Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File:                     ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier:          X5mjWhk6Avpx4ivhvzzg3FmU1GG+qBpD7TKp917RQIQ=
Subject key identifier:   BC:25:74:68:90:E9:CF:29:F5:B5:AC:B1:D8:1B:16:A1:3A:22:BD:CE
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer:       /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial:       01974DB2D502B20F38E2B70D1B28E72F8828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number:          04F3
Signing time:             Sun 08 Jun 2025 04:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:54 +0000
Files and hashes:         1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: dBNR6ijU37dNo96fixK1tp1iLn3J+AlQZslc8UdZYVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:d5:02:b2:0f:38:e2:b7:0d:1b:28:e7:2f:88:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
        Validity
            Not Before: Jun  8 04:00:54 2025 GMT
            Not After : Jun  9 04:00:54 2025 GMT
        Subject: CN=bc25746890e9cf29f5b5acb1d81b16a13a22bdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:03:1b:af:d0:73:57:91:4a:2e:db:8a:22:
                    9b:6b:75:ae:df:4e:29:39:3b:a8:f1:86:da:18:1a:
                    e1:5a:92:ae:80:72:19:e3:fc:d8:ea:d7:0c:ad:92:
                    a0:e6:ba:bc:86:94:57:5e:bb:2f:eb:95:a0:5c:a1:
                    1b:78:34:35:4c:39:e1:7a:ed:9e:c4:3f:2e:50:96:
                    25:66:07:ca:c0:b0:55:47:f5:57:7b:6f:ee:b4:bc:
                    30:35:7b:58:bc:44:bd:9f:29:15:db:0d:2f:73:44:
                    97:f8:33:41:8a:92:a1:86:26:33:90:17:22:a5:30:
                    03:e4:07:cd:7f:5c:a3:73:c4:c0:dc:e7:9c:95:46:
                    93:75:f5:09:95:8e:56:0a:fc:c0:01:eb:1d:66:5f:
                    a5:fd:8f:f6:a5:67:8d:99:53:3b:bb:f0:0c:fc:b6:
                    7f:59:b2:ca:70:96:27:3b:e7:b2:c6:6a:38:6b:02:
                    05:7d:3e:d8:c4:48:16:a6:6e:c1:98:bf:4a:2d:5d:
                    70:45:8d:a1:d0:dd:c0:c9:fb:65:7e:a1:35:c1:cb:
                    a9:a4:27:9f:1e:69:38:b1:a7:f6:74:b5:a3:c2:cc:
                    9d:27:a3:6f:a9:a1:2c:ea:11:af:3b:a9:54:0b:25:
                    09:4a:62:44:8e:b7:60:25:b0:7f:4d:03:3b:3c:5a:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:74:68:90:E9:CF:29:F5:B5:AC:B1:D8:1B:16:A1:3A:22:BD:CE
            X509v3 Authority Key Identifier:
                keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:8d:f4:56:ac:66:ac:6c:6f:12:5f:19:e4:16:d7:35:08:
         10:83:b5:a4:a3:a2:f8:86:29:d6:b3:b2:da:64:d0:14:c2:3a:
         8d:f5:14:27:37:00:79:64:53:21:9e:fd:ff:57:68:32:0d:16:
         6b:44:50:48:08:32:c5:27:a6:3c:a0:a4:22:d8:b9:e9:4a:91:
         ba:1b:de:0f:4e:62:e3:88:53:c8:b2:63:cd:df:d0:fd:36:ac:
         6e:79:31:54:66:16:5b:4a:be:8f:52:86:fc:da:2b:05:f7:34:
         ac:9f:66:58:85:a5:cc:36:18:fd:92:c9:4a:19:62:de:b7:a8:
         ac:64:f5:3d:44:ba:12:1e:e4:66:6a:6f:b9:8c:ab:e8:a9:4d:
         d5:a9:83:ff:96:0f:27:15:9c:ea:58:b9:51:87:dc:c9:2e:ec:
         69:73:52:62:c0:f2:91:a9:33:9e:7d:18:a7:b2:3a:bc:fa:4b:
         da:1f:19:4b:a9:c6:4e:67:4d:33:b6:8d:0d:1a:54:c3:09:d2:
         a4:9f:c0:db:de:16:4a:40:81:05:c6:a3:d5:82:4c:fe:a4:7c:
         35:01:f4:81:b7:a9:2b:fa:9f:ce:6b:98:90:98:2c:21:98:50:
         87:84:45:98:64:af:ac:38:bf:af:51:51:fa:65:6d:ca:6c:e6:
         34:25:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:38:06 2025 by rpki-client