Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          mts3nwpyjwHgPCMPWHKHWo2ALVAVUMK3r3/ZY3fwm88=
Subject key identifier:   73:B5:23:75:F6:89:05:D5:85:8B:75:B1:9F:FB:F0:96:C2:7B:7D:EC
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01977AC27110445786F4CC221C8F4913EF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0288
Signing time:             Mon 16 Jun 2025 22:00:52 +0000
Manifest this update:     Mon 16 Jun 2025 22:00:52 +0000
Manifest next update:     Tue 17 Jun 2025 22:00:52 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: TMNH5s/rtl7reOCKp8i+QSLRxYMo6cwvSKHOspk8ZqA=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:c2:71:10:44:57:86:f4:cc:22:1c:8f:49:13:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Jun 16 22:00:52 2025 GMT
            Not After : Jun 17 22:00:52 2025 GMT
        Subject: CN=73b52375f68905d5858b75b19ffbf096c27b7dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:f0:89:e3:38:c9:84:2f:16:b2:36:c5:57:
                    52:c6:dc:b6:10:bf:19:6f:92:f8:68:77:54:9d:60:
                    71:ff:33:69:77:78:b6:45:8e:6e:7f:22:96:97:ec:
                    83:ce:cb:42:06:25:29:80:55:07:bd:49:3f:50:bb:
                    6d:df:c9:25:6c:12:f1:c5:63:0b:86:36:4e:6c:51:
                    25:a5:1e:6e:c4:4a:67:e0:72:9f:2e:0e:40:32:98:
                    c4:65:04:2f:33:54:ca:19:1e:4c:9f:8c:b0:43:67:
                    0a:02:a7:57:89:71:68:b6:40:c4:dd:e1:3d:3e:d8:
                    c8:96:26:01:05:dc:15:10:6f:06:b8:2a:80:aa:43:
                    ff:fb:e0:b6:fa:84:98:d1:80:ea:f6:ba:19:e0:36:
                    ef:10:37:42:cf:21:07:44:87:d6:54:19:b9:65:2a:
                    25:78:28:d4:60:f8:c8:b8:72:ea:b8:07:08:28:4a:
                    84:97:91:5b:da:a0:9c:98:d1:2e:e8:8a:06:16:4a:
                    7b:6d:2b:3b:41:72:4a:fc:16:4b:6a:93:54:04:78:
                    22:e6:87:68:c2:af:c0:23:aa:83:a8:b9:0b:0e:71:
                    c9:5b:95:c2:f4:66:99:f5:45:5a:56:f8:45:ca:2c:
                    db:a1:fb:5c:82:49:f7:1e:0f:70:d6:6d:cf:1f:b9:
                    2c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B5:23:75:F6:89:05:D5:85:8B:75:B1:9F:FB:F0:96:C2:7B:7D:EC
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9c:b7:6a:91:fa:d8:64:15:7b:c8:ae:fa:94:4e:35:2b:7f:
         13:80:ec:19:01:cc:33:23:fb:f0:60:b8:51:fb:f9:8e:4b:4f:
         03:60:46:a0:b8:1f:ee:2b:4f:10:5c:c7:53:50:11:df:bf:ad:
         a0:12:84:16:1c:a9:ae:97:f2:17:09:20:96:39:45:a7:24:42:
         29:96:90:f6:66:6a:62:26:c1:e9:d9:bf:f7:e1:57:94:5c:46:
         08:b5:a8:7a:5b:7a:f1:04:c8:3c:82:32:35:f9:3e:c7:c0:80:
         e9:b6:54:7e:35:a6:77:9b:4f:7c:51:5d:c8:3a:33:00:79:e3:
         9e:de:9a:9b:66:c7:19:e8:e6:1d:14:cb:82:f1:fd:ab:02:b2:
         b1:ad:85:d6:5f:a2:4b:5b:35:90:f5:75:ae:2b:05:3e:52:45:
         bd:58:6c:3f:12:9f:6c:f5:ce:20:ef:70:90:0b:9c:8d:13:ce:
         43:96:26:86:c7:42:1e:87:70:8c:24:43:53:35:b7:fc:60:a5:
         f3:83:d1:63:d1:93:c8:03:74:34:d9:8c:49:a2:21:d4:ef:d1:
         5f:bd:dc:74:54:39:cc:5e:e0:ca:94:50:4d:57:76:c6:1e:cd:
         54:e1:2e:9c:a5:62:31:88:3c:a3:24:ec:e5:89:42:88:87:2d:
         f5:a6:23:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:11:19 2025 by rpki-client