Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File:                     xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier:          XMKBkgRqVHZ10V34vAXepi8MyIvyL7HZECCHqTCoeVo=
Subject key identifier:   CA:74:00:E8:56:13:92:0D:29:A8:7E:D4:20:E3:E8:3E:31:33:0B:4E
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer:       /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial:       0197B74589F5C51C83654762FEA20F876693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number:          0C95
Signing time:             Sat 28 Jun 2025 16:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:17 +0000
Files and hashes:         1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: EqqTFtXmmf7x0I/VtcOSmmsBjS/X7FFVasCrTNBHmD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:89:f5:c5:1c:83:65:47:62:fe:a2:0f:87:66:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
        Validity
            Not Before: Jun 28 16:01:17 2025 GMT
            Not After : Jun 29 16:01:17 2025 GMT
        Subject: CN=ca7400e85613920d29a87ed420e3e83e31330b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:25:bc:46:48:7a:fd:e6:48:a0:f6:a3:5c:
                    65:b4:7d:35:e3:39:b9:8d:36:08:fb:c7:38:82:f4:
                    3d:4b:ec:64:0f:96:50:ff:9f:49:94:86:2b:ff:22:
                    02:00:66:32:b2:8d:b7:b0:6b:fa:99:60:38:12:c9:
                    c3:fc:9b:4d:7e:1b:de:96:e3:13:eb:e7:19:4e:2e:
                    37:89:5e:a3:70:44:08:73:80:2b:e6:46:77:c1:9e:
                    d8:fd:5a:33:06:4a:9c:e7:1d:bb:60:29:3b:8b:6b:
                    f4:29:be:14:5e:2d:ba:d3:63:cf:8d:70:65:0f:46:
                    6d:82:f6:3c:95:b2:02:9e:e1:e7:50:a0:b1:f6:20:
                    d4:04:cd:78:51:b3:81:6e:cd:55:7c:4e:d5:26:57:
                    30:87:a8:8a:a6:1e:8e:d2:a6:83:ae:ff:b8:fb:e2:
                    08:55:3f:0d:dc:c0:76:8b:38:7c:44:c0:cc:d5:59:
                    b4:20:d5:15:7b:20:1d:c7:9b:7b:74:00:bd:96:81:
                    15:4d:b7:46:8a:92:3c:d1:ed:0e:4a:ce:f0:13:7f:
                    f2:2e:b5:f9:b7:14:d1:2e:9f:d7:d9:f9:ba:2f:a0:
                    ab:b5:32:bc:63:6d:d4:83:16:0c:51:b7:7d:8f:bf:
                    d9:32:25:9b:47:b8:e6:e0:b1:21:59:1b:24:0e:f6:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:74:00:E8:56:13:92:0D:29:A8:7E:D4:20:E3:E8:3E:31:33:0B:4E
            X509v3 Authority Key Identifier:
                keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:53:d8:eb:0e:61:7f:1f:ef:26:7d:6c:ee:40:50:df:73:
         60:7c:2f:73:e2:99:60:e4:dd:e1:18:6a:bc:bc:83:99:e3:5d:
         fa:b2:a2:21:9d:8c:8a:18:9f:f0:61:14:b8:16:32:98:a4:94:
         0c:bf:18:f9:68:92:27:51:4b:44:d3:d4:ea:67:2b:cf:0f:9f:
         a0:6f:f9:0d:89:23:a4:63:61:40:8b:06:e6:c6:96:e1:1a:b7:
         99:9e:cc:c7:e7:b7:b8:bb:06:8f:83:27:0f:34:63:bb:c6:98:
         a6:50:ad:8c:cc:8e:f8:a8:47:35:cf:92:55:6c:f8:66:b1:fc:
         b8:5e:2e:89:10:ae:1d:8d:b8:42:ae:e3:21:b1:13:3f:8e:30:
         0c:b9:fa:71:b0:47:5f:7a:62:67:a4:be:26:8b:b4:6f:66:bf:
         f0:a6:f0:24:51:2d:4c:be:de:99:2e:fc:60:0e:4e:44:46:e0:
         f4:92:85:9f:e8:df:75:ac:61:12:df:4d:9d:15:54:84:f6:70:
         77:8d:b0:d2:4c:d8:70:3f:d2:7f:c3:7e:bd:b0:48:3d:91:8b:
         6c:c9:07:0c:d8:9b:ed:60:ca:23:7e:7a:63:97:50:4d:b2:06:
         46:75:d3:41:d4:3e:31:0e:58:73:50:ae:4d:73:4c:ff:b1:a1:
         05:68:e7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:07 2025 by rpki-client