Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File:                     r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier:          nRy5IHyaf+PdQrIbV8mkEk4yywLaUOn38ai2X7E9nzY=
Subject key identifier:   40:57:86:D6:2A:CE:D3:D6:23:8E:3A:22:0C:3F:B3:68:F9:17:D1:FC
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer:       /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial:       019747429D0A310B30DCA3BCD18C8265879F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number:          0C60
Signing time:             Fri 06 Jun 2025 22:00:37 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:37 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:37 +0000
Files and hashes:         1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: Ebed11KU49bNkG4sMcBRKza1PxRl4avkg703tmn8+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:9d:0a:31:0b:30:dc:a3:bc:d1:8c:82:65:87:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
        Validity
            Not Before: Jun  6 22:00:37 2025 GMT
            Not After : Jun  7 22:00:37 2025 GMT
        Subject: CN=405786d62aced3d6238e3a220c3fb368f917d1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:db:48:96:84:36:f4:81:bc:20:dc:c5:a1:
                    75:ad:2f:b5:16:9d:3b:5c:7f:05:f3:75:b8:c5:7a:
                    e2:30:a1:8e:30:bc:4e:d3:2a:2a:a1:21:df:46:4d:
                    05:d4:c0:7f:49:65:78:d7:27:cb:f8:30:bf:fc:4d:
                    9a:2b:8b:3b:24:0f:13:c4:6b:55:34:4e:84:18:a4:
                    e3:cb:01:75:ce:96:af:ec:d1:d8:13:97:89:73:59:
                    ec:c9:32:74:6d:bd:a5:79:b9:e1:76:54:51:6e:48:
                    5f:57:24:ee:a1:42:11:2f:ee:19:73:ef:c6:78:30:
                    4d:73:d7:d9:c1:f2:8a:ec:33:47:6b:67:b6:d6:9f:
                    a0:2e:72:7a:e4:87:62:b0:98:cd:e2:ce:d4:e3:5c:
                    ed:42:27:79:43:9b:14:ce:8e:10:58:2c:52:d1:f9:
                    72:3c:64:96:fd:f8:b7:78:92:71:f8:ff:13:c9:4c:
                    5f:b2:00:7a:3b:d5:28:bc:e1:ae:5e:ef:c6:ca:9c:
                    91:0e:8c:03:c1:75:3d:bb:e3:6c:48:08:c0:89:a4:
                    bb:01:fa:b8:b2:97:2c:64:56:4b:c8:34:c0:19:f2:
                    80:df:29:10:58:4e:89:62:71:13:32:22:ff:74:ba:
                    c0:1d:ff:24:a1:f0:7a:a4:17:99:f6:07:21:8a:7f:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:86:D6:2A:CE:D3:D6:23:8E:3A:22:0C:3F:B3:68:F9:17:D1:FC
            X509v3 Authority Key Identifier:
                keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:67:38:c3:9f:46:8c:e3:37:71:2b:ba:1c:7e:c3:2a:36:
         01:b9:a1:4e:21:8b:b1:fa:ca:d4:89:04:3b:ba:50:f9:e1:3c:
         b3:64:c2:e6:43:04:49:96:65:23:89:4b:61:28:e1:64:f3:9f:
         32:00:38:77:52:a8:42:d1:cb:c7:07:96:0e:95:67:01:32:eb:
         19:b1:d8:ce:30:86:86:2f:fe:1e:ce:ea:6b:61:17:c5:b5:2c:
         fa:23:02:78:c0:54:8d:86:b7:63:02:ab:a5:0f:55:21:24:bb:
         b0:fe:90:5e:50:30:53:13:cd:6c:3b:77:02:72:2e:72:16:0d:
         cf:15:38:fa:0f:85:a4:7d:02:fc:a8:cf:51:01:5f:75:6b:db:
         44:d6:ff:76:d7:ef:a2:6a:fc:a3:ea:49:7d:01:8e:8e:6e:55:
         42:41:70:bf:28:e4:53:89:88:11:22:ea:99:c5:f0:d5:f0:a4:
         22:e1:d0:12:7c:b2:6b:bb:a7:21:ae:d6:3d:2e:71:f7:f1:89:
         28:f0:a5:a3:7a:39:f0:fe:95:9b:35:92:82:14:05:fb:2d:c5:
         0d:7c:41:93:16:0f:e4:d7:7d:8f:ea:d4:b5:74:85:d3:b5:d1:
         21:f1:cd:83:45:ee:41:aa:ec:a4:0a:1e:5c:be:a8:d6:ec:d4:
         66:c9:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:14 2025 by rpki-client