Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
File:                     euirxe_YoA4Rx7LA2OH3b4IUYks.mft (raw, json)
Hash identifier:          5JEmec44y9e5YSFykIdur1n/jfdqxyo4uy//gaBsZfU=
Subject key identifier:   33:73:30:B0:E3:15:52:29:2E:F8:57:A8:64:B9:F6:F6:F8:01:9B:F8
Authority key identifier: 7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B
Certificate issuer:       /CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
Certificate serial:       019749D59DCA6646965DC7E1869E1114B66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
Manifest number:          0977
Signing time:             Sat 07 Jun 2025 10:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:25 +0000
Files and hashes:         1: euirxe_YoA4Rx7LA2OH3b4IUYks.crl (hash: lJlk07TvBoaajWFaefTvef/+9U9XYOEBoPVFRyAYfTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:9d:ca:66:46:96:5d:c7:e1:86:9e:11:14:b6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
        Validity
            Not Before: Jun  7 10:00:25 2025 GMT
            Not After : Jun  8 10:00:25 2025 GMT
        Subject: CN=337330b0e31552292ef857a864b9f6f6f8019bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:bd:85:56:ed:4e:b1:b0:40:22:41:2c:07:
                    20:51:9b:39:57:2f:36:0f:fc:5d:a0:59:7e:1c:72:
                    f0:61:47:97:03:86:98:35:24:29:cf:a8:37:58:df:
                    a9:7d:da:c1:a0:14:42:f1:60:2d:12:06:c2:99:c7:
                    3a:65:d4:d2:2d:7e:9e:31:18:61:ee:32:d0:64:78:
                    ed:d8:17:4e:0f:bf:91:93:e8:4f:c2:67:b5:91:ba:
                    c6:ab:8b:19:68:ce:47:2c:a9:c9:33:e9:d7:8d:aa:
                    67:9d:72:b0:3c:58:83:24:f0:4e:2f:d3:2b:c9:db:
                    18:c2:b6:4b:7f:5c:65:6a:f3:6c:07:a2:ab:99:02:
                    da:03:f5:74:ef:cc:09:b0:77:3c:aa:db:a8:9c:2a:
                    58:37:ad:05:ad:c0:22:01:2e:0e:73:9e:25:07:92:
                    fe:77:48:e7:d3:28:04:49:a0:8a:d7:e2:6b:e1:ec:
                    af:2a:ac:f5:53:30:4e:d4:a7:d8:c6:c1:00:c0:e6:
                    72:e1:d6:7a:22:c9:0d:80:2b:7d:c7:fe:7a:07:7a:
                    c3:30:e5:bb:dd:50:9c:5f:9b:8b:f4:92:60:14:9f:
                    96:ab:b1:02:5c:ab:e6:f9:20:53:fd:97:c7:dd:ef:
                    d0:d2:64:c1:17:d5:9b:07:2d:cc:1d:21:17:a0:1e:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:30:B0:E3:15:52:29:2E:F8:57:A8:64:B9:F6:F6:F8:01:9B:F8
            X509v3 Authority Key Identifier:
                keyid:7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:77:96:2a:27:fc:3a:37:88:89:c1:10:85:c0:e7:2e:dd:1b:
         b8:b7:b4:ca:96:ef:d1:12:6c:a2:bb:27:fa:a0:35:83:96:ce:
         66:e1:6c:d2:d3:60:2b:ee:0f:81:4f:49:1b:45:58:bb:ce:e1:
         53:28:bf:18:77:62:98:18:03:de:31:80:fa:b4:6d:38:73:90:
         44:26:2b:e7:7c:4e:25:f8:f3:19:ed:2d:4e:20:05:18:d7:ad:
         82:80:2f:44:99:7f:b3:a4:b6:9b:70:e0:fb:5f:b9:fd:ad:e7:
         c7:2e:c6:21:4c:c2:e6:40:47:ec:b6:85:a2:8c:46:a7:50:f2:
         6e:c6:6f:d9:4a:3b:a1:61:27:2e:e1:e7:50:4e:13:26:1d:61:
         38:4e:4a:8c:b3:8d:9b:6e:34:a5:d2:81:98:03:05:24:68:54:
         ee:12:78:22:83:52:a9:7d:02:fc:3b:ec:8d:2f:a5:78:5f:be:
         97:85:6e:1c:57:fd:0e:34:1a:c6:3a:9c:b6:a0:b5:d6:e3:cf:
         2c:6d:b6:5a:29:09:b5:2a:93:8b:64:68:45:14:ee:44:2f:19:
         37:8b:cf:1e:16:78:d7:0e:6b:2b:bf:a2:5d:ef:a9:af:61:80:
         80:90:a8:75:a3:05:e1:fb:a4:3b:40:d5:f3:87:fe:ac:0a:5d:
         1c:70:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:42:53 2025 by rpki-client