Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          ovRMO7YtvFwDfxxlsgBUnDN+/Y05kp+hx0m8gO9uaNQ=
Subject key identifier:   B8:37:20:8C:FD:6C:25:80:4E:CC:91:9F:49:F3:21:F1:32:6A:C2:71
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       0197470BE76511E274978319CD95AE2B5EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          0700
Signing time:             Fri 06 Jun 2025 21:00:51 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:51 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:51 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: crMbJ+3WXAAElniuaeZpvNE6SeswQ3NOrsJfXVJzFsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:e7:65:11:e2:74:97:83:19:cd:95:ae:2b:5e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Jun  6 21:00:51 2025 GMT
            Not After : Jun  7 21:00:51 2025 GMT
        Subject: CN=b837208cfd6c25804ecc919f49f321f1326ac271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:57:95:5f:ba:ff:63:d7:27:0c:47:aa:25:
                    29:7b:6c:e1:04:17:c8:49:0d:e9:1f:23:bc:e3:a8:
                    3a:b2:f1:75:b3:12:1b:fa:64:8a:4a:9c:49:9d:14:
                    f9:a4:2f:8c:0d:df:de:c6:57:9f:24:bb:bf:68:72:
                    64:75:26:f3:86:7e:64:f2:1b:b8:14:01:08:15:e3:
                    c6:43:76:fd:68:97:09:61:be:6d:b4:1a:e3:2b:4f:
                    fb:c5:c0:32:6f:69:a2:09:03:cc:bc:9c:86:2b:12:
                    a5:e5:8b:f7:e1:82:ad:42:6a:a7:38:6b:6e:92:2e:
                    cb:f4:a8:10:3e:01:ae:f2:e7:3d:1e:a8:ae:fb:3f:
                    ec:9d:9f:b0:b2:89:fc:65:c8:be:1b:22:fc:66:e2:
                    14:eb:ea:f5:cf:4b:26:b8:32:00:3f:29:98:71:8d:
                    7a:cc:06:6f:69:86:43:ed:a5:be:7d:c2:ff:25:e6:
                    37:01:62:3d:51:27:75:85:27:38:bf:1e:3d:75:b2:
                    e9:8b:0b:a0:1d:6a:6b:a9:51:02:df:70:61:40:ff:
                    86:db:44:94:ac:64:f8:ac:64:76:09:4c:88:db:17:
                    4d:6f:20:03:5c:8b:57:13:38:a6:85:32:36:c9:00:
                    f7:01:8f:24:2c:2b:e3:c7:0d:34:5c:0c:4e:36:56:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:20:8C:FD:6C:25:80:4E:CC:91:9F:49:F3:21:F1:32:6A:C2:71
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:02:23:e5:64:89:64:f3:37:f3:7a:c0:5a:28:58:67:35:a5:
         01:f8:05:5d:a9:6d:00:46:53:01:8e:ac:df:c9:ac:fd:a3:3a:
         49:61:55:9a:92:c9:d3:31:de:b4:de:a5:4e:43:91:6b:6f:1a:
         92:32:6d:4d:8b:62:37:2b:ce:53:fe:e8:7d:b6:92:7b:2c:de:
         0c:6e:cb:d1:ea:53:d8:25:ad:87:99:49:7e:7c:98:4e:b9:1e:
         1b:ca:ba:57:81:63:4e:67:80:ec:0f:f4:5a:8e:d0:34:5b:62:
         77:a3:31:d9:25:70:cd:75:78:c3:46:b1:e6:60:fe:b3:5e:fb:
         f3:03:e2:bc:bd:9f:43:62:c3:61:ed:a8:e7:49:f2:72:ae:4c:
         03:13:59:02:88:ad:b1:f8:bd:af:c3:f9:c0:14:9a:68:94:13:
         28:e0:19:04:c8:9a:1f:2a:4d:32:a1:38:cd:b8:1f:cc:76:9b:
         25:f3:9e:9b:e3:4b:1a:0b:e1:8d:35:a4:2c:a2:cd:18:06:50:
         9c:60:6d:d1:21:40:79:7d:01:6d:9b:b4:9f:ba:97:58:02:ed:
         45:7e:8b:16:35:86:2f:cd:24:4c:90:74:03:cd:ba:ef:46:92:
         0f:7c:85:0b:75:49:55:44:79:2d:90:f9:dc:42:65:c3:73:bd:
         02:de:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:31 2025 by rpki-client