Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
File:                     BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft (raw, json)
Hash identifier:          F5LY3jgGVWt40RRdvAf3OSdTajWu9lltd/wmQ8l7+ZQ=
Subject key identifier:   E0:C1:38:3F:1B:F6:F2:87:B6:3C:71:8B:AB:7D:E5:62:7E:1C:03:7A
Authority key identifier: 04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7
Certificate issuer:       /CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
Certificate serial:       019754238062759F2878CBF450A6BCD64771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
Manifest number:          0490
Signing time:             Mon 09 Jun 2025 10:01:42 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:42 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:42 +0000
Files and hashes:         1: BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl (hash: y26DQsbLs+gOEqjec78t5j+kV36gl6HqfM7jXaiorn0=)
                          2: WhtfNl4kPsvSKKPK4a5edmJqBO0.roa (hash: fLmSne41hG7wjVHW396uQUWjNlIxQRVkrNFvdbSceKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:23:80:62:75:9f:28:78:cb:f4:50:a6:bc:d6:47:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
        Validity
            Not Before: Jun  9 10:01:42 2025 GMT
            Not After : Jun 10 10:01:42 2025 GMT
        Subject: CN=e0c1383f1bf6f287b63c718bab7de5627e1c037a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:fc:38:f4:79:91:de:e3:58:5a:30:be:49:
                    d4:62:d7:92:80:aa:dc:f6:07:ec:70:51:df:a1:88:
                    66:4a:3e:cd:77:db:14:a9:d3:c0:6d:80:c4:b2:4a:
                    fb:78:08:42:25:09:28:50:25:ed:ee:0e:ad:38:43:
                    c0:c3:9f:c7:86:39:14:10:d5:aa:4b:39:32:c2:17:
                    61:eb:d8:22:d2:a7:d7:8d:18:18:4a:c0:8c:c8:3a:
                    cd:8a:1a:b0:a6:69:6f:10:96:2a:73:82:80:88:d6:
                    1a:80:5d:e5:19:cb:a5:14:ae:ed:30:e5:73:43:1d:
                    03:3e:88:b1:a0:7b:58:26:26:cd:5a:cc:be:d3:cd:
                    b8:d6:dc:81:92:49:f0:08:e7:d2:76:3a:3d:b2:38:
                    fd:ef:19:7a:1b:75:96:16:4c:fc:c0:e2:58:56:27:
                    a1:7a:1c:ab:5d:40:51:e7:37:66:66:e2:e3:c3:d3:
                    d6:8a:d6:8f:4f:21:3b:a4:a8:e8:fe:7f:a2:14:c0:
                    31:7f:09:ca:17:c8:46:65:a9:ef:0d:2e:be:70:70:
                    41:61:c5:be:00:58:3d:23:39:4b:40:46:cd:f0:8c:
                    64:d1:87:cf:8a:7d:b0:67:b8:9c:2b:78:60:bc:79:
                    ec:7a:41:89:29:03:dd:5f:66:be:b8:af:64:2b:2d:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:38:3F:1B:F6:F2:87:B6:3C:71:8B:AB:7D:E5:62:7E:1C:03:7A
            X509v3 Authority Key Identifier:
                keyid:04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:35:73:dd:70:3e:90:90:56:99:aa:29:da:dc:98:b7:4d:63:
         4d:ef:57:86:d4:f7:76:06:7f:95:26:d7:9c:44:cd:33:a8:79:
         6d:77:53:c5:e7:93:46:83:80:30:08:9d:62:c3:98:84:22:16:
         de:e9:94:34:b1:2e:38:ca:1b:6f:54:af:bd:d9:e4:50:38:bf:
         8d:80:d8:6b:78:74:b1:0e:ca:08:d7:24:ab:3e:23:52:a1:d6:
         2b:4c:4c:91:3c:f3:97:57:e0:81:1f:7d:d5:26:a9:c0:6f:5b:
         e5:ec:67:25:be:2d:5b:ab:75:5b:6b:ae:b8:e9:c6:3d:86:83:
         83:78:41:c4:bc:84:3b:a2:25:c4:fb:92:2f:4c:71:80:ee:bb:
         a1:25:f0:35:8c:ce:57:6c:f4:b2:47:4d:91:60:b1:09:33:26:
         76:36:b0:d3:dd:03:6e:46:67:57:e9:56:47:3d:ed:a6:d5:c7:
         d5:3e:05:f4:5e:c6:f6:79:07:cd:b8:98:c0:c8:82:11:4a:b5:
         b5:54:a8:cc:eb:84:40:94:7f:df:ae:d6:3d:f2:ab:9e:25:42:
         40:5a:81:9d:61:b7:9a:94:4d:10:b6:94:af:e2:b6:e6:19:99:
         45:41:0d:1d:11:48:74:01:a7:9f:db:80:d1:b4:50:67:fd:ed:
         c2:69:0d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:06:53 2025 by rpki-client