Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
File:                     6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft (raw, json)
Hash identifier:          K4QI6nVthUke8KWk0jCiQu9OKiIBi7PjBjaK1RvC3fw=
Subject key identifier:   F8:8E:DA:90:D7:A8:16:A5:C0:F5:66:F9:BA:CB:D8:2B:32:8A:A1:E8
Authority key identifier: EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9
Certificate issuer:       /CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
Certificate serial:       0197B6A065DF4E6DB6A6A0135BCE38ED0699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 13:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:54 +0000
Files and hashes:         1: 6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl (hash: /cHkBZ68u9w++3btsbNs/kZBXtiI1bYF48ORx7Bqwzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:65:df:4e:6d:b6:a6:a0:13:5b:ce:38:ed:06:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1bc2ea625238bb4e2821a18bd5eeea3a68a7f9
        Validity
            Not Before: Jun 28 13:00:54 2025 GMT
            Not After : Jun 29 13:00:54 2025 GMT
        Subject: CN=f88eda90d7a816a5c0f566f9bacbd82b328aa1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:df:24:e1:2a:da:e4:50:ac:7c:21:37:4f:
                    07:d0:fd:4f:25:dc:ba:1e:6c:d2:16:9f:21:03:1d:
                    9e:94:8d:df:e3:db:11:5e:36:71:3a:8e:cb:ac:76:
                    b7:a8:0d:2b:bc:be:96:26:53:0a:f8:7d:7c:08:22:
                    b0:68:a9:c6:b5:34:c1:2f:93:fc:39:a4:f5:2d:d6:
                    31:c0:21:af:86:26:b7:72:a3:73:3f:20:65:a6:87:
                    eb:e0:de:ef:2d:04:af:e2:2b:96:70:5b:04:4d:32:
                    08:41:c7:65:d8:4c:78:9a:86:df:f1:5f:68:a5:27:
                    e8:7c:16:0f:9f:f8:89:2e:9b:57:9a:c7:59:01:14:
                    8a:71:65:4a:cb:e2:d3:a9:96:78:9d:3c:53:6b:64:
                    7c:32:24:ef:0a:84:76:51:93:54:fd:8f:43:80:8d:
                    42:23:1d:6e:12:ac:d6:72:ec:ca:d1:ca:f9:ad:e3:
                    9e:ee:cd:d5:c5:5d:85:9a:a0:c2:c2:c5:26:95:cc:
                    e2:eb:22:2d:c1:5e:e4:f5:58:2f:01:ef:88:e8:8f:
                    71:8a:5c:22:0e:eb:15:f3:14:fc:00:0f:36:78:2c:
                    d4:08:8d:8e:53:5f:9e:43:9d:c5:dd:06:54:78:b4:
                    34:c1:b2:54:35:91:29:14:1a:9c:95:1b:48:eb:13:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8E:DA:90:D7:A8:16:A5:C0:F5:66:F9:BA:CB:D8:2B:32:8A:A1:E8
            X509v3 Authority Key Identifier:
                keyid:EB:1B:C2:EA:62:52:38:BB:4E:28:21:A1:8B:D5:EE:EA:3A:68:A7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xvC6mJSOLtOKCGhi9Xu6jpop_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/13f53c-2aa2-47c6-88ca-58922272bb17/1/6xvC6mJSOLtOKCGhi9Xu6jpop_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:47:62:0b:df:32:a4:ed:0f:87:0c:de:db:ba:25:6c:11:6c:
         fe:74:8d:35:6d:8e:43:25:57:52:06:f6:de:da:47:09:7b:be:
         64:c3:f2:d8:0a:08:23:0c:62:fa:01:43:25:15:a4:c2:27:32:
         c7:ad:e4:e5:7e:8f:6b:c1:76:c8:72:41:dd:59:6e:c6:f1:e1:
         5d:eb:02:61:2c:96:86:e2:d0:06:6a:b7:ce:3d:22:6a:b4:2c:
         cd:bb:3c:02:48:f3:d2:e7:f2:db:0a:61:b0:83:dd:e5:fd:a4:
         c9:41:82:40:79:ac:2f:5e:8d:c3:f7:58:d5:da:03:01:8b:b3:
         40:cb:7c:03:aa:cf:77:c0:bc:ad:32:44:e4:2a:0a:9a:eb:de:
         61:53:a8:a0:95:da:1d:92:f2:9f:f0:07:9f:66:0c:1f:ba:14:
         39:95:16:8d:6b:3e:38:46:0a:91:62:ca:08:b4:81:b9:06:ac:
         c6:78:79:1e:77:56:c7:6d:55:b3:2a:5c:ce:6f:89:99:3b:f5:
         af:0a:63:c8:b4:1e:d4:a9:7b:9a:d8:ce:e1:76:29:59:b2:fd:
         c5:d8:97:ba:73:da:63:40:c4:3d:48:b6:2a:4d:bf:96:13:af:
         26:58:d8:c1:58:e9:57:be:75:8c:4a:bc:e5:4e:ca:99:f0:3b:
         ae:7f:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:15 2025 by rpki-client