Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
File:                     OZ17KbLru-43WSMgfh2FZU8LV7o.mft (raw, json)
Hash identifier:          hbRTCmEd7qZLtkp85fQVQuZYJoE0D+mAr86Ia6EupQY=
Subject key identifier:   CB:F5:09:7F:DA:85:4A:B7:5E:C0:38:30:66:94:DC:0A:D6:F8:04:34
Authority key identifier: 39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA
Certificate issuer:       /CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
Certificate serial:       01974742B83E639354974BDE38C72EE59D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
Manifest number:          01C5
Signing time:             Fri 06 Jun 2025 22:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:44 +0000
Files and hashes:         1: OZ17KbLru-43WSMgfh2FZU8LV7o.crl (hash: j0yg4vz0uUHY4OsHCNpqcC+6wKqg0fmcaMETYs3Pg3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:b8:3e:63:93:54:97:4b:de:38:c7:2e:e5:9d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
        Validity
            Not Before: Jun  6 22:00:44 2025 GMT
            Not After : Jun  7 22:00:44 2025 GMT
        Subject: CN=cbf5097fda854ab75ec038306694dc0ad6f80434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:4c:19:fd:64:de:32:8b:1b:43:7d:1f:19:
                    e2:0a:0b:19:67:77:67:73:47:db:fd:6d:b8:5d:06:
                    14:64:6a:04:23:70:c3:9b:83:41:b8:71:16:e4:1e:
                    84:a5:68:2d:f8:6e:af:9e:bc:f1:ab:0e:83:9e:7f:
                    5f:42:ea:64:8d:e5:32:65:af:a2:a0:c8:7c:8c:00:
                    f3:de:d2:54:92:d9:cd:7f:5a:45:df:ad:ad:08:a4:
                    94:a4:8c:3c:8b:d1:79:fb:29:93:aa:12:99:f9:5e:
                    03:ed:97:24:f2:6a:dc:ea:8a:ef:10:a8:a7:a8:72:
                    96:e6:de:5a:94:19:bb:48:94:5a:d8:a7:c6:ba:4d:
                    af:a6:ca:29:2d:63:59:bf:11:7e:45:aa:f3:f8:b1:
                    5a:ea:91:5d:cb:64:2b:7f:60:78:61:aa:ef:b4:98:
                    68:1c:8b:0d:32:61:f7:cf:8e:a9:39:1b:42:e8:a9:
                    e0:42:d7:60:83:96:2a:48:f8:fd:fc:ea:68:0c:49:
                    8f:46:08:4c:b3:d1:98:e0:cc:f4:45:b5:33:58:b0:
                    7f:c4:b5:89:ab:77:79:f4:69:79:0c:aa:17:5f:57:
                    6a:d8:1f:7b:d1:0c:20:43:c0:2e:e9:f4:6a:03:a4:
                    87:1e:fd:f9:d3:92:6c:f8:ef:c3:af:e6:ca:ca:d5:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:09:7F:DA:85:4A:B7:5E:C0:38:30:66:94:DC:0A:D6:F8:04:34
            X509v3 Authority Key Identifier:
                keyid:39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:db:dc:78:e1:6c:8d:d5:c1:a1:2a:5a:53:c7:d0:a4:8f:ad:
         ad:18:55:96:bb:17:ac:be:0f:ff:d9:3b:4e:f4:7d:54:f9:d0:
         d3:e3:ad:19:f8:8e:ab:5a:6a:af:a5:f4:1e:f9:8c:0c:d7:8a:
         0d:b1:da:8a:01:91:66:c6:aa:7f:01:a0:e2:7b:b8:89:d0:95:
         58:31:02:67:6a:0e:14:23:10:19:97:cb:ac:97:3e:1f:f0:1d:
         27:f8:a9:96:51:75:44:f8:4b:1b:11:53:0f:66:ff:79:b5:cf:
         0f:fb:6b:df:3f:57:cb:2b:41:8c:4e:94:ff:17:34:1d:8f:10:
         e0:28:af:bd:75:a4:e4:88:6b:65:f1:8a:cb:34:fd:51:45:3a:
         b9:26:4d:4a:dd:60:a6:42:d3:66:64:68:ce:a4:a3:47:c3:6d:
         20:46:e7:a5:1e:0e:51:ea:5d:1c:9f:6d:bd:8f:b0:f2:60:7b:
         14:f1:41:68:ca:ab:dd:1a:f5:f0:7f:24:fa:59:51:6f:67:78:
         69:6a:06:fe:09:a9:5f:ec:c2:5d:2b:6c:a0:51:d2:77:76:f8:
         6f:5a:9a:02:3d:4c:56:8b:c4:96:d1:41:01:31:c1:ce:b8:c9:
         9a:99:9c:fd:c5:ce:1f:e2:a2:a4:66:72:55:7d:f4:c3:db:54:
         3a:24:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:08 2025 by rpki-client