pqNSSuLlbBFfvdR75HALw/G77bXIHxCuGJIpJDSMr0fDrnQbHHTtkA+Gvdo
eHnsDuzM88o9fDUC1ycZduOEqXZ/4j4hIReAeXemB1S4aLKw1utcuUqv9IOLhgSe
Bh+2j7vZ5f6o04TWBVkTZC1Cmm51IXU290EgX6HFQBrNis8+qgg5QEPd5ok14y/b
8gHoU+8s0d5/eETcJAOLrQR5XtsLw3OZS9tuu5XXS5uxDN8UndHsfb9taKWrj49H
GtEk6VE0nTybAQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:32 2025 by rpki-client