Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File:                     wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier:          /ce6nQoUx6/m2HN4/OPkqqNUNJ7KmLotjm6SRwxUoXQ=
Subject key identifier:   84:C5:7B:07:46:B0:85:27:3F:D1:D3:E2:3E:96:A9:8D:CE:A6:2C:EB
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer:       /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial:       019766CD7E9761433D52C1826D2B5A2A36EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number:          1588
Signing time:             Fri 13 Jun 2025 01:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 01:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 01:00:32 +0000
Files and hashes:         1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: sZGdfMjj0zuq9rcIsdNXZrEI/vzcICmPpPRhXyZgx0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:cd:7e:97:61:43:3d:52:c1:82:6d:2b:5a:2a:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
        Validity
            Not Before: Jun 13 01:00:32 2025 GMT
            Not After : Jun 14 01:00:32 2025 GMT
        Subject: CN=84c57b0746b085273fd1d3e23e96a98dcea62ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:f4:28:6e:6f:ff:65:74:a0:42:18:d5:36:
                    3f:16:9f:b8:00:24:d7:ce:25:ee:ce:01:a4:4b:e9:
                    cd:6a:6c:59:91:27:95:e4:a2:83:9b:a5:7b:79:c2:
                    17:f6:e4:9a:61:db:b6:e5:fa:9b:1e:23:6c:88:83:
                    7d:c2:1b:99:60:81:c3:ed:53:ef:23:1d:19:e6:9c:
                    49:63:b6:5c:51:f2:17:25:5c:82:f6:da:dd:d8:4b:
                    96:2b:b1:cf:49:57:df:6d:bc:bc:94:02:2c:a5:4c:
                    1a:19:97:06:cd:ce:7f:02:0f:a0:7e:dd:55:6e:5a:
                    cd:74:d0:9d:44:11:79:0a:a0:17:ee:9c:61:17:8b:
                    c0:6d:3f:2f:5a:b1:9d:a0:1f:65:8a:d1:a4:32:3b:
                    bd:08:d6:49:98:a1:18:c4:22:75:05:ea:be:f3:a3:
                    58:a2:c8:d9:ac:a2:74:b2:85:24:b6:a7:2b:f6:94:
                    f7:d1:1e:2a:f2:73:23:24:2a:0c:6e:36:29:7c:ff:
                    89:2e:a9:8e:08:e7:2e:16:8b:3f:5f:1c:07:df:11:
                    91:f8:f5:b9:f0:dd:c2:31:4e:70:06:4f:8a:e8:a8:
                    4d:0a:a5:74:ee:8e:16:b8:96:a1:c8:a5:4c:76:af:
                    d9:88:7b:dd:c6:1e:6e:9e:b3:70:08:d1:98:96:b1:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C5:7B:07:46:B0:85:27:3F:D1:D3:E2:3E:96:A9:8D:CE:A6:2C:EB
            X509v3 Authority Key Identifier:
                keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:dc:10:2b:b4:00:bd:cc:1c:91:ce:ee:7d:0f:e0:c9:94:aa:
         50:60:a3:a0:e1:8d:ef:c3:b2:67:d6:2d:09:8e:f5:6e:0b:31:
         fc:da:f5:1c:c6:f4:6a:ea:70:e1:86:e9:e8:0f:f5:23:2b:1e:
         f7:9e:73:15:b6:c9:58:14:59:e5:be:30:fc:a7:af:1e:70:a2:
         99:b9:a3:ec:36:d1:00:90:46:41:5f:77:36:f1:2e:1f:3e:0e:
         54:f5:22:37:3e:fc:bb:31:24:52:e6:b4:3e:7c:78:f5:d2:19:
         a3:78:9f:07:00:36:d5:8c:98:6e:63:b3:72:98:6c:c1:3f:a2:
         60:6d:7f:fa:a0:e2:ee:26:6e:ab:18:ca:d3:bb:e9:31:ee:7e:
         98:ad:c3:aa:c9:62:22:80:4d:58:62:0d:9a:ba:15:54:9e:76:
         77:6f:66:63:44:58:31:73:0f:ad:18:55:0d:4c:3b:81:1e:c3:
         79:a7:21:d8:eb:c8:28:05:41:1b:17:10:5c:f3:33:08:c2:99:
         ce:26:0a:45:7d:f4:0a:0a:74:44:c3:08:9e:82:10:b5:18:10:
         d3:49:4a:2b:7f:59:68:59:66:8d:59:a8:a9:6f:bc:e6:7a:ef:
         70:53:f3:13:d8:fc:4a:c9:da:b4:45:e9:f8:6f:e5:40:c9:bc:
         92:ea:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 10:44:48 2025 by rpki-client