Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          pX4j6TOoM7wwE47ljWkLSGomXvivUvxGlk0/L5QTvrw=
Subject key identifier:   72:C7:06:17:15:71:19:15:C9:DF:01:0F:9E:19:0F:21:98:21:C2:CE
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       01974AE906EF73B8B977F9BFDE12561036DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0B57
Signing time:             Sat 07 Jun 2025 15:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:14 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: 5YkgxnZoKM0RUDC1uae8dX56tKTgH9Sprl0p7y3P2L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e9:06:ef:73:b8:b9:77:f9:bf:de:12:56:10:36:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: Jun  7 15:01:14 2025 GMT
            Not After : Jun  8 15:01:14 2025 GMT
        Subject: CN=72c7061715711915c9df010f9e190f219821c2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:f0:93:33:54:68:de:3e:b4:57:6f:03:7d:
                    c7:6b:2c:48:74:d9:2f:5a:dc:15:0f:77:69:4a:d4:
                    0b:0b:1e:59:18:1c:c9:e7:78:37:21:6b:36:8a:db:
                    75:f7:fa:c1:f2:50:28:0d:f9:52:a8:18:b1:5c:78:
                    63:28:ef:f6:8e:db:f0:a1:ba:63:fc:ff:10:fe:a9:
                    0e:35:1d:25:89:78:6f:80:df:de:f6:78:5f:fb:87:
                    10:9d:43:b0:9a:12:7b:d5:42:0d:b7:84:df:db:f3:
                    b0:1d:36:e5:61:93:b8:47:68:ec:90:a6:83:0c:2f:
                    d0:df:f0:b0:12:41:78:40:1b:41:26:89:7a:25:1e:
                    5f:31:b4:19:ca:8f:17:43:4e:50:2f:db:24:8a:1b:
                    74:9b:87:ce:0d:2b:73:b6:0a:9d:05:a5:41:de:68:
                    fb:1c:d2:0b:66:ba:7e:7e:e3:ee:9f:79:13:8c:6c:
                    3b:29:e3:6f:1b:44:8d:59:f9:ae:79:d8:78:42:00:
                    7c:94:f2:ec:9c:b4:54:ca:11:dc:02:b6:1a:3e:52:
                    15:ae:e8:fd:3f:06:ab:b1:a1:01:29:f4:1c:8a:0a:
                    83:6d:34:34:c3:83:f0:0a:f8:97:48:28:81:e1:c6:
                    a1:7f:b0:be:36:58:06:78:f6:56:c1:1f:1b:5e:4d:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:06:17:15:71:19:15:C9:DF:01:0F:9E:19:0F:21:98:21:C2:CE
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:72:d1:99:b4:b1:4b:b8:b3:44:90:51:76:51:b0:36:6f:cf:
         d4:37:bb:21:79:3c:23:f0:d9:e5:1a:a3:9a:6e:59:c1:1e:9e:
         34:d7:58:ed:cb:e8:ad:4c:3e:d0:c5:56:76:40:56:80:64:04:
         c3:e0:85:7f:7f:6b:29:7e:a3:62:84:9a:26:b6:df:78:31:e5:
         e4:9b:f6:ca:84:39:44:07:80:76:11:8b:b1:a1:47:12:aa:48:
         d3:16:70:ca:a9:a3:08:44:a8:3b:40:97:75:58:ad:92:62:c6:
         aa:86:b3:b0:ae:0d:ce:9b:94:99:d1:09:61:3b:bf:12:10:dc:
         d5:fd:8c:f0:69:f0:a9:01:c1:a3:cc:64:58:70:26:ad:54:16:
         e4:9e:5c:fc:cd:13:05:e6:ea:4f:30:6b:a2:2c:88:c3:00:6f:
         48:b1:9a:4f:aa:99:65:2a:f4:da:fb:af:03:5f:0a:b0:a8:d3:
         cf:38:e4:00:b1:db:52:21:a7:1e:e4:ee:82:49:34:fb:5f:a4:
         f2:f0:0f:e9:d5:70:ad:db:86:a8:88:d3:e6:78:e9:98:02:85:
         cb:6a:0e:f2:a1:83:4e:8d:73:9c:cf:a3:e7:05:eb:9f:7b:24:
         fc:4c:d2:4e:4e:3f:4f:15:b0:47:c6:2f:5d:1e:07:e1:59:37:
         d6:04:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:58 2025 by rpki-client