Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
File:                     6E2eW-w81Mrhfl-Hsu6lImpO518.mft (raw, json)
Hash identifier:          3pNg+Ks9rpwWnF5/Tgx+u22LyBf3sucB0kF5Rczm6S0=
Subject key identifier:   C4:D9:35:34:FC:AB:0C:6E:59:C0:AB:E7:17:31:2F:93:5A:6A:FA:DF
Authority key identifier: E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F
Certificate issuer:       /CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
Certificate serial:       019768BC41C3314F165E87CB201014C0E3DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
Manifest number:          0B78
Signing time:             Fri 13 Jun 2025 10:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:57 +0000
Files and hashes:         1: 6E2eW-w81Mrhfl-Hsu6lImpO518.crl (hash: oOQoRJB8HdDhtHv+8p8uzubHuvvmKWKgnmf7+AgTGmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:41:c3:31:4f:16:5e:87:cb:20:10:14:c0:e3:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84d9e5bec3cd4cae17e5f87b2eea5226a4ee75f
        Validity
            Not Before: Jun 13 10:00:57 2025 GMT
            Not After : Jun 14 10:00:57 2025 GMT
        Subject: CN=c4d93534fcab0c6e59c0abe717312f935a6afadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:77:b3:27:37:62:e7:11:99:5a:fc:a6:27:05:
                    5d:58:01:b0:94:e8:55:13:a5:1b:e2:30:a1:ef:91:
                    2f:d1:ca:b2:62:8d:31:4b:9e:50:b3:6d:59:13:6c:
                    c4:83:70:61:60:18:b7:43:2a:76:82:e8:bb:f0:0b:
                    24:91:64:59:7d:82:98:c9:47:86:39:ab:c6:e1:d5:
                    52:43:69:e6:f3:a5:18:f9:69:19:c4:38:6f:a5:57:
                    6b:69:34:98:4f:8a:70:df:75:0f:c6:bd:50:5c:7b:
                    42:31:d5:73:bd:85:a6:74:e0:aa:8a:3d:49:46:8b:
                    e7:d8:ae:a3:9b:fd:fa:59:70:3c:0d:0e:2f:88:f8:
                    44:31:2d:36:7c:06:0d:b1:3b:c6:bb:9f:01:d0:c6:
                    35:c4:aa:99:79:8a:20:bc:42:4a:5b:8b:ed:8d:1b:
                    16:0b:7f:f5:25:2a:34:5b:89:4e:2f:ac:95:69:19:
                    9d:6c:47:7a:72:a2:c5:a7:96:40:fc:2e:06:35:f4:
                    64:31:ee:cc:a2:9f:21:66:06:81:b1:3a:49:1e:1a:
                    30:10:d5:24:57:09:56:66:2e:7c:24:e8:b4:0c:29:
                    f6:4e:90:d3:d3:68:31:e3:4b:8a:c7:37:8e:c2:0e:
                    51:fc:d0:15:86:92:10:12:ef:04:14:a6:c4:91:eb:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D9:35:34:FC:AB:0C:6E:59:C0:AB:E7:17:31:2F:93:5A:6A:FA:DF
            X509v3 Authority Key Identifier:
                keyid:E8:4D:9E:5B:EC:3C:D4:CA:E1:7E:5F:87:B2:EE:A5:22:6A:4E:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E2eW-w81Mrhfl-Hsu6lImpO518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e5706-d54c-48b9-8849-ab3f591df17f/1/6E2eW-w81Mrhfl-Hsu6lImpO518.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:d5:bb:a0:e1:ed:16:fd:50:cb:f0:3f:02:9e:9a:06:26:
         69:56:a4:a4:dd:19:b2:55:01:e8:64:a2:6b:79:19:d5:9f:d3:
         f8:e3:69:50:66:79:7c:b1:36:15:ab:3c:d6:b5:7a:b8:4d:c2:
         4e:f3:7f:eb:5c:1e:f4:2d:f2:a0:2b:6d:b5:d5:09:29:5a:f0:
         07:f8:bb:4a:92:64:6d:0e:a3:f6:ca:0c:a8:30:98:2c:64:da:
         68:14:2b:b8:46:41:4e:39:fc:cb:40:24:6c:3f:77:a3:b7:a9:
         51:06:0a:c1:9c:c9:14:7a:d6:a8:9a:fa:f9:d0:fd:98:5e:2e:
         e0:51:1c:bc:17:df:ac:35:b7:a0:05:94:af:5d:c7:12:25:f1:
         14:f9:d1:c2:8f:00:93:5b:6a:c6:0f:1c:c1:8b:37:32:69:50:
         54:79:72:77:de:b9:27:d4:81:10:66:22:ab:bb:a2:7d:cd:11:
         3b:46:c6:51:b8:3d:2f:40:5a:d4:d4:16:07:7d:0b:9c:9a:38:
         e4:40:f4:27:ba:70:86:40:ed:6a:52:18:33:3b:cf:aa:43:c7:
         12:8a:e8:d9:29:2b:19:07:f7:e3:b9:b6:37:79:1f:b3:9f:64:
         7e:ed:e9:7e:21:29:e9:6d:78:1b:b6:8d:8b:c5:de:1f:d7:c3:
         ec:29:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:56 2025 by rpki-client