Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          befmY3SGkuL8gdR0qMRezgTPFFmJ9NMcN/5aBUJhC0s=
Subject key identifier:   B0:EB:B5:02:5B:46:0A:D1:07:A7:31:33:AE:F0:F7:E7:2A:92:42:68
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       0196CD6180875F4FA3EC81D213FA6F209B74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          09BB
Signing time:             Wed 14 May 2025 06:00:41 +0000
Manifest this update:     Wed 14 May 2025 06:00:41 +0000
Manifest next update:     Thu 15 May 2025 06:00:41 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: PLAtDiYIYXtG+5J4vL5az75C5M7zWhrgr+s/q1ebwD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:61:80:87:5f:4f:a3:ec:81:d2:13:fa:6f:20:9b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: May 14 06:00:41 2025 GMT
            Not After : May 15 06:00:41 2025 GMT
        Subject: CN=b0ebb5025b460ad107a73133aef0f7e72a924268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1c:50:b3:50:8f:4d:1e:d2:1a:82:f7:2a:6a:
                    82:75:9c:45:66:dd:72:ba:01:42:d7:20:2a:a0:e7:
                    a6:d7:e9:83:ba:f4:69:f8:6e:94:5b:12:ac:1e:f3:
                    13:73:bb:dd:73:6b:a3:9a:05:ee:ad:ee:d9:27:b9:
                    f6:57:b6:e7:ea:a8:a0:02:22:d3:e0:3f:29:91:ef:
                    33:ac:26:f8:15:ba:8d:99:56:d8:af:43:bc:ea:56:
                    e0:60:65:40:57:43:3f:ea:59:66:4f:88:87:7d:ef:
                    a0:05:93:7d:38:2e:75:44:76:0f:79:87:3c:14:c8:
                    b6:a8:36:48:34:41:6f:45:88:ce:88:fc:c5:34:91:
                    63:bc:de:fb:56:28:5f:59:a5:14:9f:f5:37:41:35:
                    22:36:57:47:5f:d8:ee:71:f6:74:0b:de:a5:a3:17:
                    78:7d:95:de:c2:17:40:89:28:29:bf:ab:d0:b4:50:
                    11:e3:c3:46:64:bc:ed:93:b5:c8:28:9a:69:d8:5b:
                    69:23:9b:3a:d3:2b:56:1b:fd:d0:60:b3:38:9e:9b:
                    c9:30:73:c9:15:aa:f7:a7:f2:8a:bd:70:5a:df:e5:
                    b3:f8:f8:1a:2f:62:a8:1c:07:9d:18:be:2e:f6:e1:
                    a7:03:8d:3b:73:2b:81:79:1f:00:0c:34:e8:cb:27:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:B5:02:5B:46:0A:D1:07:A7:31:33:AE:F0:F7:E7:2A:92:42:68
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a4:19:9b:27:3d:f6:6f:3c:6f:42:2a:e3:09:5b:2b:86:e2:
         7f:44:cd:67:06:b9:84:92:4c:69:b1:5a:62:50:33:ad:35:70:
         82:27:cd:5b:bc:6f:93:40:57:92:c9:d9:cf:c6:70:4d:b3:8f:
         7e:73:b4:d8:d3:60:a4:74:b2:ce:7c:1b:67:ba:c4:8d:60:e2:
         fb:48:51:bd:ea:6d:25:cb:19:0b:7f:31:e5:1d:ea:89:07:5a:
         9a:ac:25:fd:a0:40:2c:25:f1:a3:c5:18:a2:74:ca:35:4b:ec:
         d0:d3:67:e9:64:ea:11:85:90:41:02:e3:5e:c0:a7:5f:98:0f:
         9f:0b:d4:ad:b7:81:59:de:e5:dc:0b:ae:e0:8f:fe:ee:89:88:
         cd:4d:9f:a5:83:9d:11:bc:d0:33:3d:d4:e5:e9:6e:fb:68:4e:
         15:ab:e7:6c:43:20:0b:d4:ca:bb:10:fb:17:3b:1d:0c:e8:72:
         3e:0a:f3:ee:47:a7:d2:d4:a6:89:33:3a:65:05:29:86:01:27:
         96:37:fc:8a:a2:4e:d7:b9:6d:ea:e6:c7:9b:f1:e9:15:4e:ca:
         71:04:30:25:78:fe:b3:34:06:50:6d:22:45:38:ec:68:95:fd:
         b6:3e:90:51:6e:1a:f6:07:19:1f:b0:89:66:a7:53:4e:cf:a5:
         19:2e:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:25:04 2025 by rpki-client