Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File:                     gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier:          3AX6ccDdf3XJiSF+jc74HVU0Wxcv5OsNvn3VdB2Rm1w=
Subject key identifier:   13:CA:36:34:64:62:00:88:EE:03:8E:81:AE:45:10:28:EF:DD:28:23
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer:       /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial:       01974967E28CC47D5F7CD2B893C1A0678134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 08:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:34 +0000
Files and hashes:         1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: PJhH8MmglwavCgYotPH5vq8iekpVixw74WA72A6QJW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:e2:8c:c4:7d:5f:7c:d2:b8:93:c1:a0:67:81:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
        Validity
            Not Before: Jun  7 08:00:34 2025 GMT
            Not After : Jun  8 08:00:34 2025 GMT
        Subject: CN=13ca363464620088ee038e81ae451028efdd2823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:36:cd:0d:63:ef:43:59:61:10:20:90:64:3a:
                    c7:0e:89:94:26:44:ff:25:d0:bd:a0:ae:31:86:c4:
                    27:f5:f1:98:a5:d9:7e:d5:eb:60:f0:d1:f9:58:3d:
                    38:5c:16:d3:0d:86:b0:d6:f9:21:f7:b5:a3:73:ff:
                    a1:49:94:ad:96:13:a7:53:45:46:7b:ed:ca:38:a1:
                    f0:07:bd:b8:33:f8:e5:02:a9:43:dc:ff:2c:a4:d6:
                    26:9c:5e:48:11:65:94:06:31:7c:07:1b:55:ff:97:
                    b4:ab:0c:29:2e:09:51:14:35:2e:34:6f:fb:49:1d:
                    af:a5:1a:6e:4b:96:fc:a1:b3:d8:17:1f:1a:dd:bc:
                    88:c4:8c:da:0b:4e:d9:53:26:f1:33:fe:da:54:40:
                    ec:fe:9d:08:4f:67:7a:61:82:e9:44:3d:3a:65:4c:
                    f3:56:22:3a:7b:cd:c6:7f:09:a7:ce:28:b9:0e:3c:
                    06:5b:cc:d4:e6:4e:5f:8c:30:95:c3:49:a0:a2:c2:
                    65:b8:27:6f:ca:c1:e8:63:d2:fa:1b:02:3d:dd:3e:
                    17:bc:19:82:bf:01:27:08:5f:b7:9b:c7:dc:74:71:
                    d4:4e:b8:20:90:16:12:c8:cd:62:a8:52:dd:7f:10:
                    af:2a:36:7f:e4:e9:dd:32:47:4a:73:82:26:b1:43:
                    2e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CA:36:34:64:62:00:88:EE:03:8E:81:AE:45:10:28:EF:DD:28:23
            X509v3 Authority Key Identifier:
                keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:e7:ce:b6:50:02:1f:ac:72:9d:ba:0d:73:a7:88:fb:e8:
         2a:1d:2a:ef:a2:96:cf:0b:44:e2:cb:e8:14:01:59:06:64:ab:
         6a:83:13:da:6e:3f:3e:11:59:aa:02:9c:fb:f1:7d:94:4d:eb:
         0b:7e:59:7d:c3:31:8d:29:87:0b:7e:7b:e7:a2:fd:40:a2:64:
         aa:0b:d1:7e:38:47:5d:f3:a3:af:73:a3:8e:c4:3a:62:a4:90:
         64:25:25:af:18:da:ca:ec:5a:54:d8:24:0f:02:b4:1d:5b:48:
         1c:98:69:9e:00:98:6f:6a:23:32:21:bd:28:69:b4:4a:6f:f0:
         ef:8e:3e:58:02:5c:d0:17:39:d5:92:20:b5:5e:06:b5:a7:7c:
         be:4f:b4:60:9b:17:c1:53:38:0f:b7:64:0d:75:57:5c:6c:db:
         4d:6d:8e:2f:18:78:59:ea:48:f4:df:bb:80:4a:b8:6f:94:93:
         eb:93:98:40:4d:fb:19:26:28:07:d6:32:d2:12:7d:ee:76:53:
         f8:37:e8:6c:b8:01:78:ca:bc:3d:89:88:3a:bc:fa:d6:ba:f4:
         db:46:28:91:05:da:5d:6a:ae:68:a6:bf:90:0e:30:e6:5c:b1:
         d5:4a:c7:83:08:5c:9e:cf:93:b6:a3:95:a2:5d:4f:32:be:ad:
         43:5a:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:59:57 2025 by rpki-client