Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          mkAU0sd5lEkcHFARMeyfI20YvAPIcSmRgRLNk9eEMDI=
Subject key identifier:   F6:91:66:7F:02:4B:31:50:BA:B7:76:E1:C8:10:49:CD:6F:FB:83:5B
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       01976D746538D1AE6FC0EA1FEAB89C2AA1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          13C6
Signing time:             Sat 14 Jun 2025 08:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:33 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: NB+DX0OCt6XRVOdzmhnBwRFf335QOzmlRONxB7zPT4A=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:65:38:d1:ae:6f:c0:ea:1f:ea:b8:9c:2a:a1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Jun 14 08:00:33 2025 GMT
            Not After : Jun 15 08:00:33 2025 GMT
        Subject: CN=f691667f024b3150bab776e1c81049cd6ffb835b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:5d:5e:05:fb:b3:3f:50:ed:44:e4:c1:47:
                    8a:2d:56:bb:fc:51:7a:46:c2:34:5d:67:2b:e4:03:
                    b9:2c:89:d0:33:e7:d6:ec:66:15:17:1e:fd:c6:fb:
                    af:88:13:1f:29:6c:4e:b6:ab:b4:82:2e:77:20:da:
                    1e:d1:1a:01:ae:fc:5f:52:79:fc:43:cd:4f:a9:26:
                    22:3f:20:37:88:dc:f3:95:96:7d:60:41:69:a7:f9:
                    a7:ef:a6:7d:8f:d1:11:e6:f0:27:77:82:2b:09:c1:
                    04:1a:29:13:99:1e:3e:21:fa:04:1a:bd:4e:2b:ed:
                    cc:1a:bd:5c:bd:77:20:07:dc:42:44:0a:e7:4f:d4:
                    0a:50:65:46:2a:42:19:54:ab:5d:bc:6a:a8:76:fd:
                    ff:f9:f9:57:5e:3b:7d:b4:c2:bc:b2:41:28:d8:23:
                    ed:d7:2e:a1:02:5e:22:94:19:3b:d0:9b:15:8b:47:
                    29:c2:23:69:1c:cd:bd:a8:6c:14:b5:64:d3:b2:c5:
                    a2:3a:91:a3:28:c6:d9:c0:60:8c:c5:d6:18:ba:03:
                    b9:c8:d3:93:8e:0d:e7:ca:1f:b6:6b:cc:95:98:e1:
                    2e:54:b4:ee:a5:e1:9d:89:c8:ea:80:a6:b9:c1:47:
                    86:83:ed:c1:c7:7c:e8:f6:50:b9:4b:be:23:27:17:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:66:7F:02:4B:31:50:BA:B7:76:E1:C8:10:49:CD:6F:FB:83:5B
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:f7:06:d5:ef:eb:0f:b1:28:d1:5f:2a:78:ce:61:ca:f1:
         58:73:74:cd:a0:00:83:83:d8:4f:bb:0f:88:75:d9:cf:e0:8f:
         84:38:dd:44:a1:9f:63:95:24:72:c3:bf:59:25:74:95:cc:e8:
         d0:7d:1c:77:22:98:f1:48:98:3e:99:4a:5e:44:f1:2c:0d:7f:
         d0:f4:11:59:b4:13:6d:18:0a:44:f1:5d:91:75:40:7d:7d:5e:
         47:fe:eb:f5:b5:ad:80:b9:01:0e:08:9e:6b:ba:d6:36:5e:47:
         30:7e:77:31:b5:01:da:2e:19:3d:88:ee:23:17:73:dd:9a:7b:
         02:e7:5d:99:cd:68:9f:42:eb:3d:27:4d:cd:3e:3c:6a:1d:45:
         c8:28:a8:b0:01:91:42:81:2f:89:77:7c:ea:75:52:0b:0e:a5:
         ef:ac:57:00:cd:bb:3c:ee:c6:63:5a:03:66:5f:46:d4:dc:51:
         14:3a:46:00:24:e7:34:d0:30:58:e5:96:c8:f3:4c:77:f0:e9:
         ee:cc:73:3f:6c:c8:c0:28:a4:07:d8:9b:e5:a9:61:21:eb:3f:
         34:e7:e8:18:71:39:bd:f4:90:ad:0c:4c:da:57:5e:0b:7d:66:
         7d:ff:95:d6:4a:5a:46:76:c0:59:25:82:55:94:fa:aa:7f:97:
         a6:2b:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:15:29 2025 by rpki-client