Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File:                     dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier:          ryUJFCtVS5anZJUA34EEfmkkC3lWhBmzcjv9vTKWh1c=
Subject key identifier:   CB:BD:ED:A7:78:F2:D0:C4:77:E8:1A:B7:E2:69:B8:15:43:74:2E:0C
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer:       /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial:       01974A7A7EC78406936CFBEEEC6C1F45B140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number:          0D9B
Signing time:             Sat 07 Jun 2025 13:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:31 +0000
Files and hashes:         1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: h35ot0nMuJxc5olkPYghXMT/jSxni2PJi34tfc7Vj/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:7e:c7:84:06:93:6c:fb:ee:ec:6c:1f:45:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
        Validity
            Not Before: Jun  7 13:00:31 2025 GMT
            Not After : Jun  8 13:00:31 2025 GMT
        Subject: CN=cbbdeda778f2d0c477e81ab7e269b81543742e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:8a:7c:dd:01:96:f2:0b:1a:fc:64:89:bd:
                    ee:1b:3d:83:66:24:8e:e1:19:d1:3d:5c:64:af:a2:
                    24:bb:bf:6d:d9:ad:43:f7:c3:8a:eb:73:6b:b7:14:
                    c3:68:71:3a:3e:7f:14:c0:96:60:88:84:81:7f:b5:
                    6f:f7:63:e0:10:42:34:37:2b:b2:3e:28:ad:96:47:
                    da:e6:d5:5f:cf:87:05:b0:04:70:69:a4:49:83:dc:
                    c8:da:04:6a:da:73:8d:b5:5d:d2:c5:70:85:82:a2:
                    16:0e:d6:db:b1:3c:6a:a7:b4:0f:5d:34:ca:64:9d:
                    5e:11:99:0d:58:60:73:b3:2d:3b:83:ea:56:a2:a8:
                    15:05:fd:b6:15:f4:0f:33:bb:35:bd:dc:b6:9c:9d:
                    88:19:b9:d4:6b:ea:6b:04:51:32:1c:94:d2:11:ed:
                    20:05:53:a0:e1:2d:2e:1f:dd:8b:98:8e:eb:1d:15:
                    33:d5:ae:3b:b1:a1:ce:a7:3f:5c:80:a5:93:07:be:
                    98:72:f2:95:42:e1:31:28:6f:f0:aa:da:5a:c6:ce:
                    4d:86:0d:7f:cb:71:c3:5f:03:70:a7:f7:27:f2:f1:
                    6d:a0:e7:e2:08:af:57:a5:1e:1b:18:1a:f9:4f:ac:
                    e2:20:bf:8d:3b:f5:3d:d6:5c:1f:b9:f5:cc:78:27:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:ED:A7:78:F2:D0:C4:77:E8:1A:B7:E2:69:B8:15:43:74:2E:0C
            X509v3 Authority Key Identifier:
                keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:65:7b:3f:b8:48:9b:b5:5d:c0:ed:86:f2:ea:34:52:27:b4:
         07:12:75:3f:4b:22:7a:34:e3:7c:b7:9b:d1:3d:15:01:3f:b5:
         12:97:84:16:85:4a:7e:1a:95:0b:05:61:54:02:b1:77:a3:66:
         bf:d5:e4:2a:1b:d1:96:f0:8a:e5:54:26:7a:98:c7:4c:7a:d6:
         59:58:75:3f:b7:bf:c4:98:ca:c5:11:bf:84:f0:7f:4a:bb:34:
         2e:55:3e:a1:ac:9d:81:3a:81:3e:a5:5c:14:f1:35:f0:40:c8:
         60:e8:a1:67:94:3a:85:a6:8c:22:3e:23:83:66:9f:41:d5:6a:
         ed:6d:13:39:16:8d:7a:72:5d:3e:79:d9:4b:b5:e2:95:23:88:
         09:e5:b8:0e:db:d9:9c:79:e1:08:dc:80:a1:5d:2e:99:e2:aa:
         08:8c:51:b5:a7:33:77:9d:1d:f4:28:d6:18:39:0b:b5:e8:81:
         1e:75:73:0a:a5:71:ff:ab:80:37:51:f5:b1:6d:2c:6e:a9:0c:
         42:57:6b:25:3d:4d:0c:a2:f6:2e:d7:43:a7:1c:3b:27:e9:a1:
         2c:be:5c:d0:5b:36:b6:f6:47:53:5d:3c:c7:93:6e:e7:3b:cf:
         f6:ed:74:90:9a:c6:c9:23:62:8a:38:60:f7:b1:6e:61:c6:c2:
         bd:b7:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:52 2025 by rpki-client