Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File:                     k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier:          IIp/sHaXO3OZFeEHfr0UiDcwAhtjsXZhkC2LXsifhXs=
Subject key identifier:   C1:5C:B5:8C:C4:31:A2:6F:0B:26:9A:1A:01:4D:CE:FF:93:84:30:8A
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer:       /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial:       0197C4266335FEA870692E10452596D039C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number:          15BA
Signing time:             Tue 01 Jul 2025 04:02:19 +0000
Manifest this update:     Tue 01 Jul 2025 04:02:19 +0000
Manifest next update:     Wed 02 Jul 2025 04:02:19 +0000
Files and hashes:         1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: 0TASXYc0E5OBJWyYz3Gv2wLnKMYUcTBfwKSutuC8ZFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:26:63:35:fe:a8:70:69:2e:10:45:25:96:d0:39:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
        Validity
            Not Before: Jul  1 04:02:19 2025 GMT
            Not After : Jul  2 04:02:19 2025 GMT
        Subject: CN=c15cb58cc431a26f0b269a1a014dceff9384308a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:8a:d2:89:28:10:08:cb:0c:9a:5c:f0:68:
                    27:50:0e:15:39:50:1c:60:e9:6f:6a:b5:ea:f2:a2:
                    99:68:c7:ae:78:68:b7:52:39:2a:fe:ab:61:d5:3e:
                    5e:13:9a:ca:2c:7b:a6:e3:8e:d1:91:ae:62:36:5c:
                    e3:14:a0:a4:ab:da:e0:20:13:d8:c8:2a:7e:ac:e8:
                    2e:5c:46:41:63:9a:a0:6a:79:0f:75:45:f3:4a:22:
                    d7:8f:d2:2e:ca:01:68:13:f2:04:81:04:e5:e9:67:
                    0f:29:48:96:bf:ab:b9:31:63:1d:d8:c6:20:73:37:
                    d5:8c:2f:71:de:9a:0c:34:ae:e8:25:ea:32:bd:f0:
                    89:3f:ab:49:20:b3:25:be:97:d2:ce:d2:37:b5:3c:
                    76:9e:f4:29:dd:e9:25:a4:af:9d:27:a2:51:a6:ec:
                    e5:f5:e2:48:9a:e8:f8:d5:f0:88:c9:79:2d:b0:c9:
                    c0:d0:5c:42:6d:6c:07:e8:c7:01:ad:99:f5:43:c0:
                    c5:ad:7f:d5:b2:47:99:5f:0a:22:f0:ea:0b:34:6d:
                    1f:a2:ca:75:ae:a2:9f:65:dd:b9:8f:ad:b2:0a:1e:
                    a3:e9:86:b9:51:53:98:bb:26:1f:21:ce:36:f8:3b:
                    62:72:37:7a:be:37:c0:1e:1a:f7:34:85:e2:30:da:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:B5:8C:C4:31:A2:6F:0B:26:9A:1A:01:4D:CE:FF:93:84:30:8A
            X509v3 Authority Key Identifier:
                keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:c3:94:81:8f:c5:fe:52:26:e1:a4:0d:ad:7c:42:c0:6d:
         bf:b4:09:d5:60:be:66:f4:66:73:55:fa:a3:c6:c1:2f:1e:ca:
         7e:7a:88:66:92:d6:9f:e6:05:0a:1a:6b:42:a7:c2:3d:10:79:
         a7:f3:30:16:9f:28:cd:12:5b:3a:0f:3f:99:89:44:03:2f:c7:
         8e:88:ab:59:8c:1c:fb:01:15:c8:8c:8c:16:2f:f1:22:4d:67:
         11:4c:2f:bc:59:07:52:29:83:eb:a7:0f:bf:f4:e8:9c:cb:50:
         c2:63:f1:09:3d:8d:88:93:a8:f5:a7:5f:0f:f5:94:31:b0:39:
         a5:f6:9c:c1:aa:b7:40:a2:e6:bc:da:2e:45:00:1b:e9:00:02:
         32:ea:a2:05:8b:83:5d:48:c3:a1:33:cc:fe:b0:ef:01:1d:f8:
         67:53:e5:cf:0f:25:c1:0c:07:9b:ad:3b:ff:bd:2b:82:3d:0d:
         5e:6c:bd:58:62:dd:7e:e0:a0:cc:0b:40:8d:35:04:6e:e3:50:
         e0:19:0a:f5:dc:74:94:72:f7:2d:4b:d6:54:bd:a7:5e:ce:4e:
         03:fb:13:f5:da:b8:a9:e6:f8:1f:c4:3c:ca:ec:67:94:a0:56:
         53:b1:8f:27:cc:5b:a2:48:86:06:1e:04:36:38:cd:39:30:4a:
         a6:02:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:16:39 2025 by rpki-client