Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File:                     _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier:          6XdDQ06HmHckiDI48bdXP1xEPd1ydrMVLfU4Az7WYCY=
Subject key identifier:   06:EF:34:4B:CE:27:2F:C7:92:AE:3E:73:3B:8F:FB:77:87:64:AF:D0
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer:       /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial:       0197B70EF13AA3C9B2B8511E6276C86D324E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number:          08F2
Signing time:             Sat 28 Jun 2025 15:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:39 +0000
Files and hashes:         1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: i2ktl8HQMJxv2QGkw82d75CJw5TGFdANQ9pGbz1WPWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:f1:3a:a3:c9:b2:b8:51:1e:62:76:c8:6d:32:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
        Validity
            Not Before: Jun 28 15:01:39 2025 GMT
            Not After : Jun 29 15:01:39 2025 GMT
        Subject: CN=06ef344bce272fc792ae3e733b8ffb778764afd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:0c:4e:a4:a4:20:6a:79:e3:0e:d3:a4:ba:
                    7f:d8:b5:27:66:08:eb:59:03:0e:7b:e7:a4:a5:c5:
                    74:d7:76:b3:cc:41:1f:3b:0c:6b:83:92:ca:43:7f:
                    61:4e:16:93:a4:6c:d8:f8:23:b9:54:31:7c:b0:9d:
                    13:ff:c7:fb:36:0f:65:06:bb:f8:48:6d:76:e0:e9:
                    51:7c:ce:5f:3a:0a:3b:a9:d9:3b:57:af:41:9b:c1:
                    d7:da:b1:c8:d6:72:0d:47:c6:d0:0e:6d:12:31:f2:
                    ff:41:df:0a:3d:80:ea:b6:30:ff:83:e7:77:18:2a:
                    f9:bc:64:ad:bb:cc:51:f0:33:95:00:04:20:78:57:
                    1a:43:7f:0b:8b:85:7e:89:ea:af:72:31:20:22:7e:
                    e2:68:ae:3c:15:03:11:c8:e6:6c:48:f2:07:b0:c1:
                    04:a5:27:11:32:19:7e:35:8e:5b:8b:15:55:2b:5d:
                    69:8d:9b:e5:a7:c2:e9:a7:67:13:6e:60:cc:f2:73:
                    2a:4c:66:30:3b:47:6c:8d:87:c6:0e:6e:02:5c:bd:
                    7b:93:4b:b3:50:8a:04:77:6c:ca:3b:4c:f9:b9:1e:
                    6b:06:9b:b3:29:70:40:ab:58:03:f4:f2:6e:de:21:
                    40:f8:5f:fc:c8:21:77:a1:b0:ec:4e:3e:f7:49:27:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:34:4B:CE:27:2F:C7:92:AE:3E:73:3B:8F:FB:77:87:64:AF:D0
            X509v3 Authority Key Identifier:
                keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:b8:6d:7b:10:9d:ed:43:8f:1e:79:53:af:bf:5e:8f:06:
         26:98:42:2b:bd:62:d2:b6:20:da:af:3e:23:3a:ec:ef:83:5b:
         aa:71:d6:c2:a6:b4:02:79:af:4e:8c:31:5b:3a:96:f2:cf:29:
         84:14:41:29:7e:2a:43:1d:d8:1d:6b:d6:ce:25:b3:3b:39:d2:
         04:de:7b:80:bc:b0:6f:4d:84:4e:6a:e0:d3:97:3e:65:79:86:
         ad:9b:4d:4e:c2:e5:8e:bc:c2:4d:80:67:5a:ff:c4:4b:46:11:
         d3:70:12:bc:44:fd:2f:dd:77:8d:1c:06:34:39:14:80:6f:76:
         e8:5d:2e:36:ca:e8:cf:c3:5f:a6:f2:39:52:8c:eb:75:71:ec:
         67:12:88:77:3b:cd:b2:2a:9a:03:7d:99:61:0a:c9:28:cd:86:
         0f:f2:36:38:8a:38:62:7d:3c:d2:47:b1:e5:76:dc:48:7c:c1:
         8a:49:ee:c5:18:b7:e6:ec:43:59:3d:c1:d7:59:82:1d:d7:ee:
         91:e4:0a:36:68:58:69:62:0f:d6:15:d7:96:e6:bf:16:23:05:
         78:2e:12:11:73:64:02:08:2a:a6:15:8c:8b:d9:d4:9c:48:b1:
         47:8b:8a:b9:58:76:ab:89:2b:81:9e:d2:4b:64:a6:0b:a2:e4:
         64:9f:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:27 2025 by rpki-client