Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
File:                     rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json)
Hash identifier:          efzu6CUOPic2rBTE5SlNTMIx3LhSAMWWukzy7r1ZJHM=
Subject key identifier:   99:A8:9F:75:BC:FA:CC:01:AA:F0:55:E7:9B:01:2E:74:6C:E7:2E:45
Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F
Certificate issuer:       /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
Certificate serial:       0197B82123BECE12BE40B378F58811338033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
Manifest number:          043F
Signing time:             Sat 28 Jun 2025 20:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:08 +0000
Files and hashes:         1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: 7txbgpYYx+9FukMsKTaDLnNg3gvzRxzQrXHZSIa0auQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:23:be:ce:12:be:40:b3:78:f5:88:11:33:80:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f
        Validity
            Not Before: Jun 28 20:01:08 2025 GMT
            Not After : Jun 29 20:01:08 2025 GMT
        Subject: CN=99a89f75bcfacc01aaf055e79b012e746ce72e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:8a:16:5e:02:73:6c:55:b5:8c:c4:35:b5:
                    f7:9a:26:94:31:30:56:25:3f:a4:3f:1a:c5:8d:66:
                    d3:a8:ef:cd:ca:d1:9c:2f:74:2d:44:04:92:be:77:
                    80:a0:d2:68:40:01:7f:b5:f0:24:34:29:20:cf:f3:
                    c8:9d:02:63:73:bc:5c:a5:98:7a:f4:83:be:02:04:
                    92:93:7c:e0:1b:ce:b5:d0:86:49:ea:5e:62:f2:6e:
                    ff:ec:ff:f6:70:88:68:22:b1:b6:d3:72:87:1f:17:
                    ec:d6:5a:3f:b9:9f:e0:00:dc:dc:49:87:57:ef:f8:
                    e9:af:4e:c6:f1:47:28:a9:bd:97:37:ea:ed:66:18:
                    6a:36:66:4c:3d:1a:9c:fa:84:fd:82:20:b8:76:f1:
                    60:38:14:f9:f6:38:84:bc:ea:f8:0f:b3:fb:1a:a2:
                    c5:7e:1a:15:e0:a1:ff:95:33:08:67:f1:62:fe:9f:
                    8b:71:a1:a9:09:be:78:28:95:23:03:6a:ad:ab:05:
                    35:d9:6b:51:a6:6d:17:e6:83:be:1b:2d:9e:ef:70:
                    02:1e:fa:14:bd:ad:6a:22:6a:11:bb:c3:e0:13:b4:
                    11:88:49:b7:de:29:ed:11:97:71:9e:27:32:32:ee:
                    b6:06:bb:43:1d:39:a6:69:a5:98:5a:2a:cc:26:00:
                    32:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A8:9F:75:BC:FA:CC:01:AA:F0:55:E7:9B:01:2E:74:6C:E7:2E:45
            X509v3 Authority Key Identifier:
                keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:73:2e:8b:f2:ae:79:90:e6:17:4d:16:81:13:eb:47:8f:13:
         be:6d:45:8a:f4:0f:fb:d6:f7:73:fa:08:24:b5:c4:4b:bf:f4:
         24:6e:96:68:f5:3f:2a:ea:d3:7b:9e:a7:b5:b0:27:fa:6e:5d:
         84:29:86:da:c4:c8:c2:d5:5f:e2:f9:95:f1:ba:8f:85:4d:a1:
         28:24:11:a5:53:ba:a4:6c:d8:69:ee:40:1f:3f:07:6d:83:bc:
         2a:b2:6f:0e:ae:c4:5e:56:a4:f2:93:80:4f:aa:f7:c6:ec:ae:
         4a:0c:64:15:fd:81:26:e8:05:e3:23:38:e9:fa:13:b4:f5:ae:
         b9:ae:83:41:fe:08:3b:11:28:80:57:6b:99:7f:38:9c:3a:21:
         51:cc:2b:f8:61:21:ca:35:63:fb:4f:e8:70:73:10:d1:82:b2:
         22:bd:3a:13:04:44:e9:72:21:15:fd:0d:89:0a:eb:39:40:5a:
         a3:1d:ce:d4:35:a3:c5:a3:10:24:58:46:b8:57:0c:0c:43:ee:
         ef:60:40:1a:cf:98:0c:7c:25:80:9f:5f:20:63:57:76:d8:94:
         72:7b:89:f1:fa:01:27:5f:ae:5a:01:8e:f9:e7:01:f3:56:fd:
         4e:12:2b:c4:62:de:fb:0d:9a:eb:d1:96:27:09:de:1b:6c:04:
         97:57:44:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client