Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          AGddV0U+/U7ZmEutD9vuZ90BD1Js2JbyGJyLZZdW60w=
Subject key identifier:   CC:5B:F0:13:55:F3:F3:0B:3D:5E:AD:D4:55:2C:AF:6F:1D:14:B0:C9
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       01974A7ACD3FE3144D7F2657068010172419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 13:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:51 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: gbXJysyQGFXwDkbkLkyQQAvpM9UxEXfWZUjoESuPSu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:cd:3f:e3:14:4d:7f:26:57:06:80:10:17:24:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: Jun  7 13:00:51 2025 GMT
            Not After : Jun  8 13:00:51 2025 GMT
        Subject: CN=cc5bf01355f3f30b3d5eadd4552caf6f1d14b0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bd:eb:48:84:b2:5a:c7:f4:20:29:69:7b:7c:
                    be:20:d9:03:41:ac:41:74:23:ae:ff:6d:24:ec:3c:
                    2d:a5:2f:32:58:7b:70:4e:ab:22:44:29:e9:ff:aa:
                    53:84:c5:01:81:d1:fa:23:f7:1d:e7:6c:1e:c3:72:
                    00:b1:7c:8a:3f:83:c5:48:ff:6f:0b:23:21:d8:55:
                    f6:a1:4b:aa:eb:db:a4:c6:47:69:2d:3e:c9:36:08:
                    cc:2c:88:7d:e9:10:c3:9a:61:b5:88:7c:47:ec:38:
                    7e:c3:a6:52:34:1e:66:48:3e:fa:e7:31:3f:9d:e9:
                    ac:d0:f4:8a:f0:d8:1b:f9:27:e3:f5:57:aa:1c:d2:
                    b7:c0:59:a2:23:c0:96:e0:73:18:b0:01:a4:b8:4f:
                    e7:51:d1:9a:81:4b:ff:f6:fb:6c:5d:07:87:04:1b:
                    bd:95:5b:3d:7f:92:ce:47:70:63:6a:82:f8:ca:7c:
                    13:66:20:46:53:90:2b:4a:0e:93:5d:f7:9e:23:7a:
                    75:e8:55:02:c4:33:a3:5d:ac:13:20:51:53:11:5b:
                    de:8e:b0:cf:ca:de:09:8c:c2:04:13:38:08:36:6b:
                    59:ca:81:ca:b2:19:a2:9b:fd:6a:2e:f1:67:03:ee:
                    3f:5c:22:18:d5:40:6e:fe:0e:2a:a3:99:73:19:df:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:F0:13:55:F3:F3:0B:3D:5E:AD:D4:55:2C:AF:6F:1D:14:B0:C9
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:0a:11:92:ce:c4:09:d3:80:10:0c:06:3d:19:eb:62:a9:
         79:23:d0:43:3a:e6:b7:61:54:4f:84:c4:a2:dd:33:f8:95:cb:
         b7:bc:9f:f7:e1:4b:6e:1d:8d:86:3c:77:32:8d:c6:1d:d0:eb:
         fc:f2:11:1a:c2:bc:31:4a:b0:14:84:a8:68:f1:a9:45:40:ea:
         d8:d8:60:01:3c:05:1d:42:9f:51:e8:5c:48:2d:bf:c0:87:81:
         19:66:45:5f:df:7c:1d:7f:50:c0:04:f7:bf:73:1f:89:93:6e:
         78:40:f5:04:fd:2d:c3:eb:ad:fb:5e:af:2d:ec:cc:87:2b:dc:
         ec:a4:c5:5a:57:f5:2f:47:bc:38:4e:1a:f3:67:c1:42:0d:36:
         32:b0:f8:06:ab:a4:99:82:9d:6f:5d:4b:0a:31:a1:c9:fe:5c:
         77:c1:85:63:fe:38:a0:ef:e2:58:4e:b7:79:d4:86:06:35:1c:
         7f:df:56:97:f2:da:85:81:2e:62:b7:70:3f:24:80:fa:79:8e:
         96:ac:a8:f1:55:d6:00:2a:8a:cb:80:3f:81:f1:99:17:4d:07:
         6b:92:88:42:7c:c1:19:ea:3a:9d:36:ca:c7:c9:49:ed:66:c2:
         f6:5f:ec:ed:d6:17:46:d5:15:1a:c0:e7:45:3a:8b:e9:65:b9:
         a9:28:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:14 2025 by rpki-client