Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          u10D1CktN/PE4pmZHSDDghW8eopEwO2ZlxvyVR0CtqQ=
Subject key identifier:   B3:B0:2A:C5:DB:66:66:E3:91:7B:58:B2:68:69:7D:B2:2E:D0:18:5A
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       01958EF387D06EE4775B49ECFA892D5AEBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          0451
Signing time:             Thu 13 Mar 2025 10:01:19 +0000
Manifest this update:     Thu 13 Mar 2025 10:01:19 +0000
Manifest next update:     Fri 14 Mar 2025 10:01:19 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: QHQhYz/gx9dtwU1HhGHj+juozFHh9KoXUZQ0ac689EA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:f3:87:d0:6e:e4:77:5b:49:ec:fa:89:2d:5a:eb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Mar 13 10:01:19 2025 GMT
            Not After : Mar 14 10:01:19 2025 GMT
        Subject: CN=b3b02ac5db6666e3917b58b268697db22ed0185a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:c1:6c:8a:a5:b1:ca:6c:21:58:71:fe:44:
                    0e:89:81:98:d9:34:78:7b:7e:c9:80:be:f5:be:6b:
                    f4:ec:b0:be:16:00:30:6f:14:77:93:6e:9d:7e:5f:
                    68:32:db:10:d0:7e:bb:d7:8f:02:1a:09:d3:78:86:
                    8a:7e:52:73:6c:ee:6e:8c:91:be:1c:67:c2:6f:ed:
                    d2:25:44:1a:fa:3a:29:b3:3c:a7:a8:66:d8:ab:27:
                    00:41:8b:51:ef:ca:38:73:3a:04:d7:df:00:e7:60:
                    9d:09:5a:8c:cc:b8:2f:75:f1:1b:66:b5:52:71:69:
                    e8:6e:1a:62:15:50:3b:b3:b7:8c:2b:a0:6b:4d:b7:
                    43:4a:08:ad:ba:90:c3:7a:c4:a0:d5:02:ae:d4:42:
                    f3:53:c8:e5:9b:43:12:40:46:38:7c:64:6f:85:04:
                    05:4f:b9:91:0d:b8:28:9a:bd:95:76:09:fb:ac:69:
                    dc:e3:48:f4:f0:e7:3d:8d:81:5c:93:82:fe:42:94:
                    a4:97:cb:0f:58:89:22:5f:24:24:09:e0:2d:58:78:
                    04:31:9a:bd:3f:3a:cf:55:af:ad:54:2d:3d:14:58:
                    1e:22:8a:29:91:f0:a9:7e:c3:df:0b:b6:50:14:d3:
                    19:24:92:f0:45:be:41:ce:c7:18:7c:e9:e1:19:f3:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:2A:C5:DB:66:66:E3:91:7B:58:B2:68:69:7D:B2:2E:D0:18:5A
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:63:22:f0:d5:5e:74:b1:e6:52:a4:ee:91:34:c9:19:28:d8:
         57:fb:17:81:5e:6f:ef:e7:b7:84:8d:8b:31:68:28:63:20:4b:
         02:5a:e8:62:2a:17:9e:4c:bd:06:d8:5a:ff:38:77:4a:71:3b:
         7e:64:c3:38:d3:8a:af:25:66:c3:64:f0:1f:bb:67:19:e3:05:
         16:dd:26:58:12:8d:e3:56:6d:31:23:aa:65:f5:59:b7:57:d2:
         d3:18:a4:ed:32:60:26:21:f1:2c:a1:89:08:10:24:43:29:4a:
         33:2f:6f:24:cc:8f:de:f4:67:48:7b:c1:57:3f:f7:93:12:a6:
         b6:9b:a0:24:44:c5:4d:fb:bd:af:5e:ab:a1:70:39:8b:2d:8b:
         3d:53:27:49:2a:da:88:83:d2:f9:83:9d:47:53:b5:fa:04:a5:
         38:83:f7:16:93:35:d5:c0:de:9a:c5:65:7e:d1:95:f0:be:1a:
         61:5f:85:10:5a:3d:22:ab:83:43:12:b2:db:e9:75:12:72:57:
         78:47:cd:c0:80:33:a4:f0:54:25:98:86:3c:04:74:6c:dc:45:
         86:9b:bc:7a:0e:eb:2f:68:91:6a:e1:68:60:56:d4:b3:81:33:
         b0:b2:30:db:42:d5:2c:3e:ce:be:8b:cd:d5:f5:bf:b2:7c:49:
         9c:ff:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:03 2025 by rpki-client