Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
File:                     ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft (raw, json)
Hash identifier:          vORLlGi2G/4Uy5zMSE3ODkMO20dnHIy6NwMev2XPfJc=
Subject key identifier:   1F:A9:64:5C:EF:93:EF:E3:75:39:71:27:FF:09:27:EA:BE:F1:4F:27
Authority key identifier: 92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93
Certificate issuer:       /CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
Certificate serial:       019779B009B50E4D1B50BBB0550FBFD77653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
Manifest number:          12
Signing time:             Mon 16 Jun 2025 17:01:09 +0000
Manifest this update:     Mon 16 Jun 2025 17:01:09 +0000
Manifest next update:     Tue 17 Jun 2025 17:01:09 +0000
Files and hashes:         1: ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl (hash: nzaP6cEq62s7NSaNAxKRXAX3d4v0liOZPR6P1HPV6Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:b0:09:b5:0e:4d:1b:50:bb:b0:55:0f:bf:d7:76:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c575c167e603e46dcde4a0271bb5edb3b3fd93
        Validity
            Not Before: Jun 16 17:01:09 2025 GMT
            Not After : Jun 17 17:01:09 2025 GMT
        Subject: CN=1fa9645cef93efe375397127ff0927eabef14f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:d2:d1:92:29:de:a1:54:7e:47:24:e6:59:
                    c2:33:34:d2:08:52:74:90:2d:82:9b:3e:5a:13:81:
                    0d:ea:5a:41:85:0f:80:8d:0b:02:bc:82:ec:84:ec:
                    b1:8d:16:dc:63:f7:45:e3:69:c7:fd:11:0a:0c:12:
                    1c:ce:25:ab:50:f0:85:a3:49:01:87:2a:37:6f:56:
                    80:33:2b:30:df:d6:20:3c:0e:ac:c6:ca:c4:71:59:
                    1f:d5:a1:0f:7b:54:75:96:38:e1:20:80:61:fa:3c:
                    84:e6:2d:d1:04:43:27:95:7e:4f:ef:a0:06:0e:a0:
                    c8:47:50:51:5f:bb:b4:5c:84:d7:b2:f8:47:92:6d:
                    51:d8:b7:2e:e6:4c:22:d8:05:65:01:44:7a:f2:51:
                    73:2a:48:02:a4:de:3e:65:8c:80:1f:94:2d:52:4d:
                    a1:47:69:b2:61:dc:24:3e:bd:5d:a8:69:9a:5c:71:
                    2b:57:96:d8:93:da:aa:eb:a1:22:50:9e:5d:03:b9:
                    55:6d:cf:03:65:1a:cf:75:f1:80:6f:bd:c7:b3:eb:
                    f0:7d:0e:db:a4:6c:c8:ad:58:7b:34:e8:59:e5:e2:
                    17:6a:03:6c:5b:ab:f0:46:92:d5:11:ab:d5:98:c4:
                    a1:72:6e:3a:24:7d:11:86:3e:61:7e:02:0a:2f:0f:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:64:5C:EF:93:EF:E3:75:39:71:27:FF:09:27:EA:BE:F1:4F:27
            X509v3 Authority Key Identifier:
                keyid:92:C5:75:C1:67:E6:03:E4:6D:CD:E4:A0:27:1B:B5:ED:B3:B3:FD:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksV1wWfmA-RtzeSgJxu17bOz_ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3b9315-bae8-4dce-8109-77b15c59e387/1/ksV1wWfmA-RtzeSgJxu17bOz_ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f8:86:11:56:7d:03:0a:51:fc:59:84:f9:fe:67:3c:e8:a8:
         48:75:9a:45:68:24:1d:f2:90:2b:49:58:c5:50:e3:cc:f9:c1:
         f2:04:ae:82:49:85:5b:e3:29:b3:04:1c:57:f2:eb:19:0f:50:
         f3:5a:e7:b0:1c:1c:2c:e8:65:cd:e1:86:8f:f8:02:1d:ae:70:
         04:d2:f6:70:0c:c9:34:eb:34:61:2d:5f:c3:e9:c4:bf:39:10:
         3e:8c:88:48:96:2a:8b:9a:31:db:ba:75:fc:5f:41:84:77:ee:
         90:07:34:49:fd:79:0d:0a:c2:ab:5c:e8:53:84:0e:a9:fc:45:
         09:b9:49:be:d8:85:9e:1e:a3:51:f4:f0:0c:f7:b0:8c:ee:42:
         32:a0:22:23:0a:47:5f:3f:0a:bb:df:b5:a3:6d:e6:5a:fe:b0:
         65:1c:a8:81:88:67:3d:0f:0f:ae:13:9e:06:d5:61:3a:33:4f:
         b8:6a:ab:76:ab:11:1e:d9:88:34:65:e2:26:8b:bf:40:49:be:
         a7:5e:77:7f:31:4a:4d:19:a5:89:df:e1:90:7a:45:45:9a:4d:
         9c:aa:2c:08:06:f7:95:9b:5c:75:05:33:98:ff:2f:e5:1b:92:
         74:03:f2:29:57:8d:5a:34:60:fb:a4:09:cd:81:d6:92:b1:37:
         28:a1:0b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:30:38 2025 by rpki-client