Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File:                     Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier:          eMu+sn9KlOEO8mwoGN5Kf/Y5QPoTofL1wqkgc61wvcU=
Subject key identifier:   0D:09:9D:F2:39:4B:66:1B:1A:84:73:B5:0E:B1:38:3E:24:09:A5:62
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer:       /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial:       019759495041BC394196B91164F90E60A08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number:          0BF1
Signing time:             Tue 10 Jun 2025 10:01:06 +0000
Manifest this update:     Tue 10 Jun 2025 10:01:06 +0000
Manifest next update:     Wed 11 Jun 2025 10:01:06 +0000
Files and hashes:         1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: DoSFYP67/933FI8cspB5+DFr8evHMNWkUN3TwcD8qjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:49:50:41:bc:39:41:96:b9:11:64:f9:0e:60:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
        Validity
            Not Before: Jun 10 10:01:06 2025 GMT
            Not After : Jun 11 10:01:06 2025 GMT
        Subject: CN=0d099df2394b661b1a8473b50eb1383e2409a562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:b5:10:af:ae:f3:fe:dc:33:45:d1:8e:4f:
                    0a:f5:eb:e9:cf:d2:14:59:4f:29:23:57:2d:38:34:
                    67:fc:44:e6:0c:92:dc:b9:54:a4:2f:69:c1:de:10:
                    c5:f6:01:f1:4f:e6:fc:cd:40:8a:77:5d:f6:0e:24:
                    84:27:35:e9:0b:c8:0a:08:91:c7:37:d7:9a:b4:f6:
                    0a:35:eb:74:28:bb:39:04:42:fd:ae:0c:af:98:8d:
                    5e:fa:0a:6f:24:8b:62:49:48:ec:0d:78:9a:19:6b:
                    0a:fd:bc:c5:7e:8b:6e:94:f7:8a:69:4b:0d:4a:50:
                    29:dd:19:67:f0:db:00:fa:fd:86:87:dd:5c:f4:1e:
                    de:29:b2:b4:a3:e9:56:4d:03:9a:f9:de:d0:59:30:
                    0c:db:ec:cd:fa:bc:52:ad:03:a6:15:47:50:4a:7c:
                    a8:59:c0:de:54:17:c8:92:ba:5a:e8:8a:03:e6:b0:
                    80:0f:1e:81:c7:38:e8:d1:c2:25:80:97:e9:67:0d:
                    ec:7a:68:3b:f4:60:c4:9a:91:54:1a:d6:57:24:31:
                    e2:7c:54:13:b0:5e:b9:f9:1c:ec:6c:99:9a:24:d9:
                    c0:53:ae:a8:fd:6c:32:14:a6:87:c6:c0:2c:d2:5c:
                    cb:ce:d8:ae:25:45:f8:eb:25:81:2a:fa:c8:73:8c:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:09:9D:F2:39:4B:66:1B:1A:84:73:B5:0E:B1:38:3E:24:09:A5:62
            X509v3 Authority Key Identifier:
                keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:38:a6:d4:33:cb:4d:a7:90:f4:4a:0c:b1:41:fc:a6:3d:d3:
         20:f9:df:ce:c1:d9:66:f5:e6:7b:98:95:bf:d2:89:4c:42:e5:
         fe:88:19:0f:1a:a5:24:5e:cd:ed:3a:ad:b9:d5:5d:2e:63:1d:
         83:4e:69:b1:fc:93:ea:a6:66:a4:af:44:94:d5:d3:e6:e7:99:
         fe:7c:c3:ed:08:91:1b:81:32:40:c3:15:79:f4:47:99:52:04:
         2a:6d:2b:f5:e0:18:ad:15:d2:d6:46:f6:aa:5f:61:67:40:d3:
         9a:4a:28:37:17:7d:04:04:cd:7f:b0:ab:73:76:6f:1d:74:af:
         c9:3e:69:0f:38:ba:b5:8c:92:77:04:7f:06:9b:89:24:45:58:
         58:3a:d0:54:cf:95:8b:c3:d0:3a:24:04:14:57:aa:96:83:98:
         f5:08:6c:16:45:a4:4f:17:d8:8d:61:eb:be:32:06:c3:1d:6d:
         4f:41:ec:ee:52:d7:26:15:e2:7a:f5:88:d0:6e:20:b4:c2:86:
         a6:51:29:09:ec:22:5b:32:b9:7c:8d:4b:89:05:76:82:f6:97:
         df:dc:44:5c:d8:b3:00:ec:13:fa:5c:fb:c3:2c:4b:0f:6b:23:
         1f:a8:72:0c:74:86:9e:3d:d9:d3:dd:8f:2c:34:80:19:4b:00:
         cd:03:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:50:51 2025 by rpki-client