Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
File:                     GVD3RTAkOmSxG7IywDjVdOf8TSA.mft (raw, json)
Hash identifier:          Ctpe990VkQAr2jj90rcP/XkAL12Sovi+9iA55d67p+4=
Subject key identifier:   DD:4A:51:1F:9B:20:02:52:95:33:31:34:D4:C0:68:F7:45:3B:09:00
Authority key identifier: 19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20
Certificate issuer:       /CN=1950f74530243a64b11bb232c038d574e7fc4d20
Certificate serial:       019769CF2FE42BE4534047A9C35EC4CC8274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
Manifest number:          0874
Signing time:             Fri 13 Jun 2025 15:01:15 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:15 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:15 +0000
Files and hashes:         1: GVD3RTAkOmSxG7IywDjVdOf8TSA.crl (hash: B3kZbdIEQ8VknFWp5hIJ48CvIokd4HRAD0MSEYExI3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:2f:e4:2b:e4:53:40:47:a9:c3:5e:c4:cc:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1950f74530243a64b11bb232c038d574e7fc4d20
        Validity
            Not Before: Jun 13 15:01:15 2025 GMT
            Not After : Jun 14 15:01:15 2025 GMT
        Subject: CN=dd4a511f9b20025295333134d4c068f7453b0900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:40:80:b3:20:4b:08:f0:0e:7b:35:e2:52:14:
                    92:d5:ac:c4:6a:60:e0:d0:90:cb:63:4c:9e:8b:dc:
                    f2:93:6e:e4:d9:4b:b3:b5:5b:f6:95:14:9c:c1:31:
                    61:57:c8:9d:43:b8:f1:75:25:10:a7:fb:d7:61:11:
                    d2:05:b4:b1:cc:37:a9:26:35:f0:b8:53:49:7b:ca:
                    02:f9:3c:b3:68:fa:7c:e1:6a:7e:48:bc:b9:2f:69:
                    fb:08:cf:64:b1:ca:a3:73:a0:74:0c:f8:a5:64:d4:
                    ae:ba:25:10:13:c5:d4:62:65:3f:0a:18:58:fe:3a:
                    5c:a9:e7:c5:59:ef:d0:50:57:aa:e3:a7:19:62:07:
                    65:4a:d2:e1:f6:e9:cb:2a:80:96:63:30:a0:ae:c9:
                    68:14:75:ae:32:f4:2e:f7:bb:43:86:d9:fa:df:2f:
                    b7:1f:7f:a1:a5:5a:59:1b:c5:d3:ee:44:c1:7b:50:
                    bc:02:31:96:11:93:23:28:3c:7f:f8:21:9f:99:e6:
                    50:1d:7e:43:31:76:7c:2a:28:13:39:11:d5:83:74:
                    9f:a6:16:b5:7b:cb:de:1d:4c:f5:e7:11:98:ac:30:
                    18:2c:2f:af:ab:c5:7d:55:74:50:c4:bb:33:f5:a6:
                    ed:77:0a:f5:14:b5:db:04:0b:26:2d:b4:5f:d4:69:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4A:51:1F:9B:20:02:52:95:33:31:34:D4:C0:68:F7:45:3B:09:00
            X509v3 Authority Key Identifier:
                keyid:19:50:F7:45:30:24:3A:64:B1:1B:B2:32:C0:38:D5:74:E7:FC:4D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVD3RTAkOmSxG7IywDjVdOf8TSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24635-209c-4e6e-b877-e685a73bd7d9/1/GVD3RTAkOmSxG7IywDjVdOf8TSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:bb:9d:28:b4:fa:83:fa:ba:c6:9e:e6:a8:20:19:d5:2b:
         b2:c5:bc:d8:34:36:f0:b8:f8:ae:3c:9a:83:24:4d:11:f5:6c:
         81:b6:aa:b2:9d:69:97:84:19:d7:66:a1:23:66:d4:8f:a6:85:
         8f:5b:4f:5f:4f:ea:d2:c0:fc:67:40:28:6a:4c:6e:2c:08:3c:
         75:34:93:f9:ad:7c:f9:a6:66:35:c1:42:8c:5d:f2:66:c7:2e:
         a2:8d:33:63:fd:d0:c1:cf:40:eb:6f:2e:ef:82:5f:68:75:18:
         bc:c7:b8:27:84:c1:dd:5f:81:e1:a4:02:1d:c2:ec:a2:80:f8:
         3e:b0:be:4e:b7:c5:12:75:73:d8:c0:2a:79:c3:02:5e:35:bc:
         30:17:db:c8:f4:53:de:6d:70:eb:e2:4a:e8:03:13:76:de:d8:
         2e:b8:40:ae:b6:d0:c5:c0:ae:7a:10:8d:89:24:44:b3:17:d4:
         85:22:81:b7:37:97:a0:87:19:a7:cd:05:dd:9f:d2:9b:fa:78:
         6a:f5:ae:60:56:6b:e8:95:8b:de:ac:6f:38:01:7d:3a:6d:cc:
         0b:f7:9f:ed:82:56:63:25:1d:db:ac:24:d9:f8:20:6e:1b:53:
         44:2d:9f:f2:73:fb:29:88:00:d7:25:23:40:0b:4c:a0:a3:a4:
         ca:78:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:42 2025 by rpki-client