Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File:                     Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier:          rSQ/GXmEGxOj90NPV/DYZaS0Bw4QnJbgr6GnP16K2sY=
Subject key identifier:   C2:4D:7A:6A:D1:32:50:9B:94:40:65:82:66:09:13:CC:14:0C:84:9C
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer:       /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial:       01976772549FEDBECB36E72CB6BC85249330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number:          0E73
Signing time:             Fri 13 Jun 2025 04:00:35 +0000
Manifest this update:     Fri 13 Jun 2025 04:00:35 +0000
Manifest next update:     Sat 14 Jun 2025 04:00:35 +0000
Files and hashes:         1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: D7+HP2ICRnVDAZSReofvbQ3PrTPNtLmpKvCboeZDSJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:72:54:9f:ed:be:cb:36:e7:2c:b6:bc:85:24:93:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
        Validity
            Not Before: Jun 13 04:00:35 2025 GMT
            Not After : Jun 14 04:00:35 2025 GMT
        Subject: CN=c24d7a6ad132509b94406582660913cc140c849c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:fc:ad:c1:06:1a:d1:35:48:f9:a0:c0:62:
                    5c:7f:ea:bd:17:ca:f9:94:5c:f6:b3:fb:3e:79:ea:
                    d7:bc:0d:24:6a:04:67:28:87:88:0f:2c:24:4f:81:
                    01:ff:49:e0:7a:5c:5b:de:13:d6:59:32:fa:51:8d:
                    c5:09:01:db:de:1d:7e:cd:73:fe:5f:2f:5d:c6:5f:
                    2c:a9:5c:8c:94:6b:b8:00:74:12:b3:34:96:28:8b:
                    69:72:08:26:de:c9:69:95:93:b6:80:00:86:35:53:
                    af:cd:01:93:22:7c:73:06:f2:dd:ae:ae:83:92:11:
                    c6:2f:43:35:4c:92:71:c0:36:53:66:a0:33:69:89:
                    09:31:5b:dc:cf:5c:ba:28:fc:a6:d3:2f:24:c0:db:
                    c9:88:dc:71:79:23:e8:17:33:55:43:0f:9b:f0:85:
                    b6:0f:89:94:68:f1:bb:bf:81:fa:39:3a:35:31:6e:
                    76:f7:bb:41:2d:6d:80:be:f4:f7:46:ec:3d:b6:05:
                    2f:b2:e1:1b:ad:66:00:69:8e:97:3a:95:49:ed:5f:
                    95:fe:9d:27:b8:b9:a0:b3:88:6e:26:04:5e:ad:55:
                    14:dc:e7:7a:3d:ed:83:be:d1:92:66:c0:a0:71:99:
                    85:5a:cb:c3:79:c1:59:bf:55:63:aa:c6:14:6d:dc:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4D:7A:6A:D1:32:50:9B:94:40:65:82:66:09:13:CC:14:0C:84:9C
            X509v3 Authority Key Identifier:
                keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:66:36:36:05:29:b0:23:a9:6e:25:eb:18:57:cb:17:08:f7:
         1a:4a:2e:83:46:4b:f4:8a:33:8b:70:b2:49:61:91:23:bd:96:
         b9:f6:c7:c3:a4:47:e8:8b:42:c6:f8:ca:4f:d9:cf:bd:2b:4f:
         ca:a7:a9:34:de:65:b4:af:dd:9f:15:d5:09:b0:6c:bb:10:d8:
         98:31:da:24:d7:9f:fe:3c:3c:9c:a3:4e:8e:ab:94:51:0d:f5:
         ed:11:ec:5e:52:5c:11:7e:9f:c5:9a:af:f7:94:40:40:17:ee:
         bb:64:c4:00:06:51:07:6a:25:6e:45:97:71:59:cf:41:04:1e:
         05:1d:db:1c:95:bd:ab:02:ff:c7:56:bc:b9:3f:2c:2a:67:e2:
         cd:2a:a9:5b:10:13:ad:90:df:d5:fd:5b:c1:dc:01:7b:47:2e:
         53:b4:34:f2:50:58:1e:fc:50:84:35:28:d1:5f:13:75:d6:c0:
         fc:d9:f1:3e:1e:ef:da:78:d2:19:e5:28:ab:16:d2:ba:17:c2:
         7e:c3:7c:c8:2d:ec:7d:9d:2a:24:2b:b0:b9:ff:f2:b3:34:b9:
         31:98:c1:b6:f8:2c:7d:08:88:9b:71:70:cc:58:cd:6a:c4:07:
         2b:e4:e8:34:b6:7a:91:7f:28:0c:48:9b:bb:b7:69:32:e5:27:
         d9:0d:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:18:53 2025 by rpki-client