Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          cX++Wj3RFoOTi9SEpVnKauRgrQpSNq6R3GjF7QWqOgA=
Subject key identifier:   D1:0F:34:5B:4D:FD:B6:DC:36:B2:0E:0B:67:47:69:48:AE:FC:12:9B
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       01975045E8782B1709868CD880C3D6D5FEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          110D
Signing time:             Sun 08 Jun 2025 16:00:48 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:48 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:48 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: 9f8Kbq5m/MKTyT++BlfE+hSRF43M7F2R+/3nsw1/AS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:e8:78:2b:17:09:86:8c:d8:80:c3:d6:d5:fe:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Jun  8 16:00:48 2025 GMT
            Not After : Jun  9 16:00:48 2025 GMT
        Subject: CN=d10f345b4dfdb6dc36b20e0b67476948aefc129b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:a3:dc:7f:7c:7f:72:9a:5f:9b:7b:e4:b3:
                    24:a4:71:ed:90:76:96:47:95:85:f9:aa:6c:94:87:
                    86:76:59:38:47:e7:4f:c2:e1:09:3b:af:f1:89:f2:
                    5c:04:45:8e:00:a0:29:0a:96:98:f9:8e:4c:f4:cc:
                    6f:6d:2f:70:9c:c5:74:98:e2:b3:56:b2:de:02:a1:
                    14:fd:6f:01:99:cb:00:7c:8a:2d:2e:7e:ce:7a:ef:
                    39:49:a8:ca:a4:1a:b3:4b:49:79:d2:31:62:53:ff:
                    89:60:e7:0f:cd:7a:a5:f9:43:10:7d:de:92:7c:90:
                    a5:c3:d8:58:38:1b:c8:23:ab:55:7a:81:1d:2f:cd:
                    2e:31:16:ac:6f:40:c0:5c:49:fc:f6:78:51:f0:2c:
                    e5:4b:0f:9a:67:c4:94:84:5d:bb:f6:ee:ee:1a:7b:
                    ed:66:1b:c2:1d:e6:f4:c6:17:fb:fa:e6:77:73:c5:
                    98:f4:6d:bb:43:6b:8a:21:69:15:20:8b:67:61:1d:
                    95:af:84:7e:88:c2:b7:93:28:3b:3b:54:fa:cb:a0:
                    f3:39:3a:b6:2f:6a:22:d2:a7:f0:48:51:82:f4:ba:
                    6f:02:29:24:1f:70:c4:16:9d:36:1d:4b:31:7f:12:
                    57:6e:6e:bf:f3:a8:5d:93:a0:cd:d2:28:26:3e:83:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:34:5B:4D:FD:B6:DC:36:B2:0E:0B:67:47:69:48:AE:FC:12:9B
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:73:16:53:a1:b6:fc:d5:47:06:39:b9:52:17:c6:10:40:f1:
         4a:20:1b:0e:b6:1f:b6:30:d0:fb:24:49:bd:22:fa:55:65:6d:
         3a:7e:c5:e3:f5:56:a1:ea:31:c6:be:13:59:ef:67:2f:15:38:
         99:8c:fc:c5:d8:a7:56:25:90:df:21:b2:cf:32:42:26:8d:c3:
         a4:9c:99:11:2d:fc:e6:57:32:4d:6e:af:23:35:ff:10:0d:81:
         28:23:60:1a:93:91:43:58:a7:7a:5a:73:41:c0:1e:6c:af:f1:
         e8:c5:bb:e0:5a:7e:46:9d:6a:47:cf:af:0c:2e:3a:4f:f0:1f:
         49:02:57:74:12:2f:67:ee:b9:9c:7b:36:6a:6c:d8:78:07:17:
         ee:43:f5:eb:c2:3c:d4:37:46:32:80:4d:55:12:5d:73:bf:5e:
         8f:6f:59:96:e5:63:5f:fb:d9:91:47:47:c9:d6:84:b8:8a:3e:
         22:19:e5:02:2d:2d:1e:40:5a:f1:0d:52:fc:a2:a5:c9:6c:65:
         a1:12:ca:b0:a8:1e:f7:49:ab:b0:2b:4d:b4:c0:73:79:84:b5:
         97:3d:26:12:5a:d0:c4:aa:0b:b4:36:f2:46:16:a6:4e:88:65:
         12:b2:f5:79:88:c8:ca:1d:04:ba:7d:ec:a1:a4:14:6b:85:3f:
         15:d3:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:25 2025 by rpki-client