Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
File:                     LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json)
Hash identifier:          ELIfOlBm2Rsl0s7Y24nPwl78TwvdGsoeK6SED9Dgs+I=
Subject key identifier:   93:4E:87:06:94:B9:8E:14:58:05:AA:14:DA:A3:FD:CE:08:1E:2B:B4
Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48
Certificate issuer:       /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
Certificate serial:       0197B70E9A259DB0455F50A051D03E299C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
Manifest number:          0628
Signing time:             Sat 28 Jun 2025 15:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:16 +0000
Files and hashes:         1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: joz8DY/wx3l1wfejf72M/VguAWiuSyM+QL6Z7Iym0pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:9a:25:9d:b0:45:5f:50:a0:51:d0:3e:29:9c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48
        Validity
            Not Before: Jun 28 15:01:16 2025 GMT
            Not After : Jun 29 15:01:16 2025 GMT
        Subject: CN=934e870694b98e145805aa14daa3fdce081e2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:33:c8:24:c2:ec:a6:b2:83:b5:7d:fb:95:
                    8c:a1:1e:5f:ee:fa:44:98:cb:27:15:ec:6e:2e:7a:
                    bc:f5:32:0f:00:d1:82:aa:a2:d8:17:9e:d5:93:8d:
                    8a:38:e9:4f:6e:6a:d1:0d:d5:34:e2:30:0e:d6:20:
                    6e:98:eb:df:4a:a8:e5:9b:a0:1b:39:f0:c1:5f:e1:
                    96:ab:87:f3:8c:0e:cc:2f:8b:a4:6d:12:c7:38:ac:
                    4c:32:4a:bc:b1:3b:c5:76:5d:eb:48:88:aa:42:56:
                    d0:d3:fc:27:86:b1:ca:96:c6:ee:a4:26:3f:d3:a3:
                    4d:06:4b:c8:fa:a5:5c:36:98:0b:7a:c5:d2:5b:6a:
                    9c:02:99:a6:1b:cf:d1:8f:1e:02:dc:a0:1d:62:50:
                    4f:8e:db:f6:52:9a:17:d8:09:df:77:20:52:74:10:
                    1f:45:f0:1e:1b:98:03:bc:c5:c5:cb:c5:97:68:ab:
                    c3:c0:2b:02:44:b5:c9:fd:0f:b8:63:5b:85:2b:b4:
                    9e:cd:f6:ec:41:8c:14:1d:ce:41:3c:d2:34:dc:97:
                    48:c0:9d:69:d4:33:87:d3:79:ef:da:15:c8:e0:fe:
                    f1:e0:3e:83:18:c3:5e:7d:1e:b9:e5:65:1e:f2:f7:
                    18:6b:2b:e5:91:ed:eb:21:85:dc:89:43:c2:03:cf:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:87:06:94:B9:8E:14:58:05:AA:14:DA:A3:FD:CE:08:1E:2B:B4
            X509v3 Authority Key Identifier:
                keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:2e:20:50:68:f8:88:bb:0b:54:8e:62:c6:fb:11:00:c5:
         79:84:9a:5e:62:92:84:03:82:0d:35:1a:32:84:2c:c6:8a:4f:
         37:d0:64:ec:26:af:cc:9e:ab:22:11:df:3b:1a:ee:07:47:a4:
         22:f7:b6:72:ce:6b:02:bc:a1:b6:2e:a9:2b:6c:59:e1:1d:22:
         ba:d3:d3:2d:2e:2c:e4:4b:31:36:85:12:90:1a:5c:3e:ea:a3:
         21:e6:83:a2:5c:b5:96:3e:92:50:08:44:c0:e6:18:4c:cd:a8:
         2e:2f:b1:18:7e:e1:31:1e:fd:89:0b:15:17:15:4d:b6:c2:ba:
         10:2a:36:80:b8:d5:49:e5:61:7d:06:8a:d3:a5:01:02:f1:3e:
         f6:6b:64:c4:f0:e8:37:86:b4:15:ff:52:79:da:4c:ed:02:c5:
         fe:dd:03:39:dd:37:37:eb:de:ba:4d:10:85:84:c4:9c:a5:53:
         54:1a:c0:05:0c:9e:00:94:19:ee:13:54:c3:bb:a5:d4:0c:74:
         42:76:f1:09:36:28:5f:d4:fc:d2:e6:ca:e1:f8:db:63:8d:a1:
         4d:86:f7:ea:b6:97:d0:92:58:02:6d:de:3a:e7:2a:f9:f3:79:
         ce:f9:8a:db:e3:7a:a6:52:1a:cc:7e:c1:f6:56:f5:dc:16:19:
         65:a9:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:21:49 2025 by rpki-client