Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
File:                     OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft (raw, json)
Hash identifier:          +TLlcAVmVXiJP32aJbK4Al8r/owQcqZnbevgOB5VzJk=
Subject key identifier:   D0:10:B8:45:14:2A:0D:EF:B2:EF:5A:F8:92:A2:FF:50:30:83:80:E4
Authority key identifier: 39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24
Certificate issuer:       /CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
Certificate serial:       01974AE8C985F61B133494E9C8CEC5B767F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
Manifest number:          0477
Signing time:             Sat 07 Jun 2025 15:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:59 +0000
Files and hashes:         1: OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl (hash: uDIEdAee03O75qnzuBXd3dOyu+Jz4qIYo7UB/LTED4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:c9:85:f6:1b:13:34:94:e9:c8:ce:c5:b7:67:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39413e897c5a2b516a4160d3c1b7af3ad59e1424
        Validity
            Not Before: Jun  7 15:00:59 2025 GMT
            Not After : Jun  8 15:00:59 2025 GMT
        Subject: CN=d010b845142a0defb2ef5af892a2ff50308380e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:42:d4:45:6f:64:fa:08:8d:23:1e:87:85:
                    6d:3e:6c:7b:40:ed:02:e7:10:14:0a:06:20:df:e0:
                    e5:07:69:a0:97:ef:58:60:24:5e:b8:4f:91:cb:8f:
                    3c:ad:80:ed:3f:65:4a:f6:7d:37:a7:fd:5b:31:65:
                    66:1a:f5:db:86:cd:39:f0:e2:36:58:47:e1:a9:07:
                    f0:b2:21:9e:ca:ff:d2:6e:1f:28:05:8a:72:8f:36:
                    d8:fc:68:de:28:69:e6:c1:3e:6f:de:57:23:6d:ef:
                    f1:e3:3a:61:84:8b:00:99:ad:fc:5a:66:05:54:a9:
                    75:65:54:c0:29:65:82:9c:c3:30:7a:41:ea:e0:27:
                    a8:ba:fa:b8:bd:7f:f1:94:88:82:44:2b:6e:34:76:
                    a1:dd:bd:d2:cf:a1:22:2f:85:ed:fe:a0:b0:c4:4a:
                    09:7b:18:b9:69:cf:2d:c9:8e:ae:b2:fc:f7:34:9b:
                    da:04:6d:73:b2:cd:3b:c8:d5:92:dc:d2:93:a1:ee:
                    b1:a7:98:73:c7:a1:2a:2e:86:96:91:ca:05:aa:8c:
                    76:80:93:ce:9b:e0:2c:b6:4a:b2:a7:28:d9:16:66:
                    c6:25:bb:ab:ee:f7:33:a7:4a:fc:89:4c:9a:05:8e:
                    74:e1:92:a0:0a:26:a2:97:07:d7:ce:f3:ea:ea:9f:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:10:B8:45:14:2A:0D:EF:B2:EF:5A:F8:92:A2:FF:50:30:83:80:E4
            X509v3 Authority Key Identifier:
                keyid:39:41:3E:89:7C:5A:2B:51:6A:41:60:D3:C1:B7:AF:3A:D5:9E:14:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUE-iXxaK1FqQWDTwbevOtWeFCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b80a7c-ba06-40c2-9e88-85082cd95431/1/OUE-iXxaK1FqQWDTwbevOtWeFCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:41:ba:1d:e0:db:97:52:fc:ff:dd:9e:90:94:67:a3:71:06:
         2e:a1:3a:b7:48:7c:8e:35:15:94:a3:da:13:73:20:63:77:bb:
         9f:9d:e2:d8:88:71:d6:3a:b1:67:67:a6:d8:2e:7f:53:7f:d6:
         f0:ef:0d:87:d7:3b:fa:db:82:30:3f:32:a4:f3:03:1b:f4:d6:
         e5:32:78:95:a5:c3:45:af:fb:1f:25:b1:43:50:b8:48:0e:53:
         a7:4e:4f:94:36:c6:f9:6a:46:75:57:ea:d0:23:98:68:30:c9:
         65:3a:82:54:99:c0:9b:6c:ab:a3:4b:80:4b:ed:14:0e:08:58:
         f7:1a:f1:f3:f3:ad:b4:8f:cb:5b:71:15:bd:8e:8f:c1:ba:8e:
         10:55:89:f3:e8:09:16:7c:73:a7:9c:ef:4a:ee:5d:0c:8b:d7:
         73:43:75:57:6b:23:be:63:48:55:af:ef:c9:be:b1:7c:89:9a:
         e3:29:90:a7:67:88:1f:ae:b2:51:cf:42:99:b8:60:06:bf:e3:
         a2:ff:08:dd:79:6c:ca:cf:b2:4c:6b:a2:3b:22:84:d4:eb:3d:
         0c:a7:6c:db:fa:fe:25:8f:1c:d1:95:b4:2a:5a:b8:7d:b9:42:
         11:0a:02:2c:a2:74:3b:be:24:72:8c:88:ab:9c:65:64:21:39:
         97:dc:1d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:41 2025 by rpki-client