Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File:                     EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier:          9cyF+jE8sCRb2MIutZjhUWXx9fWGxouAgF8Z3WzGwI0=
Subject key identifier:   89:0A:3A:B8:4D:D4:03:0E:5B:D2:ED:F7:32:1C:B8:8E:D6:9B:D6:6F
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer:       /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial:       0196A27744C90E9F99F0B2CFDBC14B887BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number:          10BE
Signing time:             Mon 05 May 2025 22:00:47 +0000
Manifest this update:     Mon 05 May 2025 22:00:47 +0000
Manifest next update:     Tue 06 May 2025 22:00:47 +0000
Files and hashes:         1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: NkFnP4g4XoL7Cob9NvpFB+yPoUjbhJonmMi2tyRhZ9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:44:c9:0e:9f:99:f0:b2:cf:db:c1:4b:88:7b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
        Validity
            Not Before: May  5 22:00:47 2025 GMT
            Not After : May  6 22:00:47 2025 GMT
        Subject: CN=890a3ab84dd4030e5bd2edf7321cb88ed69bd66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:5f:53:10:3f:39:73:fa:71:7b:82:c2:a4:
                    e0:d5:77:b7:64:66:54:b0:3b:3f:44:17:d0:d0:b5:
                    7d:10:c9:70:ba:a1:e8:de:dc:6a:f4:29:05:41:cb:
                    c4:ee:f6:f4:90:97:98:77:f1:d3:99:f3:06:a5:88:
                    9f:6d:99:61:c5:7a:9f:07:b2:7d:ed:ad:c2:15:ef:
                    5c:f6:7b:41:02:61:8e:4b:bd:2d:75:97:79:2f:cb:
                    75:39:b2:80:d2:5d:b1:01:ea:61:67:c2:73:87:79:
                    8c:04:1c:4c:bd:d1:5c:7f:b1:dc:7a:16:c8:4d:86:
                    1a:86:61:d2:b5:9c:fb:06:f1:1e:79:5d:fd:38:60:
                    b2:72:8e:52:89:e8:f1:ff:01:56:5f:cb:d3:3c:75:
                    a9:ee:2c:da:96:91:14:65:f9:06:d2:7b:6b:f6:ea:
                    d0:93:75:ef:9b:c0:77:31:17:63:c8:ed:ef:ce:87:
                    ee:70:9d:67:4e:c0:5e:06:c4:f4:e6:cf:29:d2:ce:
                    23:32:31:aa:b0:a9:39:eb:ac:53:b4:e4:58:67:bd:
                    4a:83:b9:ed:9b:54:df:59:3d:1f:fe:79:c5:cb:9d:
                    dd:3f:86:bc:56:5b:c2:a1:ec:83:a7:9c:b8:d6:b4:
                    b3:cc:2d:11:18:14:73:d0:1d:68:2f:18:44:b2:6d:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0A:3A:B8:4D:D4:03:0E:5B:D2:ED:F7:32:1C:B8:8E:D6:9B:D6:6F
            X509v3 Authority Key Identifier:
                keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ee:7f:ec:9e:8f:fc:fc:0f:91:c1:d4:6a:0b:9c:07:eb:3a:
         a0:95:fe:31:f2:13:83:be:37:a2:46:f7:14:d0:23:7e:54:9f:
         4c:2f:0e:b9:cf:2a:81:2f:40:69:b9:31:ea:5d:59:05:af:f6:
         95:8f:57:8a:78:60:d4:03:88:bb:6b:e4:16:29:c9:06:2c:01:
         7c:0f:ad:7c:2d:2c:7f:04:78:35:04:2b:2a:ed:77:55:3d:db:
         36:98:9d:9f:a9:a8:30:ef:81:70:f1:11:d4:cc:46:1d:51:27:
         38:f4:75:54:e7:e2:96:84:50:03:09:6e:4a:dd:cc:2c:5d:36:
         97:0c:c1:43:f7:22:ae:47:da:9a:93:a2:f9:97:1f:5f:e6:3b:
         8c:bc:af:21:cc:cd:69:94:38:27:47:6a:36:71:4a:9f:75:7e:
         2b:42:b2:0b:93:3b:20:3d:09:e2:82:c1:d2:07:55:4d:68:29:
         bb:da:ce:01:81:cb:e7:15:fd:68:25:85:07:81:4b:a2:3f:12:
         a9:29:12:92:b6:48:80:d9:0d:97:8d:c1:cc:f8:63:c7:f8:15:
         e7:2c:dd:ec:2e:9b:a9:4c:41:a9:08:2d:00:69:43:21:bb:c9:
         17:97:b2:5e:ff:8b:49:41:ca:40:ac:13:cb:d7:e6:0a:89:9a:
         61:35:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:43:44 2025 by rpki-client