Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File:                     Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier:          /zmaCxGzJa8mbpdAEVYpEJvySL85oy9BXgdDeUZtVd0=
Subject key identifier:   FD:A1:28:82:38:56:0D:E5:D2:6D:8C:47:DE:B2:A5:E9:D7:77:74:1D
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer:       /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial:       01974C69E3BC9E6A381F470FE098B8ED7907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number:          10C2
Signing time:             Sat 07 Jun 2025 22:01:37 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:37 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:37 +0000
Files and hashes:         1: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: dwWhEDtz5rwY0HGUJd3nAVyugAqKoJU74o6q0MijqIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:e3:bc:9e:6a:38:1f:47:0f:e0:98:b8:ed:79:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
        Validity
            Not Before: Jun  7 22:01:37 2025 GMT
            Not After : Jun  8 22:01:37 2025 GMT
        Subject: CN=fda1288238560de5d26d8c47deb2a5e9d777741d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ba:27:9c:e3:29:a8:8b:12:4f:f5:7d:ed:ec:
                    68:9e:83:d1:80:98:0e:c3:f4:48:5e:3c:8d:dc:52:
                    a3:3c:60:25:3d:9d:99:70:f8:19:2a:d4:10:94:04:
                    e3:c0:1c:39:cf:9d:74:91:e7:8e:c9:59:c9:40:8e:
                    a3:f0:c9:9c:e2:5b:b3:5e:26:87:27:40:4f:e8:85:
                    bf:4d:0b:51:ae:e6:32:97:4d:70:cb:5b:5d:3e:d1:
                    e5:08:ae:e5:84:b7:6c:b3:00:2a:4d:63:ff:b9:ef:
                    3d:0c:1f:e5:28:d1:8d:e8:c4:96:6f:df:75:66:5d:
                    59:16:93:0e:72:e3:47:f5:a1:a5:79:92:59:0a:54:
                    02:a1:dc:6d:2e:2b:e9:38:e8:06:7e:7f:42:45:cb:
                    44:ce:ba:f2:ed:5b:30:1f:44:ee:08:7a:31:93:2c:
                    36:89:46:95:79:df:4f:45:97:e5:ea:15:1c:22:4e:
                    25:46:61:dc:0e:dd:73:b5:3b:4c:31:21:c4:5d:37:
                    bb:dc:e7:8f:5f:aa:82:db:fa:5a:dd:af:c7:52:27:
                    5d:ab:9d:c2:7c:2d:73:5a:8b:79:02:2a:4d:e2:d7:
                    25:9b:0c:a5:98:19:d9:62:92:4b:24:8b:14:00:4e:
                    a9:2f:92:25:7f:74:56:cd:17:41:2b:da:e8:1d:ed:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A1:28:82:38:56:0D:E5:D2:6D:8C:47:DE:B2:A5:E9:D7:77:74:1D
            X509v3 Authority Key Identifier:
                keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:16:cb:ad:a3:5b:5b:85:c7:64:59:46:7a:9b:2a:7d:54:
         80:2e:99:6b:d2:e8:b0:21:62:f8:b7:a7:15:c1:21:d5:70:e0:
         c1:a2:69:06:2c:41:cd:af:d3:22:81:42:a8:fd:09:49:01:70:
         80:08:1a:62:e0:32:1a:10:b7:f8:3b:fa:fb:f9:40:6e:4d:ec:
         d6:99:80:6d:8a:15:5b:55:29:44:1f:29:f9:28:c4:55:9c:5c:
         2a:ea:b0:4b:3c:bc:fc:b4:5f:b9:29:73:ce:73:5a:1f:29:6a:
         c6:86:47:39:b2:d1:dc:77:55:83:8b:d0:3d:d9:de:ca:65:a4:
         b9:22:54:c5:96:f2:8a:9b:3f:e8:30:f7:f6:83:5b:5f:e2:1b:
         c6:23:3b:b8:55:5b:7c:bb:22:da:75:56:b9:fc:7e:0b:e1:59:
         ab:b1:27:ea:91:a7:22:f8:a3:35:97:98:bf:5a:e5:92:60:5d:
         64:0d:33:e9:0a:cb:c2:19:2e:6c:cf:86:11:0f:5f:10:d6:f8:
         39:f2:0b:52:8c:0d:2c:0b:1f:82:28:60:29:41:ff:02:04:52:
         08:2b:78:25:79:47:1e:8b:90:c2:10:da:14:d7:6c:11:3c:f1:
         aa:7b:5f:dc:fc:13:75:b1:79:95:8b:50:c5:7c:3b:5f:2b:17:
         a5:68:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:46 2025 by rpki-client