Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
File:                     Mke--VN94WS_urpRZr4CrPftgto.mft (raw, json)
Hash identifier:          /TL1R51Zfnt0eStI8ZPzB/X1NrymP6Vle1eac5OcOsw=
Subject key identifier:   28:4C:10:39:A0:E2:A5:39:CC:3D:48:23:8D:D7:29:17:82:CE:C2:B0
Authority key identifier: 32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA
Certificate issuer:       /CN=3247bef9537de164bfbaba5166be02acf7ed82da
Certificate serial:       0197711A34F5D0D2D3234F4786366F12FB30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
Manifest number:          158D
Signing time:             Sun 15 Jun 2025 01:00:32 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:32 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:32 +0000
Files and hashes:         1: Mke--VN94WS_urpRZr4CrPftgto.crl (hash: XmnSJouDzd6jPzLdgHvDLbfLJO1v3jkhsLTuKwBgs1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:34:f5:d0:d2:d3:23:4f:47:86:36:6f:12:fb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3247bef9537de164bfbaba5166be02acf7ed82da
        Validity
            Not Before: Jun 15 01:00:32 2025 GMT
            Not After : Jun 16 01:00:32 2025 GMT
        Subject: CN=284c1039a0e2a539cc3d48238dd7291782cec2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:95:47:34:8f:bd:b8:ca:72:40:f9:02:57:
                    fc:26:b0:b8:ed:f6:6d:1d:42:75:4f:4b:86:3b:b9:
                    f8:dc:81:44:22:fd:95:96:9a:4d:31:f2:43:86:f6:
                    9b:d6:59:0e:ae:c2:fb:92:33:ff:d2:f9:14:65:2a:
                    3f:a7:e5:82:3a:fb:34:f8:3b:fe:a5:3c:1d:bf:bc:
                    bb:51:18:28:b9:1d:c8:e7:ce:e6:fd:5d:91:6c:f3:
                    c5:41:34:3c:6e:8a:db:69:28:36:0d:bd:6a:c0:b4:
                    bf:08:d9:cf:3a:34:ed:6e:8c:dc:7c:6f:c1:79:30:
                    75:82:a7:aa:41:db:c3:5e:82:fa:44:83:cf:c3:82:
                    55:9c:78:8b:bf:72:4b:8a:35:40:4f:bc:94:f1:a9:
                    69:22:9c:50:86:61:fe:4f:4d:74:ae:fc:75:a7:d6:
                    aa:78:6e:8e:7c:15:5f:94:bd:ef:24:49:2e:6c:c6:
                    45:0c:54:6d:c6:1b:80:4d:54:5e:ab:af:ac:bd:e0:
                    3b:d8:ef:a7:70:12:9f:48:74:4c:e0:2f:a8:f8:44:
                    e5:5e:fe:c3:b6:cf:a4:da:9b:c4:1f:03:a3:c1:04:
                    70:37:fb:db:6c:89:ad:60:a7:17:42:1d:f9:2d:5a:
                    85:93:9d:e5:2e:1c:fa:f6:9f:93:1c:42:3e:f4:49:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:10:39:A0:E2:A5:39:CC:3D:48:23:8D:D7:29:17:82:CE:C2:B0
            X509v3 Authority Key Identifier:
                keyid:32:47:BE:F9:53:7D:E1:64:BF:BA:BA:51:66:BE:02:AC:F7:ED:82:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mke--VN94WS_urpRZr4CrPftgto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe83cb-2acd-464b-9667-0ab96163c471/1/Mke--VN94WS_urpRZr4CrPftgto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:88:c1:bf:58:10:74:ef:5d:41:d3:88:a3:50:bd:3f:4f:
         cb:0d:6f:77:98:d4:53:b5:36:e8:ad:80:de:79:43:82:e8:b7:
         3b:ee:cf:e1:00:d8:d6:a8:31:a2:f0:d1:39:29:cc:6b:34:e3:
         ce:1b:1d:de:50:1d:54:bf:5f:23:73:b4:42:c2:62:d0:ba:0f:
         25:7e:1e:f6:56:5b:d0:65:4d:ef:74:78:6e:3a:2b:91:ce:c3:
         87:f9:2a:02:31:99:9c:de:b2:7b:47:44:06:81:c8:53:92:f9:
         4b:13:07:5d:ea:5d:9a:ad:1c:88:b8:0d:1f:79:c5:95:bb:17:
         e3:1e:23:2c:b1:51:67:85:a1:4f:1f:77:59:99:9d:9c:f6:25:
         1f:7c:ae:b3:af:71:d5:7f:e2:5f:80:ee:7c:10:79:13:75:81:
         38:42:c4:02:9f:64:d0:2f:87:f9:63:87:75:b8:32:c5:7d:4c:
         a6:2f:ef:c0:62:df:6f:49:b5:5c:6f:96:52:14:d5:ea:13:0e:
         22:90:cf:42:8c:cd:52:20:88:ac:d8:61:ec:e2:1f:6a:f7:8d:
         bd:b5:39:ae:ff:fd:ec:2b:11:18:28:55:bc:bd:6d:46:41:e5:
         88:1d:da:29:d1:90:2b:8c:6c:09:d6:28:ff:73:20:83:03:e2:
         c9:03:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:54:17 2025 by rpki-client