Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          9MUlcMOJLYSrM6iitXcsyv27HNx4tq5r62/Wpu2/zkc=
Subject key identifier:   B3:53:7B:7D:22:3B:8C:A6:E1:0A:82:41:DD:7E:FD:E9:DA:0F:CD:0F
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       01974779EB400FEF6189ABEC42EB64BD2DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          04FF
Signing time:             Fri 06 Jun 2025 23:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:01 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: wEB5OqldSXscY4mTsVa8KDomkZg7nnwOZb7ZaIw/OYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:eb:40:0f:ef:61:89:ab:ec:42:eb:64:bd:2d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Jun  6 23:01:01 2025 GMT
            Not After : Jun  7 23:01:01 2025 GMT
        Subject: CN=b3537b7d223b8ca6e10a8241dd7efde9da0fcd0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:2b:db:76:63:a6:22:f5:d4:2c:b9:f3:0a:
                    24:62:c7:19:4b:aa:e4:3f:09:96:7b:22:d3:6e:c0:
                    fb:7c:c0:6c:6f:1a:d5:26:60:51:91:e0:41:7e:a3:
                    72:b1:71:29:92:39:5b:05:8a:30:bc:41:59:3a:49:
                    7d:e6:e7:21:2d:4c:69:dc:b0:c0:c8:02:42:a3:61:
                    22:78:c0:34:18:be:31:13:86:46:bd:66:57:46:9f:
                    74:95:1a:c7:1e:d0:9b:99:12:0c:a9:23:99:6c:68:
                    ac:7d:79:fd:c6:0b:c3:1e:88:69:38:b5:9b:53:df:
                    d7:29:61:43:ed:95:29:6b:a9:6e:85:cb:10:fa:6e:
                    d8:11:92:18:2a:96:62:69:a6:cc:97:72:f5:a8:2c:
                    db:05:1c:e6:be:03:8d:d1:de:c2:dd:55:ed:4a:a4:
                    1d:fa:a5:bd:2b:69:3c:db:f9:cf:5c:44:3f:2a:30:
                    bf:7d:05:a3:e1:9a:6c:c7:4f:35:40:0d:e6:6d:d0:
                    01:e2:e4:1b:a2:0f:26:5c:e9:dc:4c:5a:09:b0:45:
                    59:ea:b8:f8:e6:87:7c:8e:a3:ba:18:af:2a:14:4d:
                    bf:21:3f:c8:63:80:70:7b:92:7a:6a:2c:ac:a6:ca:
                    e0:57:a9:d9:dd:f5:27:69:00:08:12:67:7d:46:20:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:53:7B:7D:22:3B:8C:A6:E1:0A:82:41:DD:7E:FD:E9:DA:0F:CD:0F
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:87:98:39:8b:f6:63:ca:8e:e6:67:fd:8a:5e:cf:70:f3:db:
         4f:4f:df:c5:f2:07:62:ff:56:1c:51:5a:3e:f6:36:b5:68:8e:
         a6:01:fa:6f:2b:c5:7d:fd:77:08:f2:5c:19:65:cd:f3:70:c5:
         aa:6c:f3:54:86:85:6d:a8:83:d7:24:07:f8:3a:7b:f4:fb:57:
         f8:ea:f9:d8:42:0a:36:c7:cc:3e:a3:72:6c:32:ab:d1:58:6c:
         17:65:5f:9f:7b:8f:8c:30:22:54:83:61:53:be:f9:d4:cf:f7:
         3b:f0:86:0c:a5:bd:3b:07:b5:b1:e2:8e:46:d3:7d:9d:db:40:
         20:e2:6e:12:ef:90:a2:fc:39:9e:84:54:30:92:7f:e3:a2:70:
         bc:0d:14:be:7c:6b:21:b9:5f:1a:bf:51:27:aa:28:b6:05:a1:
         c6:ec:2f:27:da:58:f1:75:04:8d:5f:d0:ce:2d:d1:ac:dd:25:
         b5:82:1b:ef:46:72:4d:74:0b:39:fa:b4:bd:50:d2:c2:ef:a5:
         00:1c:e3:13:0d:f2:80:e0:ba:b6:ee:c2:09:df:fe:bf:17:2a:
         9a:3b:7c:84:46:b1:16:19:09:0b:a5:cf:42:8b:70:6a:48:28:
         fa:dc:a8:ed:4c:f6:cf:2a:21:d4:2b:08:98:63:7c:bc:a9:d1:
         f4:66:44:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:42 2025 by rpki-client