Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          VzbLteHL1v2ORCkFMjRV6QnCJ4mCu9hU1mKXINUrkz0=
Subject key identifier:   A7:8C:52:42:76:09:74:BE:A0:B2:6F:5F:BC:8B:FE:48:CE:AB:9D:4E
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       019774F7B3EAA108DFCDD13D39E6DDAACEE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          07DC
Signing time:             Sun 15 Jun 2025 19:01:19 +0000
Manifest this update:     Sun 15 Jun 2025 19:01:19 +0000
Manifest next update:     Mon 16 Jun 2025 19:01:19 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: siRjkUV/+pCZ8Wq0kGrqSUlMpkIvM1ecQLW9ZaZzF6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:b3:ea:a1:08:df:cd:d1:3d:39:e6:dd:aa:ce:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: Jun 15 19:01:19 2025 GMT
            Not After : Jun 16 19:01:19 2025 GMT
        Subject: CN=a78c5242760974bea0b26f5fbc8bfe48ceab9d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:7b:d0:21:e2:c3:36:5a:e7:5b:5e:d7:63:
                    81:ad:6a:f1:b2:b4:aa:2a:98:d6:1a:43:75:2d:53:
                    fc:5b:7a:b1:57:e9:ce:6b:01:66:fd:30:ee:95:7d:
                    83:3b:ea:ae:dd:9e:01:9c:ca:1a:e3:f3:69:30:40:
                    db:6e:b2:90:35:5f:70:e8:a3:31:03:6b:36:bf:a9:
                    fe:04:6a:bf:10:39:2f:2a:e0:0f:62:8d:22:20:85:
                    ba:35:dd:ea:47:31:7d:2c:b0:15:db:c2:74:a8:2b:
                    60:61:f6:c8:a2:e6:e2:00:3f:c8:0d:fd:3b:f5:cf:
                    c5:26:eb:3f:05:18:09:79:22:0e:a9:6a:3d:51:29:
                    2c:5b:9c:9f:4d:7c:a1:bb:15:ee:b8:01:56:54:67:
                    39:89:d9:5e:2d:4d:74:e7:af:05:ef:e7:4a:5e:3a:
                    e5:e9:4c:08:a2:5b:e0:f3:99:1c:21:67:62:4f:1d:
                    9e:39:3c:82:79:05:22:64:96:f3:d0:17:3a:0a:e9:
                    6b:8f:c3:20:8b:2d:31:a5:56:88:66:ec:94:e1:f4:
                    6d:41:ac:6f:63:d1:24:d4:8f:97:df:73:0a:fb:79:
                    eb:71:e5:5c:09:d3:c4:c3:1d:55:fa:61:f6:6f:8d:
                    e9:58:57:3e:3b:46:9f:30:95:c5:25:e8:84:87:ba:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:52:42:76:09:74:BE:A0:B2:6F:5F:BC:8B:FE:48:CE:AB:9D:4E
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:e5:fd:b1:2c:6e:6f:1a:a7:06:d2:21:af:ea:c3:17:d1:
         40:01:9c:3b:02:8d:aa:bb:db:0d:77:6e:a6:14:9b:3f:d3:95:
         e9:a5:c5:3d:94:1a:61:2d:5a:31:99:16:06:b9:6b:f8:0c:7b:
         fd:c7:f6:ea:81:d2:da:31:b7:bd:8b:5a:dd:d4:b4:01:01:66:
         43:45:04:94:44:1f:21:d3:16:61:7b:60:c3:0c:dc:d2:21:9b:
         6d:e3:12:4a:2e:9d:16:43:42:5e:f6:6f:2a:c0:6e:44:04:e3:
         b3:86:49:64:d8:44:37:c3:0d:ba:c9:66:8b:f9:ae:c4:ca:69:
         4f:60:4a:60:bb:ec:d9:ae:07:05:e6:c9:48:90:c8:57:a9:be:
         d9:85:51:4f:c4:2d:b1:c6:a6:fa:c5:a4:c7:20:49:a9:d4:df:
         c6:93:72:3c:6a:06:75:ba:8a:bb:61:38:a0:e4:fd:f2:59:3c:
         c3:3e:a4:7e:dd:09:5f:2f:55:87:09:8c:27:a4:89:06:1d:a5:
         08:aa:a2:b9:89:c2:3c:d6:24:89:6f:16:78:16:f5:29:b8:46:
         d5:a1:48:8e:7a:2a:00:98:e7:c4:14:65:22:42:42:11:e4:3e:
         0c:7b:63:04:89:86:96:b2:16:36:46:b1:9c:fb:4e:4f:84:65:
         7b:ab:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:30:24 2025 by rpki-client