Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File:                     6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier:          wr0+BO6tiA+myQRLqZYPWiUwFvqgQBn2RIlMzSzfdd0=
Subject key identifier:   AD:29:D9:2F:8B:0C:DC:AA:99:4A:52:F6:E9:CE:85:69:87:CA:54:FF
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer:       /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial:       0197782ECC64AEBD64F45FDEBB76C9EE096A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number:          129E
Signing time:             Mon 16 Jun 2025 10:00:22 +0000
Manifest this update:     Mon 16 Jun 2025 10:00:22 +0000
Manifest next update:     Tue 17 Jun 2025 10:00:22 +0000
Files and hashes:         1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: 0t81tQoafK7bHq6SbYdReF65JrcK+YY94dfQmrwLjD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2e:cc:64:ae:bd:64:f4:5f:de:bb:76:c9:ee:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
        Validity
            Not Before: Jun 16 10:00:22 2025 GMT
            Not After : Jun 17 10:00:22 2025 GMT
        Subject: CN=ad29d92f8b0cdcaa994a52f6e9ce856987ca54ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:7b:53:50:1b:4b:5c:de:22:ad:63:2f:2c:
                    d3:34:03:5b:9d:d6:7f:6a:ae:ec:4f:cb:c1:b0:ef:
                    e7:bc:d3:23:ce:2d:0c:86:8a:44:46:69:c7:c5:0e:
                    ee:91:0b:e0:23:ba:c3:e4:e1:d0:1e:19:78:1b:50:
                    5a:06:1d:04:26:f2:e8:e7:12:87:18:72:65:e8:b5:
                    19:f4:05:7d:16:05:03:ec:13:ce:e9:be:78:79:2a:
                    6a:f1:81:31:5c:8b:52:f5:01:f0:7f:6e:3b:04:24:
                    01:97:15:27:36:c7:8e:68:7e:b5:66:9a:01:b7:8e:
                    43:aa:5d:33:5c:8e:0f:34:bc:56:6f:88:3d:75:05:
                    7b:0d:f1:56:26:28:28:10:ff:eb:5d:ca:bb:ba:f4:
                    0c:1d:6c:17:68:4b:5d:7f:56:35:0f:e8:a7:78:bb:
                    28:35:d7:af:76:18:8c:75:57:b6:fe:cb:28:0f:9d:
                    f2:18:7d:6d:ee:27:48:ba:7c:6f:79:0d:6c:95:69:
                    31:8b:8f:07:6d:0a:5d:27:f2:34:ce:45:d4:eb:91:
                    a0:e5:26:c0:fc:73:9d:ba:16:e5:7d:32:b2:fc:d1:
                    5c:c7:69:37:21:d2:48:68:94:fb:c4:33:2f:56:51:
                    4c:b0:62:37:22:98:4e:00:4c:d4:6c:db:7f:b6:c4:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:29:D9:2F:8B:0C:DC:AA:99:4A:52:F6:E9:CE:85:69:87:CA:54:FF
            X509v3 Authority Key Identifier:
                keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:ab:6c:38:37:3a:b8:06:25:2b:54:af:ca:73:0f:63:64:
         ff:05:0f:60:59:42:10:53:52:ba:f8:4f:70:8f:88:d0:6d:d7:
         89:98:3e:98:9a:ed:16:29:9c:85:88:7b:0e:3a:fa:f7:1e:59:
         e6:2b:21:9b:b8:ea:18:ab:84:14:f3:5a:cd:64:93:7b:20:c5:
         ed:d0:12:f0:62:e4:91:e7:e1:f8:fc:2d:27:b8:ac:30:7b:a6:
         45:ef:50:c8:9b:75:27:28:33:eb:e4:d1:7b:9f:ed:47:5e:1a:
         de:05:d8:d4:3d:e2:ef:b4:28:e9:ef:09:b1:6f:18:0a:5a:ad:
         1f:02:70:7d:7c:e1:a5:ea:34:81:47:aa:0e:3a:54:81:46:32:
         ac:57:92:18:a1:b2:4b:ec:11:94:a0:70:21:c8:dd:53:e0:0a:
         7c:d9:14:c7:ef:5a:6e:6f:39:3c:a7:16:6f:c2:10:33:3e:e0:
         b0:ff:3f:a5:b5:8a:69:9b:7d:be:74:db:99:9b:58:98:a9:86:
         e5:5f:48:60:af:20:37:fb:4c:fd:33:3c:a3:29:2c:d0:99:d0:
         aa:01:d4:ae:d6:60:ea:ac:7e:34:87:f6:c1:f0:b1:14:91:55:
         3c:50:7a:9d:ed:4f:32:3d:d5:dc:b2:eb:29:c7:95:f8:f0:0e:
         4c:70:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:06:51 2025 by rpki-client