Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
File:                     RoWpxIcmUu55Z7pfSieCDGcVKNY.mft (raw, json)
Hash identifier:          abDjnKRXdn0la1Zqm0YwW9Ht230MDm2h5p4DQpXdtyM=
Subject key identifier:   FA:CB:DC:EB:4F:00:70:8D:50:B1:58:54:1A:32:2C:7A:56:C5:0F:67
Authority key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Certificate issuer:       /CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Certificate serial:       019752A2AF6122760E00A37371E0008DF887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
Manifest number:          047B
Signing time:             Mon 09 Jun 2025 03:01:22 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:22 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:22 +0000
Files and hashes:         1: RoWpxIcmUu55Z7pfSieCDGcVKNY.crl (hash: u7ebZ4fam+LVN4S880JC29gZX2UF13qkSXiq7OCLWes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:af:61:22:76:0e:00:a3:73:71:e0:00:8d:f8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
        Validity
            Not Before: Jun  9 03:01:22 2025 GMT
            Not After : Jun 10 03:01:22 2025 GMT
        Subject: CN=facbdceb4f00708d50b158541a322c7a56c50f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:10:12:02:14:59:d8:20:cd:bb:0d:1b:e9:
                    b1:f0:39:26:b5:8f:ae:b3:5f:ef:cf:cf:0f:28:12:
                    62:bd:70:cc:82:b8:da:d7:45:87:9b:5e:7a:75:21:
                    27:bf:63:ce:e7:d1:c4:39:30:f8:59:9f:f6:8d:3c:
                    79:63:2d:c8:84:e5:55:8d:f8:4d:8e:41:00:27:02:
                    ca:5f:5a:98:59:2d:f9:98:1f:a4:cd:1b:5d:cc:0e:
                    3e:51:15:68:b3:aa:53:bb:96:cf:17:30:4e:cb:ac:
                    13:08:09:25:00:1a:2d:81:46:58:e3:b0:aa:06:dc:
                    72:e4:3b:28:d3:8d:f9:60:68:13:2d:58:57:4c:4c:
                    a0:10:06:10:b4:6d:d2:ca:cc:fd:82:c6:c2:97:1d:
                    5b:02:1d:ff:bf:0a:1f:32:8c:20:70:3e:3f:94:9c:
                    e0:26:82:ea:a4:46:a7:b6:8b:dd:cf:7f:18:55:ac:
                    f2:db:8a:aa:2a:4e:5b:c2:85:e1:0f:84:d5:2a:38:
                    37:30:59:4a:96:df:b2:77:4e:21:86:2c:0b:49:6f:
                    3d:8c:01:b3:9b:a1:4a:ea:82:40:60:86:52:5c:26:
                    cd:44:ea:7e:87:59:d5:e4:18:97:83:f5:8a:f8:1f:
                    19:08:00:9c:9a:05:5a:e8:c8:c2:8d:73:f7:88:67:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CB:DC:EB:4F:00:70:8D:50:B1:58:54:1A:32:2C:7A:56:C5:0F:67
            X509v3 Authority Key Identifier:
                keyid:46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:57:80:e6:87:36:bb:9f:8b:bf:74:97:25:39:97:58:33:cf:
         35:dc:5b:6d:f9:a7:9f:a3:3c:4c:2a:80:a3:2a:4a:73:a8:b9:
         5f:e4:21:aa:66:57:66:c7:e3:9b:be:af:de:d6:ca:2e:62:eb:
         ea:10:bd:10:b2:54:2e:4b:c2:28:ee:57:85:8e:06:b2:80:0b:
         d9:9f:1e:38:2a:a5:0e:bb:0c:55:f7:24:76:dd:c6:82:fa:93:
         82:6a:61:f9:b4:c3:8a:70:73:5d:e8:3c:6b:60:34:11:ab:7c:
         95:bd:0c:e7:fc:26:3d:1d:d7:9a:50:fc:9d:71:51:cc:2a:69:
         fa:85:7d:77:37:f8:0c:eb:70:e8:77:b8:8c:51:77:6a:46:ad:
         3f:b0:23:62:6a:49:de:25:1f:b8:9b:af:17:7e:6e:fd:05:c6:
         9b:dc:39:99:fa:c1:25:35:4b:83:d8:3b:2f:e1:9c:d8:fb:48:
         11:08:1a:5b:98:db:e9:d2:f5:1e:86:d0:df:12:3b:21:63:6f:
         db:ff:5d:c1:74:73:0a:bd:53:a2:ab:e8:b5:d9:b3:46:3c:10:
         ed:ef:12:be:12:a3:5f:25:b4:23:2f:95:ab:83:1a:3e:2e:bc:
         1d:93:a4:f8:02:b5:05:39:f7:08:cb:1a:c0:c8:f6:b5:91:53:
         21:fb:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:12:30 2025 by rpki-client