Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File:                     ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier:          NRecqF7vHmqmWZfZc7jbJb46xeuUbPlwKZCamR3/1dU=
Subject key identifier:   E9:7C:15:C2:5E:A9:9E:29:44:04:72:A7:D0:67:7F:C0:50:DC:31:2A
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer:       /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial:       01976F99DFA0FF3D2BEE16160CF33ACCCB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number:          0684
Signing time:             Sat 14 Jun 2025 18:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:44 +0000
Files and hashes:         1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: zw3b9zD0bKLQ2gtCSEebvdYUPotHsOVDZcI8eVwz7pM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:df:a0:ff:3d:2b:ee:16:16:0c:f3:3a:cc:cb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
        Validity
            Not Before: Jun 14 18:00:44 2025 GMT
            Not After : Jun 15 18:00:44 2025 GMT
        Subject: CN=e97c15c25ea99e29440472a7d0677fc050dc312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:cf:59:dd:40:ec:e2:20:06:4d:e5:35:36:
                    f5:49:5b:b2:8a:f8:eb:45:7e:73:96:e1:2e:fd:3c:
                    13:83:0b:e8:cd:64:c8:d9:42:b3:af:b0:87:f8:9c:
                    68:fd:20:45:97:2f:b0:35:78:de:1b:79:d0:d4:df:
                    1c:23:41:d7:b0:be:df:02:4b:cb:2c:21:d2:00:41:
                    7b:e4:80:65:54:fc:2c:96:89:52:fb:f2:4f:0a:f2:
                    c5:49:90:ad:2f:fe:67:04:29:ba:64:cb:42:e8:88:
                    f8:05:97:14:5d:ed:a8:92:20:28:30:77:fd:0a:bc:
                    b9:0d:83:60:5c:9e:09:f0:44:f9:e1:4b:c5:c5:af:
                    51:a1:8f:17:2f:05:cc:d3:65:33:4c:43:d2:4d:c2:
                    1e:14:03:c6:e8:17:66:20:ab:9e:00:7e:37:7d:be:
                    be:8f:d4:0a:fb:d9:05:7e:e5:29:28:bd:81:4c:90:
                    95:a7:f6:1c:af:54:bf:19:9a:71:1e:62:f3:49:41:
                    ec:ad:de:29:07:65:1e:fb:c5:85:f7:a1:ab:1e:aa:
                    e3:91:48:01:0d:69:0e:b6:52:40:a5:55:b7:98:29:
                    b5:d9:00:83:62:cf:67:24:8c:3c:b9:cb:82:d8:86:
                    c0:1a:86:1f:b9:74:0c:97:fc:1d:14:43:12:71:de:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:15:C2:5E:A9:9E:29:44:04:72:A7:D0:67:7F:C0:50:DC:31:2A
            X509v3 Authority Key Identifier:
                keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:a6:ef:9a:94:80:b9:b1:db:0b:72:a9:04:e9:e8:df:04:
         80:3d:c5:d5:e5:f0:c2:eb:9b:f3:16:2f:73:25:4f:2e:34:1d:
         03:f8:ca:bf:8d:03:7f:1f:fb:93:40:cb:8c:b6:cb:88:96:d8:
         05:e7:1b:df:38:4a:4e:36:b2:88:97:a3:52:51:64:1f:f2:a0:
         14:07:08:90:00:6c:0e:ef:c5:99:39:e2:77:38:71:ff:dd:e9:
         76:a1:58:e2:02:79:ba:4d:d7:29:1e:ed:5b:9f:08:e4:9c:a3:
         f6:a9:d9:b1:78:c3:65:3e:ad:0e:fc:1b:c7:d6:1b:57:a6:a4:
         4b:a2:eb:06:e4:08:77:12:e4:18:e7:0a:d5:59:ae:1f:37:77:
         36:0a:35:21:11:6f:1d:a4:62:31:c0:5a:de:99:16:5d:bd:51:
         0d:f7:e4:0c:9f:c8:76:c1:30:27:98:ef:34:4d:ab:65:92:05:
         91:60:83:e8:93:ec:fa:56:73:bf:81:f6:51:62:f8:99:66:ed:
         de:30:ad:9a:32:ab:b6:84:68:46:d3:b3:05:33:a0:ce:bb:51:
         08:e6:5f:84:79:4c:9c:0b:29:c8:8c:b4:45:18:df:a8:69:c8:
         a1:54:ff:71:0e:ab:4b:1f:19:dd:b9:55:86:b9:b0:f3:6f:91:
         1e:90:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:38:28 2025 by rpki-client