Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File:                     0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier:          LIbeR9snfzZwYrcRhVjBrltuJNKHUvi+H4ch9R3ouMY=
Subject key identifier:   9D:C3:74:82:E9:85:67:BA:7B:83:3F:25:F7:77:12:AC:3E:6A:9D:BF
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer:       /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial:       01976D3E01AEE42A776AD5D5A4EE384D9DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number:          04F9
Signing time:             Sat 14 Jun 2025 07:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:09 +0000
Files and hashes:         1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: 2atU2sXntybg13hVdU4q+n03DoRLc0ZbBB6CQPwk6og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:01:ae:e4:2a:77:6a:d5:d5:a4:ee:38:4d:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
        Validity
            Not Before: Jun 14 07:01:09 2025 GMT
            Not After : Jun 15 07:01:09 2025 GMT
        Subject: CN=9dc37482e98567ba7b833f25f77712ac3e6a9dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:c1:00:d7:66:36:54:92:12:74:0a:16:52:
                    6d:3a:ca:05:7a:3a:26:c0:20:eb:b8:3d:81:ce:ff:
                    69:c6:c1:cc:b1:08:45:e2:87:fe:ff:68:8c:bf:23:
                    8b:d4:b8:3c:9c:41:57:09:c7:38:c8:58:5d:cd:34:
                    d2:cd:10:ff:71:50:ef:15:87:79:f9:c3:12:ca:21:
                    6a:db:0a:ac:04:51:d0:d6:c9:99:0e:6a:3a:f9:c6:
                    c2:f7:7d:36:3b:be:70:af:f6:35:b0:43:99:79:87:
                    f5:4e:6e:f8:59:a6:b9:48:0b:3e:97:70:63:56:55:
                    6d:8f:a2:1d:5b:51:7f:86:12:c9:f2:97:5c:0f:3a:
                    99:62:ef:f5:14:d1:c2:c3:d0:64:92:8e:7f:a1:c7:
                    37:62:1d:12:fb:9b:c1:97:35:c9:33:96:52:03:7d:
                    50:94:b9:40:ac:04:c2:e1:20:7f:a8:0e:d4:95:35:
                    2e:12:9e:a1:87:a5:8c:05:98:9a:56:00:b4:7d:03:
                    d0:fe:ff:e1:9a:11:20:dd:4b:ae:1c:be:04:f1:a7:
                    d3:5b:ae:b6:9f:73:7e:98:d6:8d:0c:58:70:4b:94:
                    a3:73:6d:f8:12:3a:62:fd:4c:03:d2:04:b1:fc:fa:
                    3d:39:ca:52:94:47:b8:2f:77:da:7e:6b:a3:5a:86:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:74:82:E9:85:67:BA:7B:83:3F:25:F7:77:12:AC:3E:6A:9D:BF
            X509v3 Authority Key Identifier:
                keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:42:ce:f1:71:ca:ba:2a:fa:f0:8e:51:34:4a:2f:d9:9c:
         29:3d:7d:f0:0b:9b:47:13:fc:c7:73:bf:bd:f0:be:6f:69:61:
         96:e4:37:dd:81:13:08:9c:27:0f:eb:f6:23:dc:f9:c0:e8:00:
         9f:d6:eb:61:38:84:e0:8f:3e:79:63:8b:4f:75:21:66:36:9f:
         53:6a:51:27:e9:aa:57:a3:cf:48:71:86:2c:14:16:bf:ba:d3:
         5c:4c:78:b0:38:19:db:09:69:18:4a:16:4c:ff:86:e0:16:24:
         c0:e1:34:5c:ba:81:06:64:f6:a9:4a:86:90:18:d8:d6:43:7b:
         84:b5:51:78:60:2e:33:0a:fe:f3:d1:8a:45:20:35:21:f7:5e:
         3c:a9:3d:23:dc:e8:8c:10:0c:a9:23:26:bc:67:c7:6d:d3:ee:
         b0:01:ef:8a:68:89:42:1b:5f:53:4c:a4:3d:99:89:08:f2:36:
         cc:b4:e3:f7:17:8c:18:d1:a8:4d:cb:00:d4:74:32:48:49:8e:
         a0:b2:5f:94:77:f5:6c:22:a5:09:70:a5:fe:73:46:19:70:c8:
         f7:df:2e:00:e7:2a:7d:fc:45:7f:38:81:47:76:35:c7:c3:18:
         18:1d:c0:bd:51:3d:4f:6b:5d:01:34:07:55:16:a4:f7:14:0e:
         01:20:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:04:29 2025 by rpki-client