Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          QlyV6T6X/Aklqp1sK7LD+Fn0Y3LrDW2A/Y2+Jld+4UI=
Subject key identifier:   EC:34:CD:07:FD:7C:BD:1D:96:93:FF:32:41:DE:05:BC:10:03:42:43
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       01975DCB0B954EE77A40A45A9F59904DC820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          1318
Signing time:             Wed 11 Jun 2025 07:01:17 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:17 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:17 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: t5oFrH7wUEMSMbRrn1QnS7eUhebnUX85Ew5cnIuI2x4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:0b:95:4e:e7:7a:40:a4:5a:9f:59:90:4d:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: Jun 11 07:01:17 2025 GMT
            Not After : Jun 12 07:01:17 2025 GMT
        Subject: CN=ec34cd07fd7cbd1d9693ff3241de05bc10034243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:96:85:48:44:e2:05:6d:0e:eb:36:ab:bd:
                    26:61:88:5c:6e:c7:be:3b:0e:ee:1f:84:fc:47:1e:
                    a1:22:aa:a1:51:d3:f9:94:f1:9c:14:cd:71:57:12:
                    8e:60:cd:f0:2b:5f:40:4b:37:1d:23:15:98:56:92:
                    b7:33:1b:1c:b5:64:69:16:a1:04:41:65:43:8b:da:
                    fd:f4:65:27:56:34:76:22:08:b4:cd:50:17:0c:27:
                    cb:66:de:4c:33:ee:7c:3f:73:67:aa:e4:6e:f2:54:
                    4c:30:bc:2e:91:b5:c3:fa:0d:d6:37:7e:0e:49:dc:
                    67:2c:0c:98:17:72:8c:51:4d:de:c3:4c:9d:04:fc:
                    33:12:d0:26:c7:fc:8a:9f:74:e5:d3:c2:a5:42:84:
                    78:94:4c:8b:97:6b:ff:c6:c6:42:7b:51:97:e2:cd:
                    a4:b7:14:d5:ef:b8:e3:ab:ce:97:1e:bd:dc:74:4b:
                    ed:fc:63:41:51:c3:39:76:0b:a2:da:09:6b:4e:db:
                    d9:a4:73:e7:c4:47:5c:86:4d:68:bd:3d:cf:61:34:
                    b5:50:ff:bc:ed:3d:10:15:51:c5:26:73:45:9f:d3:
                    77:d2:90:4f:d8:6f:3b:f8:d9:8b:ff:28:f7:73:f5:
                    12:11:e3:b3:91:7c:a6:87:1a:d5:56:60:25:4a:49:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:CD:07:FD:7C:BD:1D:96:93:FF:32:41:DE:05:BC:10:03:42:43
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:82:42:7f:ac:c1:47:40:81:05:a2:c0:43:88:64:b7:64:
         98:9b:23:5f:ae:19:a3:98:3d:e9:83:14:b0:36:61:b8:a2:d0:
         55:af:5f:75:53:97:78:cc:1d:db:f3:d3:35:89:42:8e:c7:d6:
         ca:0b:00:f3:1b:13:f3:a9:23:94:91:c1:e5:4f:0d:9d:26:de:
         b0:d3:e0:59:c0:41:9e:ea:ba:0b:f2:ee:0f:ff:13:4c:79:b9:
         b2:25:8c:0e:ef:98:b7:8e:46:30:58:f4:a6:a2:43:30:ed:20:
         ba:b0:bf:c0:2f:5f:18:b0:44:65:f4:08:57:e8:ef:06:b9:cd:
         d3:d0:f3:e7:4f:65:0c:52:25:0f:e3:63:8d:bf:8d:8f:74:41:
         ce:ae:33:6f:90:26:5d:01:8d:15:d6:bb:32:26:f6:eb:10:c0:
         01:60:e6:e4:b6:5a:e9:0e:04:50:c0:b2:90:04:b7:e5:5e:b5:
         70:f8:07:a3:ba:c8:89:35:69:65:eb:8c:28:79:64:4f:77:99:
         83:c7:f3:14:ba:75:da:46:65:0b:22:a1:d2:be:bf:01:4f:b1:
         08:bf:c7:b7:8b:98:24:30:d2:82:a2:05:cd:33:6a:0b:0e:9e:
         99:3b:2a:be:2b:7c:2e:0c:2e:7e:18:2c:4b:6c:de:fe:f2:3c:
         b5:cd:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:40:01 2025 by rpki-client