Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File:                     ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier:          8DpEzfPqh29Awg6tn01V9/PSyzHSXqZaZi7S1I/gOpU=
Subject key identifier:   98:2F:C4:A1:E7:59:3C:C9:59:D9:B6:33:C9:E6:86:D0:90:AB:46:FB
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer:       /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial:       019783C56EF8B19D8E45940916E7E771C0B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number:          1271
Signing time:             Wed 18 Jun 2025 16:00:43 +0000
Manifest this update:     Wed 18 Jun 2025 16:00:43 +0000
Manifest next update:     Thu 19 Jun 2025 16:00:43 +0000
Files and hashes:         1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: qA08dMFVZIR1vGIuWKNLAullNYMDqp0MumuaDZmwJ7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c5:6e:f8:b1:9d:8e:45:94:09:16:e7:e7:71:c0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
        Validity
            Not Before: Jun 18 16:00:43 2025 GMT
            Not After : Jun 19 16:00:43 2025 GMT
        Subject: CN=982fc4a1e7593cc959d9b633c9e686d090ab46fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:63:7d:c0:6b:c7:0c:c7:68:23:68:92:80:
                    c7:84:8c:93:13:1c:54:b3:e3:78:a1:8b:25:b6:df:
                    3c:2c:c5:4f:8b:ad:d2:9c:f3:8d:cf:f8:f2:f1:78:
                    3e:29:19:6f:62:6c:e2:ab:e0:1c:b9:a1:ad:34:7e:
                    af:7c:02:9b:fc:65:dc:fa:75:5f:ef:e9:4e:ae:12:
                    ba:79:a1:94:e9:74:77:1a:ff:86:b3:a6:8f:11:73:
                    15:5e:6a:d7:6f:81:4f:da:3a:c0:36:08:f7:18:16:
                    5e:3d:cd:d5:08:c2:7d:5a:d5:07:36:4c:46:64:55:
                    51:ff:67:4f:14:09:88:fc:1f:81:44:98:e6:f5:53:
                    27:66:76:57:13:3d:8d:4d:6c:b2:5b:11:9e:1a:c0:
                    b1:94:9e:b0:b7:00:d0:4a:bf:23:2f:31:32:a6:4a:
                    bb:c4:bc:a2:2d:c8:7c:c4:3c:6f:2a:85:8f:7a:56:
                    4f:50:bb:69:17:fb:1e:56:af:df:be:c3:7f:57:36:
                    21:49:eb:18:49:7a:f3:ae:e5:52:18:92:cb:13:60:
                    9e:bc:0f:e7:cf:84:fb:56:ce:da:21:07:8b:80:4f:
                    17:cc:19:00:a0:9c:25:44:90:13:25:a2:dd:d1:0a:
                    2e:dc:4c:22:bb:a6:76:ce:a5:69:22:b4:6e:f7:6b:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:C4:A1:E7:59:3C:C9:59:D9:B6:33:C9:E6:86:D0:90:AB:46:FB
            X509v3 Authority Key Identifier:
                keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c3:10:56:96:15:94:1f:77:a2:83:8d:93:65:db:69:ec:ec:
         78:5f:6a:70:13:db:b8:9e:ca:7e:69:fb:38:8b:32:02:35:07:
         b1:9e:4b:74:bd:be:86:57:74:54:96:c8:09:03:24:57:9e:73:
         fb:07:c0:31:b9:27:53:1f:d2:fa:23:95:b6:cf:c0:58:8c:c5:
         22:59:42:49:6c:d3:49:1c:17:e2:2f:ad:7f:03:5c:10:f3:2f:
         4a:61:ae:32:aa:b9:43:bd:3f:d6:0a:26:af:f3:f9:fe:55:ab:
         c6:0e:ae:01:e4:f3:54:a9:f9:c5:39:26:4c:65:f6:83:c4:cb:
         4a:20:ca:8f:a0:65:a4:c9:37:80:36:29:5c:35:cb:82:ea:a1:
         4d:4b:2b:4b:ec:f1:b9:94:3a:64:23:7f:8d:a0:33:00:75:a8:
         64:40:48:5c:c5:4b:fb:11:62:35:6b:ed:f9:b7:1b:d2:bf:d0:
         6f:18:0d:ce:72:b9:1f:43:a4:6c:ab:5b:07:34:5d:4e:f0:29:
         b7:69:83:4f:7c:74:61:eb:67:73:65:7c:f5:b0:1f:23:03:bd:
         de:46:db:bd:32:41:0f:0b:45:df:a8:59:47:1a:ae:ee:99:a7:
         7f:b2:04:27:87:dc:2f:c6:16:8b:b9:68:1c:34:64:d1:1f:ee:
         64:8c:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:50:07 2025 by rpki-client