Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          5x3MzFoQk+OoBGViOw0Rqa9nHlV5FK938foKG4EXaQY=
Subject key identifier:   7F:E3:FE:C9:1E:AB:0B:9F:1D:C0:0A:10:B2:58:C4:D3:21:72:82:D1
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       01978245180B7BAC337A339C4D687AEE4BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          08C6
Signing time:             Wed 18 Jun 2025 09:00:55 +0000
Manifest this update:     Wed 18 Jun 2025 09:00:55 +0000
Manifest next update:     Thu 19 Jun 2025 09:00:55 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: B3imh7GwxnPTLe/yJpXsdDvkNv/P00je0Mu7ihFI3jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:45:18:0b:7b:ac:33:7a:33:9c:4d:68:7a:ee:4b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: Jun 18 09:00:55 2025 GMT
            Not After : Jun 19 09:00:55 2025 GMT
        Subject: CN=7fe3fec91eab0b9f1dc00a10b258c4d3217282d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:f6:f2:aa:38:f5:73:9f:2f:44:a3:43:85:
                    93:7d:d2:40:f3:27:67:28:e4:4f:70:28:b6:07:05:
                    a0:af:3a:f7:23:80:ef:d4:92:0e:e8:b9:50:a3:b7:
                    dc:c3:79:6c:96:60:59:c8:40:cd:6c:4f:66:a6:1a:
                    e8:06:ed:e0:b8:b8:71:92:8a:ff:2f:c8:49:79:48:
                    5a:db:13:1a:da:b7:0c:ac:70:06:f3:a6:3b:3d:77:
                    e4:3f:0a:ac:ac:11:b5:2f:bf:aa:8b:13:a6:d5:0f:
                    0b:2b:bf:63:68:0c:57:3f:96:10:7f:25:cf:96:17:
                    04:bb:b3:fb:81:a0:81:2a:f8:95:54:f4:6a:d9:1c:
                    1b:c0:03:b1:3e:a4:5f:23:5b:1c:ee:ef:58:2d:bf:
                    46:ea:fe:f4:ff:19:fa:00:81:6b:d0:3f:d8:03:29:
                    21:ef:ee:4f:ce:a6:c0:07:27:4d:ea:91:19:3d:6d:
                    66:ba:7e:14:c9:05:cd:2d:53:8c:19:86:86:fd:b7:
                    93:ff:ad:90:85:7a:b0:bc:23:fa:5b:c8:3a:12:24:
                    3c:75:93:45:fb:47:1a:8d:8d:38:6b:fe:78:30:27:
                    f3:3f:79:6c:f7:c8:62:bc:71:a1:71:89:fb:a0:a1:
                    c9:35:7b:90:38:d1:1a:22:32:ad:74:ae:94:f1:27:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:FE:C9:1E:AB:0B:9F:1D:C0:0A:10:B2:58:C4:D3:21:72:82:D1
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:2b:2a:59:c5:7d:56:bf:d2:e7:dc:fa:02:cb:e2:53:d5:
         c4:3c:8b:cf:43:84:cb:c4:2d:b7:2f:b5:83:60:86:00:18:21:
         1a:b7:4e:43:43:a5:30:b9:01:af:14:4d:8a:36:79:f3:fe:8b:
         48:b5:45:29:7d:d3:ac:b3:f3:b1:30:a8:27:96:6d:3d:34:69:
         5b:96:2f:8d:73:ce:47:7f:a5:7a:5d:2e:72:af:a3:61:23:42:
         bc:41:a6:04:44:b2:63:96:28:42:b1:02:15:95:f7:3b:fe:40:
         9c:20:b2:5d:8a:ea:47:0f:3a:02:ce:08:8a:e5:51:db:8d:4f:
         0e:bc:7c:8c:d4:a4:0a:70:c8:60:3d:23:ee:e9:5e:65:91:a3:
         f9:ce:52:1d:36:b2:ac:d4:f7:46:2a:1b:1d:9a:d1:ce:3c:71:
         d8:aa:d2:62:c7:0d:56:db:3e:75:b0:bb:6e:4c:76:2b:31:fc:
         c5:f8:e9:bf:0f:e9:22:bf:a6:23:e2:f5:6c:ce:c8:ad:a8:9e:
         e3:6c:62:d2:5a:ba:e3:44:b7:10:c3:1a:3c:2a:f0:f4:5e:54:
         76:22:34:3f:2b:e4:b2:02:39:48:d9:34:4d:37:04:82:cc:1c:
         7e:40:a0:1c:97:e2:cb:1c:3e:3e:e7:4f:b3:56:14:5d:5c:86:
         0a:74:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:33:48 2025 by rpki-client