Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File:                     25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier:          0Y80vephw/2KxOinv1cpC4dRqXadQCI3avbV3MGnVZo=
Subject key identifier:   FC:00:E2:4A:80:50:5A:58:04:AD:9E:6A:CC:94:8D:43:B9:26:E1:ED
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer:       /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial:       7337F65705FBC717DEC1A6B2EFB60407FEB4EFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number:          33
Signing time:             Sun 27 Apr 2025 23:36:53 +0000
Manifest this update:     Sun 27 Apr 2025 23:31:53 +0000
Manifest next update:     Tue 29 Apr 2025 00:53:53 +0000
Files and hashes:         1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: 0TPVl89X+ylkh8m7CAQ9sZlZ/+/Z4xdaORjPONM86Qw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 00:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:37:f6:57:05:fb:c7:17:de:c1:a6:b2:ef:b6:04:07:fe:b4:ef:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
        Validity
            Not Before: Apr 27 23:31:53 2025 GMT
            Not After : Apr 29 00:53:53 2025 GMT
        Subject: CN=FC00E24A80505A5804AD9E6ACC948D43B926E1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:c0:77:04:30:eb:27:7d:3e:41:41:03:05:
                    61:1e:05:45:40:f1:7c:82:bd:c8:3e:93:12:52:3a:
                    73:9d:0f:e1:9b:61:55:f6:b3:65:3c:eb:4c:82:eb:
                    39:83:54:f3:ab:45:d8:23:5f:89:40:22:4f:d5:0c:
                    5b:c0:c0:5e:ae:e0:a1:2f:06:21:3f:35:ee:55:10:
                    30:55:7b:ce:c4:d4:ab:e7:15:71:60:96:b5:fc:4f:
                    a1:66:cd:6a:20:4f:d5:6b:2a:7d:76:6c:9c:7a:80:
                    d6:af:0d:dd:53:4d:f1:93:95:df:cc:88:7d:15:ca:
                    30:fe:1e:6b:39:fb:c1:8d:77:41:10:cc:5e:e0:b2:
                    99:aa:2c:37:64:2b:58:fa:cf:66:54:1a:d3:90:14:
                    9a:11:63:c9:5e:c1:5e:df:75:f8:15:06:95:7c:5f:
                    60:fe:6b:03:c7:c5:2b:19:c4:87:35:8e:4c:c1:1d:
                    f0:a9:30:9d:7c:8e:db:35:ae:39:d8:70:14:b9:7a:
                    04:a7:55:32:7d:48:1d:b8:d5:f9:01:2e:92:01:b6:
                    3c:16:34:39:75:a4:20:b1:0d:fc:21:14:0b:38:5d:
                    3f:2f:f7:01:b0:e6:f6:00:36:a4:d3:39:32:94:f4:
                    3a:4b:b6:0d:2c:16:d7:19:cd:64:4f:f6:f4:d6:56:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:00:E2:4A:80:50:5A:58:04:AD:9E:6A:CC:94:8D:43:B9:26:E1:ED
            X509v3 Authority Key Identifier:
                keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:69:71:0f:75:12:af:10:3c:f3:cd:d3:e5:82:ae:20:a3:2f:
         78:79:2d:5f:25:e9:0b:ec:53:9e:d3:5e:61:34:89:44:56:32:
         cd:20:a1:20:04:67:ef:3c:a2:07:28:8c:18:0b:16:e7:60:cd:
         fc:b9:88:14:fc:e0:56:01:a1:dc:3b:df:be:1a:dc:bd:11:20:
         98:d5:30:4a:c2:a2:55:3c:08:ff:9f:f3:01:e9:e3:58:79:09:
         47:a3:65:8f:59:df:c3:09:66:bd:c8:b5:de:6c:08:d0:32:b8:
         75:e5:8a:59:96:79:62:ae:85:5e:ed:56:95:c3:dd:7e:79:4a:
         8b:fe:ed:89:02:e1:9c:5a:e4:92:56:bf:91:0a:a7:6c:68:f1:
         f3:b0:f9:64:76:2e:6f:31:9c:e0:2c:a2:89:04:59:50:4d:90:
         d2:36:7b:2a:0f:38:ae:ad:a6:e4:0a:1d:0a:39:de:69:7c:ba:
         43:60:35:42:74:35:3c:51:e2:6c:0e:a5:5a:e8:de:cd:74:9c:
         45:39:19:92:af:32:b8:16:7b:a6:44:14:b0:db:0f:85:92:b5:
         5a:7e:ac:9a:19:f0:17:38:80:f9:da:66:ab:ed:95:eb:b6:36:
         82:96:e7:72:5b:05:00:89:7e:ea:ff:34:3c:3e:26:4e:46:11:
         da:30:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:04:19 2025 by rpki-client