Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
File:                     WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json)
Hash identifier:          kdcBLLhhzXVdXt4N4oIazfhKQxoQ589pPPQo1pxwE0c=
Subject key identifier:   34:E7:EF:C8:9D:74:B1:2C:3B:93:A7:1C:2A:D8:DB:17:C3:06:53:E1
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Certificate issuer:       /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial:       01974B56DCDEF91FD45C21660C1DBF5E2FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
Manifest number:          12C0
Signing time:             Sat 07 Jun 2025 17:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:13 +0000
Files and hashes:         1: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: c3S9rDSKC7U/2MgU0pPwerpBCdlOJN/nP4vvwVaAB2o=)
                          2: taQy9HpaIR-B5wNPU72M0d1f0co.roa (hash: GppUCw9ptPGs5O818rWaJoPW+Ulu8uS+JiuUV5bM6v4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:dc:de:f9:1f:d4:5c:21:66:0c:1d:bf:5e:2f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
        Validity
            Not Before: Jun  7 17:01:13 2025 GMT
            Not After : Jun  8 17:01:13 2025 GMT
        Subject: CN=34e7efc89d74b12c3b93a71c2ad8db17c30653e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:b3:82:0d:17:76:f0:66:d1:cc:4d:15:7c:
                    f8:43:47:c8:d8:c2:5d:89:d1:ed:61:a3:68:96:a3:
                    d0:0e:41:ab:97:f8:8b:17:0d:d3:6d:42:af:34:81:
                    10:e5:f5:72:37:43:66:79:67:02:03:22:07:e8:65:
                    22:89:f2:bc:b2:52:ce:43:91:5c:31:9c:79:d0:5a:
                    16:3a:d8:8c:41:2c:f9:24:e9:27:be:04:ac:00:9a:
                    3c:13:3b:aa:6c:9b:89:42:ef:9f:10:11:89:df:f5:
                    53:cf:ab:d0:c7:1f:85:7b:51:05:4a:d0:c7:cb:49:
                    cc:b1:79:7c:52:2d:02:47:b9:50:4f:cc:43:3c:d1:
                    b7:8a:ab:75:75:24:f2:66:69:63:44:d5:9c:a1:1d:
                    8a:ed:08:7e:2e:a7:0d:b3:b4:3e:61:ab:70:75:6c:
                    14:1c:af:72:f9:ee:c5:9c:12:52:4b:93:7e:be:53:
                    5f:da:10:5d:cf:61:56:16:e9:1a:c6:f2:4a:dd:d7:
                    f5:3d:0b:82:ef:bd:fa:52:06:0a:34:78:00:5c:02:
                    8e:60:41:3a:e6:ec:03:d6:6b:6a:13:5e:9d:86:35:
                    68:18:9d:50:83:f8:17:4f:7a:c1:5c:95:bc:6e:0e:
                    5c:c6:7a:3e:1a:d6:13:99:ed:8b:08:da:75:43:1b:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:EF:C8:9D:74:B1:2C:3B:93:A7:1C:2A:D8:DB:17:C3:06:53:E1
            X509v3 Authority Key Identifier:
                keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:91:c5:13:9b:ff:ca:a4:7b:5f:42:a5:ab:b2:b4:33:06:
         95:07:d5:c3:b7:b3:ba:4e:54:a4:2e:ac:0f:2d:8a:3f:ef:e1:
         81:f2:bb:ab:13:91:3e:d7:41:ec:8c:43:21:ea:aa:e8:e1:2b:
         f9:d0:89:1f:c4:ab:66:3d:4a:7f:fa:5a:02:7d:af:7e:3e:ad:
         94:05:53:3a:54:7d:4a:a1:0e:f4:3a:b1:d2:56:a8:67:21:aa:
         4d:de:ac:5a:d8:b1:41:a7:d7:09:2e:4a:1e:a9:39:0b:b6:fd:
         0d:df:4c:9e:a3:60:99:f6:74:84:07:81:e2:f0:de:13:7f:65:
         62:b0:6d:e7:53:f1:aa:ed:3e:06:a4:b8:02:1a:ec:05:3a:5f:
         e5:01:02:90:ce:48:8e:05:f2:fe:07:75:c2:2c:bc:3e:c4:0b:
         01:60:e0:a6:eb:9b:c7:1f:7e:fb:33:f1:ad:e4:95:89:e8:52:
         fd:29:17:02:b1:3b:e7:4c:05:d1:e7:6c:8e:2a:fd:c1:cc:9d:
         0f:88:40:95:08:aa:1a:19:0b:ba:4e:89:ed:0e:81:13:13:0a:
         78:ee:18:63:ba:c5:7e:b3:25:c9:c3:31:78:b2:4d:e2:d5:3b:
         79:98:13:bf:73:eb:52:56:45:55:33:3b:6f:2b:cf:1b:3f:d0:
         47:25:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:18:01 2025 by rpki-client