Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          T+psVMtuSLiqR4hNrZVJOyIHubaSOx0WHvzMNGfqXYI=
Subject key identifier:   73:EE:83:39:84:E8:2D:0A:0E:10:D7:6E:08:68:A2:0A:74:3B:69:C6
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       01977941693D33CD6E562809E8B954007C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0C20
Signing time:             Mon 16 Jun 2025 15:00:19 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:19 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:19 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: fz8ByUmIhbNeCtaoSHut61aoHO2TAzNBHX2pV1oz3AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:69:3d:33:cd:6e:56:28:09:e8:b9:54:00:7c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Jun 16 15:00:19 2025 GMT
            Not After : Jun 17 15:00:19 2025 GMT
        Subject: CN=73ee833984e82d0a0e10d76e0868a20a743b69c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:95:9b:82:c4:40:13:00:f6:d6:7e:6f:ea:
                    01:41:0c:d7:6a:d6:9b:b4:a1:6a:02:e6:05:e5:c8:
                    e1:cb:f1:57:6e:3f:19:7b:a4:0c:84:b4:99:a4:03:
                    27:97:34:7c:33:00:64:52:51:61:ee:07:9a:81:4b:
                    fe:46:cc:8f:62:55:75:38:ee:52:b6:da:8a:f4:fe:
                    59:a3:56:00:80:be:2d:17:91:97:67:4a:46:4d:fc:
                    43:5f:3b:90:56:c8:4a:bc:b9:e5:8a:d1:58:80:7e:
                    44:b9:0a:e2:51:5e:95:6d:6d:fc:95:c5:49:5c:3f:
                    77:b2:5d:44:35:81:0b:37:38:47:1d:39:cb:de:7e:
                    ea:75:d5:db:ec:06:e0:2b:7e:16:e9:82:5d:1b:c0:
                    a3:da:83:80:4f:d0:25:7e:8c:34:a8:68:d5:07:86:
                    c1:40:da:8a:79:b5:56:52:0a:ab:9c:d7:85:d4:06:
                    b8:a0:50:d5:6d:a7:ce:5f:ce:b8:7c:24:48:7f:a9:
                    37:ef:0d:6b:52:43:9c:a4:a1:58:ef:7a:42:fb:48:
                    18:f0:44:3d:73:cd:6e:25:c2:10:e6:ae:37:7e:7c:
                    a5:01:b9:40:0a:cd:da:ec:ac:ed:91:35:38:a3:11:
                    8a:88:55:bf:eb:bf:af:82:67:f4:dc:e7:73:e8:75:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EE:83:39:84:E8:2D:0A:0E:10:D7:6E:08:68:A2:0A:74:3B:69:C6
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:cb:d4:e5:9f:17:8a:92:d4:cb:2a:2a:f8:69:33:53:36:
         01:f8:71:71:a9:48:8d:41:a6:5c:e1:40:33:d0:16:79:c9:cc:
         84:18:0f:18:c8:34:9b:f8:c2:85:37:54:11:55:34:02:e4:1b:
         de:f1:e9:4b:76:1b:4f:50:b8:7d:24:97:31:90:6f:f6:1d:3e:
         25:2e:e8:d2:73:bb:41:06:2e:70:83:48:e8:b9:f4:b9:c0:66:
         02:43:7f:e6:7a:b1:16:ce:4e:fa:16:ac:fe:ed:f0:7c:ec:69:
         69:c9:8e:b6:5b:bb:94:3f:72:18:06:89:02:9d:03:37:95:e2:
         bd:18:8d:4f:d3:91:df:e3:d9:82:86:66:8e:09:9d:91:24:1b:
         32:c7:74:38:75:fc:95:3e:ac:67:7f:dd:53:41:d7:24:9f:29:
         22:c7:80:53:9f:06:60:4a:d8:3b:33:cd:58:a1:6d:d4:b8:13:
         99:dd:8e:fa:6d:70:b8:1c:dc:1c:59:b2:5f:81:a7:99:0d:a5:
         a3:f6:dc:1e:cb:b3:c4:c1:b5:2b:ff:f5:fb:72:ea:26:5a:69:
         07:12:87:e2:d8:65:f5:f5:7c:a9:72:af:b0:ad:c6:f7:1d:88:
         ce:af:58:ef:d5:a7:8e:8c:03:fd:94:cb:09:05:4b:de:b3:39:
         a1:ca:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:10:51 2025 by rpki-client