Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
File:                     6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft (raw, json)
Hash identifier:          QdCmK8hT/qsO4DwY9cJFcU2G04fSu/RHygh2muDuVK8=
Subject key identifier:   2D:A9:67:46:66:17:AC:B2:8B:10:E5:09:2C:9A:B0:39:CF:50:BC:1F
Authority key identifier: E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD
Certificate issuer:       /CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
Certificate serial:       0197469EC77E0311B92C724AE18D64CECE98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
Manifest number:          0BD2
Signing time:             Fri 06 Jun 2025 19:01:40 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:40 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:40 +0000
Files and hashes:         1: 6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl (hash: APKwco4RHagj/ZMsxuJcG2vG11LZBClg8pjnLjWmqOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:c7:7e:03:11:b9:2c:72:4a:e1:8d:64:ce:ce:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ee498aeaba145576a61b637f136ec1c3f430dd
        Validity
            Not Before: Jun  6 19:01:40 2025 GMT
            Not After : Jun  7 19:01:40 2025 GMT
        Subject: CN=2da967466617acb28b10e5092c9ab039cf50bc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:72:e5:ac:ab:28:73:43:7b:09:9a:f9:f4:
                    dd:1d:b9:f6:3e:86:30:4c:55:00:d7:f5:10:29:3c:
                    de:ab:4a:98:9e:a0:52:fd:3c:3b:a2:56:39:78:48:
                    21:c0:20:24:e2:ed:29:2f:52:5e:6d:8c:0e:3d:a6:
                    1d:ca:07:82:12:f5:e3:47:0a:b6:3d:e9:bb:16:d9:
                    73:2d:98:fd:c0:b7:de:61:b7:53:b3:28:9e:49:73:
                    2f:8d:9f:97:98:b7:6c:a9:c3:70:4e:12:2e:ae:26:
                    f8:c8:6c:fc:a9:ba:77:a7:b8:e4:d3:53:80:2c:47:
                    2d:fd:49:1b:ed:56:17:f1:65:da:9c:02:f0:2c:62:
                    b9:98:2a:38:8f:05:ca:0b:b2:5b:c5:33:64:26:17:
                    e6:ec:56:c6:ce:bc:bc:ed:f8:8b:da:61:28:af:95:
                    84:fe:fe:9c:af:b0:dc:44:dc:7f:3e:da:b2:c3:08:
                    21:c9:0e:6d:04:f3:c1:63:f1:8c:df:63:7f:4b:4a:
                    38:64:12:ac:07:d5:2b:99:42:c7:4d:47:49:e5:46:
                    e5:ee:ab:1f:10:a1:7c:82:cf:f4:ef:89:ed:46:a5:
                    53:84:b0:ba:cf:9c:9a:85:3b:1b:1d:11:68:b3:54:
                    8c:b8:8a:99:6e:03:75:2d:68:72:91:db:4e:af:7d:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:67:46:66:17:AC:B2:8B:10:E5:09:2C:9A:B0:39:CF:50:BC:1F
            X509v3 Authority Key Identifier:
                keyid:E8:EE:49:8A:EA:BA:14:55:76:A6:1B:63:7F:13:6E:C1:C3:F4:30:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O5Jiuq6FFV2phtjfxNuwcP0MN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ec905-6740-46f4-b0e8-a068ac8b1028/1/6O5Jiuq6FFV2phtjfxNuwcP0MN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:31:75:04:33:62:35:39:d0:32:b2:61:81:fc:1b:cf:94:9e:
         0a:ef:c7:95:ac:4e:1b:65:8d:d9:4b:c1:e2:d4:b8:ea:b3:6b:
         0d:e3:68:03:34:d8:04:ca:76:ec:6c:0c:0c:17:b0:aa:74:03:
         10:bb:c1:b1:fb:ff:bb:7b:f4:15:f4:b6:52:07:31:ca:8d:8e:
         04:86:f7:d8:bb:41:3a:90:08:b4:af:3d:10:4d:4f:03:20:9c:
         1b:f5:65:06:1b:d7:d1:46:29:74:1d:36:7c:f9:7b:11:55:f4:
         bc:aa:18:84:84:e6:01:1e:e3:b3:05:ee:41:96:a9:58:da:9a:
         72:cf:c8:19:b2:e8:29:a6:ac:bd:b8:00:e6:e3:0c:e9:ed:31:
         db:51:2b:68:f7:f5:81:0a:e3:c6:83:b1:35:af:22:8f:cc:7e:
         2b:6d:17:1b:57:02:48:bb:ce:a5:15:31:93:b0:f2:47:73:4d:
         c9:a0:62:4b:f9:b6:0d:e7:34:83:80:80:b0:62:7f:f7:ef:2e:
         19:26:50:74:ed:43:87:e2:2e:14:b6:15:7e:3e:c0:3f:4c:a3:
         09:a5:e8:33:72:32:b9:02:d7:7c:86:0f:b8:d6:50:e0:8c:1c:
         c2:bc:11:0b:9b:ed:ae:91:13:e8:9c:80:69:13:7f:46:9f:73:
         7e:94:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:22 2025 by rpki-client