Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          Jga/zLtWKr1FSv4osG5JLQ2K1U5vFFhMTTKhJrd3XKE=
Subject key identifier:   87:E6:CE:BE:43:1E:69:D0:10:A4:56:C6:B2:7D:71:5B:82:C7:ED:38
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       0197488CAC08B0438FC125DA54FDDA6EDC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0C61
Signing time:             Sat 07 Jun 2025 04:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:07 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: DsahhtgxudT+AmVyMR/ECrA9egFAtg1+kbhZf0m2i/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:ac:08:b0:43:8f:c1:25:da:54:fd:da:6e:dc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Jun  7 04:01:07 2025 GMT
            Not After : Jun  8 04:01:07 2025 GMT
        Subject: CN=87e6cebe431e69d010a456c6b27d715b82c7ed38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:54:76:45:15:cc:68:a1:f3:53:b9:e4:65:
                    9f:1e:e0:81:d9:35:3f:0b:62:2e:05:be:f2:e2:46:
                    1c:a5:a6:48:98:7e:5d:e9:bd:98:7c:a4:6d:01:5e:
                    81:22:fd:2f:d6:69:23:ce:f7:a2:51:d1:83:bd:a7:
                    e5:56:dd:30:f5:50:2b:ce:53:e9:8d:1a:84:a7:98:
                    72:4e:7e:51:91:55:c3:9d:33:0d:f8:a7:8b:42:4e:
                    7e:8c:06:0c:30:9c:26:73:ab:a3:36:58:80:36:17:
                    63:0e:c8:20:69:57:3a:9d:3f:d7:73:2f:90:27:31:
                    55:42:e6:a2:b0:44:8c:5e:d1:98:e3:0a:54:b7:9b:
                    62:13:90:8a:19:8e:39:72:7b:fe:55:37:ef:b6:7c:
                    dc:b3:6a:f7:7d:13:57:e8:c9:79:38:12:3b:0d:45:
                    4c:16:e0:e3:9f:52:52:ff:e9:4f:bb:5b:18:80:e8:
                    f9:b3:b4:ca:97:5d:98:c0:be:3e:f8:e5:dc:bb:89:
                    43:47:3a:19:18:cf:4d:a9:74:7d:28:46:f2:80:e3:
                    53:bc:5e:ea:f8:53:32:34:0c:88:f3:88:d4:92:4c:
                    2b:9d:db:9a:8f:2a:4f:2e:2c:81:5b:97:fb:10:36:
                    15:b2:c5:40:04:ac:a1:91:08:b1:8b:ad:d7:7e:8a:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E6:CE:BE:43:1E:69:D0:10:A4:56:C6:B2:7D:71:5B:82:C7:ED:38
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:01:a0:d9:4e:34:6a:89:d5:1b:6c:47:6d:9d:41:67:90:6c:
         41:3c:a6:a1:91:8d:38:36:6a:c1:a6:72:bf:66:c2:dd:73:65:
         94:e9:7b:30:65:fa:c3:0f:41:38:60:00:43:58:5e:eb:29:c7:
         9c:c2:33:47:fc:fc:d2:21:2e:a1:c9:a3:85:80:bf:97:2c:b9:
         e0:1a:ef:29:30:aa:5c:bf:ac:4c:ad:f1:d6:be:82:3c:b3:f2:
         f1:9d:14:22:80:9c:5a:33:ba:61:d4:fb:87:28:64:46:63:76:
         fb:27:73:96:28:bc:81:dd:24:27:22:41:52:c6:6e:35:a4:aa:
         19:f1:66:1e:99:f6:14:94:94:83:ef:31:18:cf:8c:35:f4:f9:
         68:ad:fd:e7:b2:95:f7:96:82:70:dc:15:9f:1d:46:0c:fa:cd:
         8c:e8:42:29:fd:0a:1e:cc:50:26:8a:c6:55:de:8e:38:7e:13:
         80:f8:3e:cc:0d:d3:1a:88:5e:58:92:d8:7d:4a:d3:b6:5e:82:
         bd:06:dc:36:6f:a5:c2:fc:67:c0:82:dc:c6:3e:4f:77:89:08:
         ea:7e:4e:6d:16:c7:59:d4:81:49:df:c6:74:11:03:4f:16:5c:
         d4:b6:98:c2:ef:b1:22:97:ef:8a:30:0c:ef:9a:5c:f6:8f:1b:
         9b:0c:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client