Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
File:                     V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json)
Hash identifier:          S7ryoqUPwsdFUMmkwq1YRnMgX60dtrPgSjdcGJR9JrY=
Subject key identifier:   CE:AF:FB:5D:2C:B6:50:E5:C8:1A:5B:96:2B:30:DE:85:D5:9A:13:C3
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       019748C33B1B67F8AB6F076F84483CC7B16A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
Manifest number:          01DF
Signing time:             Sat 07 Jun 2025 05:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:43 +0000
Files and hashes:         1: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: 0lH6pI8NihlGsEuRRN9XMarxj+ENvkmWHrg+Nd6Ac+4=)
                          2: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (hash: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:3b:1b:67:f8:ab:6f:07:6f:84:48:3c:c7:b1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: Jun  7 05:00:43 2025 GMT
            Not After : Jun  8 05:00:43 2025 GMT
        Subject: CN=ceaffb5d2cb650e5c81a5b962b30de85d59a13c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:eb:e9:ba:37:62:b0:c9:d0:40:9d:c3:bd:
                    b2:0e:48:45:10:e3:07:dd:d3:e3:de:29:0c:dd:5c:
                    97:42:43:95:48:bf:50:21:6c:71:c9:f1:6a:5f:d8:
                    28:d9:6c:f9:1b:d2:76:76:69:2d:e1:61:e1:be:c1:
                    3b:12:75:2c:9a:c2:8c:b4:7e:07:c1:a5:82:03:2b:
                    37:6c:15:cc:ce:6a:67:34:95:50:5b:29:f5:19:f3:
                    25:67:78:79:d6:fa:ff:fd:06:b1:07:f6:1f:df:96:
                    18:b5:85:88:c8:f9:eb:ad:bc:55:54:da:ee:af:6a:
                    1f:1e:f9:2c:ba:4d:c9:df:fe:ee:c1:79:29:98:6d:
                    83:73:9a:3b:5f:0b:74:29:cd:5e:88:91:ce:f8:3c:
                    83:18:51:71:53:6c:d4:a1:c4:31:a5:af:58:b8:40:
                    82:c7:b9:2b:3a:f3:74:3c:2d:f4:3d:75:71:51:12:
                    c2:e3:b3:0f:57:81:18:1d:03:8a:f3:ba:a5:4a:7a:
                    26:8e:44:1c:4a:88:c7:50:ce:43:5d:9a:6b:5a:78:
                    ca:58:2d:04:b2:34:16:a0:85:24:93:95:9e:21:77:
                    96:2a:7d:90:9a:25:c9:94:c3:a1:e0:41:ce:59:7b:
                    3d:66:af:7c:97:e2:bc:fa:a3:e5:3d:13:4a:56:5f:
                    72:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:FB:5D:2C:B6:50:E5:C8:1A:5B:96:2B:30:DE:85:D5:9A:13:C3
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:25:6e:05:76:4a:b3:99:02:f0:6d:d3:eb:bd:64:cb:7e:
         82:29:af:9a:95:13:84:d6:a4:dc:4c:26:7f:e1:19:63:9a:73:
         4a:52:05:c2:95:9c:d4:ec:ac:1a:bd:4f:52:7b:fe:23:26:e1:
         7b:f2:e9:ca:e6:9c:5d:57:a8:26:92:66:3d:9a:5b:6d:0e:82:
         27:d0:00:e2:69:01:2e:d4:65:8c:e4:aa:48:65:b2:38:cd:ff:
         41:a7:25:15:00:61:55:22:50:0a:39:5c:c1:a4:82:b4:58:20:
         07:c3:52:09:30:02:91:43:2d:34:a3:27:9c:59:48:be:06:f7:
         00:41:15:26:a8:fa:a0:fa:f0:e7:3e:4f:6a:b5:52:72:bd:5d:
         a6:25:43:44:e8:c3:ca:57:75:01:f5:49:7b:dd:f9:24:ad:8c:
         78:8d:a5:c0:79:e9:f1:9d:a4:07:fd:c8:28:89:78:1f:b0:cc:
         64:c1:80:e0:eb:6c:22:94:22:47:41:ce:14:d3:97:c6:93:f3:
         b3:18:5b:5d:a7:51:ff:df:e8:c1:8a:82:7e:bc:3f:b5:03:aa:
         49:10:a9:9a:e6:93:78:44:f6:c9:33:7e:9d:2f:48:26:17:4a:
         9f:60:f7:4b:3f:8a:12:fc:d7:20:d5:f3:06:69:72:5e:ed:28:
         88:c2:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:57:04 2025 by rpki-client