Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File:                     c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier:          fE2Agd+gmhdrh29vRoEXBPL6o37ixoX40RrJoGcvKQU=
Subject key identifier:   0D:DA:5C:84:40:17:FA:8B:1B:8E:45:5F:2E:A3:CF:A4:EE:3A:97:43
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer:       /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial:       0197488C5313377AC6F7504C24D4B24E9A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number:          1577
Signing time:             Sat 07 Jun 2025 04:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:45 +0000
Files and hashes:         1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: AHjlN4DMUi9Rn3wCAG5rCS2uE0fdat503LQ23glbjYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:53:13:37:7a:c6:f7:50:4c:24:d4:b2:4e:9a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
        Validity
            Not Before: Jun  7 04:00:45 2025 GMT
            Not After : Jun  8 04:00:45 2025 GMT
        Subject: CN=0dda5c844017fa8b1b8e455f2ea3cfa4ee3a9743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:11:5d:01:03:f3:d9:88:47:91:b5:e0:fc:
                    14:c0:c1:04:ab:23:fd:c3:4c:72:bc:0a:3c:a5:cb:
                    64:f2:10:82:f0:b1:20:84:a7:99:48:c3:c5:15:11:
                    40:a7:85:3b:41:7e:26:87:54:4f:f4:67:34:84:64:
                    64:ed:77:ea:da:28:9d:be:66:ab:7e:8a:c2:cd:fc:
                    5a:da:ea:38:5c:18:3e:87:e9:cb:ba:e3:66:c0:54:
                    da:ed:84:ca:76:97:0b:da:4c:6b:ee:9b:ee:98:0a:
                    f0:9d:3a:de:f8:21:92:70:c2:bf:79:fd:62:f5:e4:
                    a7:af:99:ea:31:35:9c:14:91:28:95:ed:57:1e:f8:
                    03:be:36:2a:8b:2e:0f:2a:b0:62:59:5c:21:6d:ba:
                    f6:50:38:9c:32:58:fb:a5:be:82:8f:7b:b1:68:59:
                    c1:f7:d6:84:8a:3c:38:9c:d2:90:af:1f:14:85:fb:
                    c5:db:64:db:f3:b5:38:ac:e4:94:ef:94:f4:cd:46:
                    7f:82:0f:96:5f:07:8f:46:15:18:c1:e3:f4:69:5e:
                    fd:c6:92:7b:af:6b:b9:50:c1:9c:e7:da:6d:04:0c:
                    db:e6:f4:a1:ba:82:d0:da:1d:d8:95:91:ff:10:11:
                    9b:c2:18:44:6e:e2:13:af:9d:31:64:00:37:0a:13:
                    ce:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:5C:84:40:17:FA:8B:1B:8E:45:5F:2E:A3:CF:A4:EE:3A:97:43
            X509v3 Authority Key Identifier:
                keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6b:08:b8:7c:2c:21:83:d8:2d:62:f7:0f:7f:76:cf:8f:de:
         f5:d8:f8:79:44:a0:6c:03:92:59:53:9b:d9:5b:c2:7a:c1:36:
         a9:92:4b:f3:db:33:a8:5a:01:c5:6b:4a:74:87:24:b9:48:ec:
         7a:47:6a:1f:0f:1a:dc:d0:99:6e:e0:e1:7d:97:b1:d2:b9:80:
         7e:ff:85:00:d7:a9:41:57:fc:7f:97:7c:be:96:2b:46:b5:5d:
         a1:4b:ac:7b:d6:71:a9:fd:52:6d:8e:48:1b:e0:8e:a5:1e:9d:
         2f:77:94:77:29:8c:bd:d5:b3:6f:56:4a:38:6b:79:a4:5e:ab:
         14:0a:72:05:1d:d8:c2:e2:14:fc:88:8f:38:62:88:19:bc:f2:
         53:87:f7:3a:b5:5f:13:67:d3:b6:a8:17:51:f0:52:3f:08:bb:
         d8:da:6f:13:8c:fa:02:f5:0a:7f:8d:08:92:ef:e3:be:f3:6d:
         0d:2d:dd:d1:c7:b9:63:31:bc:4a:33:f8:8e:4d:97:f5:10:4f:
         87:35:55:90:75:11:e1:9d:60:a8:d3:f7:7a:88:af:6e:0b:da:
         d2:94:3b:07:57:b1:fc:9b:20:3d:18:18:0b:8c:83:38:26:ff:
         0f:e2:4f:b8:3c:5e:bb:2e:c6:f1:30:89:2c:cc:b0:dd:c8:21:
         30:52:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:58:23 2025 by rpki-client