Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
File:                     tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json)
Hash identifier:          w/Y7pOAZHOFjlWk1DukCXt5KewbJxvLAE2Fbug5J28c=
Subject key identifier:   0D:0C:BC:EE:ED:F6:32:6D:8E:03:2F:BA:64:2C:89:FA:24:B2:1A:57
Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
Certificate issuer:       /CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Certificate serial:       01974A7B49503B74C30466E75ECB07E2E2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
Manifest number:          1323
Signing time:             Sat 07 Jun 2025 13:01:23 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:23 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:23 +0000
Files and hashes:         1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: wLDRQRPflAnjwm7PPTG57nV64S2aTOz20kLNyLOuLec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:49:50:3b:74:c3:04:66:e7:5e:cb:07:e2:e2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05
        Validity
            Not Before: Jun  7 13:01:23 2025 GMT
            Not After : Jun  8 13:01:23 2025 GMT
        Subject: CN=0d0cbceeedf6326d8e032fba642c89fa24b21a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:80:19:e3:48:d0:97:69:24:34:0d:74:dd:
                    b9:c6:34:54:4f:5c:13:b4:39:e9:98:1b:e4:67:99:
                    d5:74:a6:88:3e:8a:01:a5:59:d7:fa:e2:83:04:f6:
                    ab:79:ac:4f:b0:8c:3a:b8:db:b5:85:9c:8e:7d:62:
                    29:07:43:91:51:5e:ec:ca:f0:45:3a:5b:10:00:dd:
                    c0:83:22:e8:5e:f3:0d:1c:cd:1b:e1:84:85:45:78:
                    c2:ad:b9:2d:58:90:11:36:b7:2e:51:8b:28:58:5a:
                    0b:32:a5:d9:29:5b:b2:c1:38:63:72:cb:c5:fd:e0:
                    5e:bd:96:b5:d1:54:57:4e:81:71:08:72:ab:b5:45:
                    2a:cc:d1:40:e5:70:94:4c:ef:9d:fc:29:d3:61:1d:
                    5b:b8:07:39:24:82:3f:96:e2:d3:5d:92:3f:4b:19:
                    e8:89:b4:1b:7c:03:52:c7:f9:f6:3c:9e:b6:3b:24:
                    64:24:b1:1b:1c:4e:a2:1b:e8:77:ce:40:ef:6d:99:
                    66:04:4e:f7:bd:b5:9a:7f:fd:e6:b6:28:d4:85:db:
                    87:1d:82:e4:3a:43:0a:f8:2c:e2:c7:71:09:a0:f1:
                    91:32:8a:95:39:62:fa:bd:73:bd:73:7e:5b:bd:64:
                    bf:31:56:73:bd:8a:4b:50:08:44:27:6e:c8:f8:30:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0C:BC:EE:ED:F6:32:6D:8E:03:2F:BA:64:2C:89:FA:24:B2:1A:57
            X509v3 Authority Key Identifier:
                keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:c6:a4:00:54:6f:e9:ff:f2:66:5d:db:f8:21:d4:26:4c:
         43:4e:b6:89:89:7e:a6:df:f8:eb:21:4e:1d:62:bf:f6:15:87:
         da:2e:b9:13:36:1b:69:af:3b:de:46:2a:cc:84:0a:d8:14:5b:
         f0:99:39:23:92:6b:9f:45:86:03:f2:69:4c:25:70:d8:4b:13:
         8a:62:cb:08:a4:b7:b2:c2:9e:8b:fa:77:9a:d5:50:52:5c:6d:
         69:cd:d5:d2:7e:7e:de:9e:47:65:af:ff:f4:f1:0c:7b:bb:ea:
         0d:f2:d9:84:e6:61:d8:23:6f:d4:6b:59:84:98:3d:03:0f:ea:
         24:60:af:dc:65:af:6b:65:43:91:55:bb:1b:15:5f:98:7f:e1:
         b0:1f:0f:0f:79:b8:05:e7:58:81:fb:43:a6:2c:9c:a4:f9:d8:
         1a:47:2e:c5:80:57:9a:31:5b:d8:8a:95:15:38:a4:b8:c1:08:
         8f:b2:27:4b:3d:6c:be:1c:37:1d:52:7b:89:22:df:ec:35:9b:
         29:41:c0:52:d6:8c:fc:5a:fa:98:ad:ef:48:e5:ed:f0:06:91:
         a8:60:61:32:5e:16:2a:dd:43:a2:80:6e:ca:44:46:07:ce:28:
         ce:33:bd:52:55:8e:bd:30:9b:45:0a:4b:de:c1:54:01:56:3c:
         f8:d5:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:21 2025 by rpki-client