Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File:                     tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier:          75k0AQEU9Xz4gqQWcpL7hJyntS3d2dZN/BLXSMD1FO0=
Subject key identifier:   63:B1:C0:2C:41:F8:64:74:9D:FC:0A:85:17:8A:D3:67:8A:7E:8F:9E
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer:       /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial:       01976A05F1D57C475A7F76446175A1A912EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number:          02BC
Signing time:             Fri 13 Jun 2025 16:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:03 +0000
Files and hashes:         1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: Bo42qFdp6NVfHSsIQIT26KKuTSkYb8RjXEt83Nto7AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:f1:d5:7c:47:5a:7f:76:44:61:75:a1:a9:12:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
        Validity
            Not Before: Jun 13 16:01:03 2025 GMT
            Not After : Jun 14 16:01:03 2025 GMT
        Subject: CN=63b1c02c41f864749dfc0a85178ad3678a7e8f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:32:69:10:ee:34:63:7a:ce:a7:38:d0:c2:
                    50:c6:f4:63:5d:55:83:2a:4a:be:7d:ba:5d:70:a2:
                    82:a3:72:66:95:81:08:f6:25:c8:f0:8f:67:f7:83:
                    a3:dd:8a:84:57:a7:da:14:d6:2c:1a:18:58:9b:61:
                    a0:1e:d6:d7:83:8f:02:73:c2:c4:f6:6a:51:12:2e:
                    ca:b5:78:5d:8f:01:b9:98:13:25:a7:92:04:ae:30:
                    f4:e9:af:6c:f8:71:3c:27:39:67:44:52:14:54:2a:
                    ae:5d:52:4a:3e:8a:ab:c8:07:44:56:f0:58:9d:02:
                    0f:f0:3e:de:ea:ab:73:51:1b:25:ae:9b:22:b0:f4:
                    96:dd:d6:45:fd:d6:96:4a:d8:56:b3:8f:cc:cf:d5:
                    d8:65:f6:f5:f2:92:51:89:33:6d:74:35:e9:d2:5a:
                    be:e3:c8:41:8a:f8:d5:f0:ac:be:71:85:11:f6:88:
                    1c:50:28:6b:f0:92:a7:2c:99:fb:cd:99:29:cd:b5:
                    5e:8c:e4:40:c5:58:4b:20:9b:52:4d:ea:54:3d:55:
                    75:f7:59:8e:ee:d3:01:24:ae:7c:68:f6:ce:5a:6f:
                    17:c8:09:94:30:79:fb:1a:da:1c:9c:9a:8a:3c:20:
                    d9:92:02:10:b1:1d:96:17:38:d3:77:25:5b:90:9f:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B1:C0:2C:41:F8:64:74:9D:FC:0A:85:17:8A:D3:67:8A:7E:8F:9E
            X509v3 Authority Key Identifier:
                keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:ce:ed:ed:34:c9:ea:20:00:65:e7:62:fe:d4:93:08:b2:
         2d:50:ae:df:19:fb:1a:59:80:c1:cc:e7:f7:3c:7f:77:a1:01:
         f1:7c:e3:fd:12:13:f2:f4:cc:8a:6e:d2:e5:3b:7b:91:7d:d8:
         16:be:d0:7e:3a:dc:3e:68:9a:1d:c0:c5:27:88:3b:7f:e4:fb:
         ab:78:7d:df:4e:19:67:39:44:1b:10:df:52:07:97:ad:8e:aa:
         2b:d7:e7:c3:05:a8:ba:7d:3e:16:11:5a:b9:22:83:f3:ae:1d:
         a4:ff:b9:93:e9:15:ad:a9:38:a3:07:21:4a:ff:cc:61:fb:89:
         84:ef:90:db:44:f4:48:f5:be:02:fd:e3:6b:7a:b1:5d:cb:08:
         19:3d:f1:8a:3e:cb:8c:22:f8:bb:92:4a:89:f6:40:0c:90:a0:
         06:0c:7c:86:1f:b1:53:1b:2c:10:5a:83:47:de:5a:e5:6a:c4:
         51:73:04:b1:3c:e1:6b:17:d7:e1:35:c9:c4:e0:ca:94:40:05:
         ce:15:e5:d7:10:b5:e3:54:71:b6:a0:70:a1:d8:92:d0:24:0d:
         55:57:3d:d1:c0:8f:5f:e8:16:a3:97:b4:95:c0:a7:3c:74:ec:
         3d:5c:d5:5a:a2:c4:e8:ec:2f:55:ac:85:6e:58:5a:91:eb:94:
         fd:ba:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:12 2025 by rpki-client