Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File:                     DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier:          uonA7A6HUVUFfWX2WRgs+kNSazVY2Jqu1lC4BvntV1o=
Subject key identifier:   7F:82:2D:2C:26:B7:9B:F7:44:51:BF:CE:3B:B8:07:9C:5D:B5:5C:8C
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer:       /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial:       0197827C06A4F411D1A51E0DF8ABA43D1358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number:          062D
Signing time:             Wed 18 Jun 2025 10:00:55 +0000
Manifest this update:     Wed 18 Jun 2025 10:00:55 +0000
Manifest next update:     Thu 19 Jun 2025 10:00:55 +0000
Files and hashes:         1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: aDbA2w/Y6/jQd9vBgJpoZXMZSTbDxzl+w38lTDHesLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:06:a4:f4:11:d1:a5:1e:0d:f8:ab:a4:3d:13:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
        Validity
            Not Before: Jun 18 10:00:55 2025 GMT
            Not After : Jun 19 10:00:55 2025 GMT
        Subject: CN=7f822d2c26b79bf74451bfce3bb8079c5db55c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:b4:ee:84:31:ad:9f:b9:8c:af:9a:fa:dc:
                    83:b3:e0:ca:63:7f:2a:bf:dc:6b:8f:04:9b:a2:bf:
                    f5:dc:0e:50:18:0a:48:64:7b:ab:8b:4b:6b:ee:2a:
                    05:9b:fe:c6:38:38:31:8b:98:2a:d3:cd:29:8f:10:
                    7d:44:c5:7e:f7:02:42:17:06:a6:a7:ce:8f:9f:23:
                    b2:39:9a:35:fc:2c:47:75:59:5a:f2:4d:6c:04:c5:
                    73:f5:01:84:f1:69:16:48:93:6a:3a:02:04:aa:72:
                    cb:c8:dd:57:ab:e0:b8:d1:5f:7d:e7:1c:d8:bc:07:
                    54:f2:e2:ef:77:4f:19:34:71:c7:fc:3e:45:aa:3a:
                    05:b0:43:4b:3e:be:3a:11:d3:25:4a:ba:73:d2:67:
                    08:15:3e:1a:93:b7:78:2f:c2:cf:fb:f5:83:ea:80:
                    2e:5b:ec:cb:9b:d9:f3:05:06:ea:47:fd:11:14:72:
                    72:0a:65:f8:fc:5d:08:9b:a1:d2:1d:91:6b:72:28:
                    a2:5d:3b:14:f6:0d:2b:ef:33:bb:7b:55:b0:11:44:
                    7b:cc:de:d2:e7:22:76:8e:41:9b:b0:f7:73:9a:23:
                    b6:ae:93:20:cc:23:50:f3:9e:d4:82:9a:5d:c2:cd:
                    7d:27:fa:87:92:fc:66:ad:ca:2d:ce:7f:88:0a:21:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:82:2D:2C:26:B7:9B:F7:44:51:BF:CE:3B:B8:07:9C:5D:B5:5C:8C
            X509v3 Authority Key Identifier:
                keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:58:46:85:6b:7c:a9:b9:13:b8:47:9d:cc:89:c9:6a:ca:
         37:e9:f6:ea:83:54:73:ff:74:8c:ba:25:ae:d8:fc:80:42:50:
         97:53:cb:e3:18:e1:01:82:5c:23:31:8e:3c:c7:ca:16:b0:28:
         dc:60:1d:24:a7:50:19:7a:90:ba:65:b1:18:0e:f8:59:27:08:
         52:03:68:33:fc:9a:15:5c:98:5a:1a:72:10:04:fb:e4:6c:66:
         49:79:ef:60:63:1c:6f:35:c7:94:ce:82:96:d1:66:1f:1a:3c:
         d8:8c:18:49:cc:b4:fa:6b:86:18:f2:71:75:4e:ee:d4:cc:04:
         d7:14:c0:4f:aa:82:16:ea:a1:51:2c:aa:b1:02:04:04:41:5a:
         de:58:40:14:12:b0:13:ba:47:47:40:ff:26:f2:ab:31:72:55:
         be:93:b0:42:2f:d4:d4:2f:ee:d6:2d:5e:0e:84:fd:ac:61:91:
         68:21:e9:92:97:ab:e3:92:53:af:8c:e9:c2:3e:16:12:30:3c:
         9f:5f:c5:35:fc:c6:56:7f:17:c4:89:bd:50:44:b0:8a:d1:ea:
         b3:b8:6a:30:a6:5d:e0:bc:d3:cf:4e:20:ac:5e:d7:90:16:08:
         97:e1:c9:35:28:3c:ce:67:71:c4:d4:3b:c5:0c:5e:28:63:2c:
         33:65:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:21:47 2025 by rpki-client