Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          AktHm8yRjLa5fyQYASlUl7OGFRbmuFnR+GVJQib3Lq8=
Subject key identifier:   43:28:01:46:D1:29:53:B0:BA:C5:3F:D9:16:38:A2:43:C2:DC:1A:33
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       019761DDD89A5B943EF0332723409EE34312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          046F
Signing time:             Thu 12 Jun 2025 02:00:18 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:18 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:18 +0000
Files and hashes:         1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: zO0hzkIk5Kr9AV87qiG9AxXOpXvG76Qbpeyjz49QJjU=)
                          2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:dd:d8:9a:5b:94:3e:f0:33:27:23:40:9e:e3:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Jun 12 02:00:18 2025 GMT
            Not After : Jun 13 02:00:18 2025 GMT
        Subject: CN=43280146d12953b0bac53fd91638a243c2dc1a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:c0:b9:42:0a:2a:02:2f:94:a4:0a:47:79:
                    ed:bf:ca:78:7b:2b:b7:07:eb:12:db:ab:a0:ca:0d:
                    60:86:70:e1:c1:69:1c:24:c7:7a:f9:6c:e8:bb:e8:
                    60:a9:78:91:7d:a5:97:6a:a8:d2:e5:f4:f8:9f:2d:
                    ab:0e:07:11:ad:81:1d:93:e3:6a:c3:d0:6d:d5:65:
                    24:7e:72:54:1a:c7:da:61:f3:d0:e8:c4:e9:00:a9:
                    a3:30:00:82:a9:3b:91:d5:02:b9:72:a8:af:f5:8d:
                    d8:2f:83:1d:ed:00:9b:5d:76:35:e5:67:2e:9b:a3:
                    36:d6:2d:6d:5d:9e:f2:35:45:db:1b:14:a9:ce:40:
                    01:88:3a:50:d1:78:14:8b:89:37:51:dc:41:72:59:
                    c1:e5:f7:04:7b:08:77:ca:5c:61:20:3d:81:e4:3e:
                    57:79:cc:0b:b5:ef:13:3f:50:f9:fd:b3:40:32:06:
                    ef:04:53:9d:8e:0e:cf:62:51:87:88:81:bd:65:c6:
                    f6:46:49:e3:91:8c:95:5d:50:c6:01:7d:3c:74:08:
                    49:32:20:e0:c1:a3:4b:7a:5b:e0:de:2c:ad:3c:25:
                    54:8e:64:d5:5a:b4:9f:de:20:d5:78:7a:ba:05:d8:
                    a4:75:4d:c2:4f:b2:5d:d9:87:41:d2:ff:ae:39:ea:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:01:46:D1:29:53:B0:BA:C5:3F:D9:16:38:A2:43:C2:DC:1A:33
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:68:bc:5b:18:a8:1d:2c:d9:69:e2:46:46:48:fa:f4:5d:b4:
         bc:65:91:5d:70:3d:43:22:cc:fd:38:b2:e9:8b:f9:d0:da:be:
         68:15:76:24:f9:82:f2:16:77:d4:11:d8:6b:ed:f8:a8:c0:9b:
         61:f6:bd:48:8b:3d:6d:37:34:2f:72:87:8d:fe:0a:a7:2e:0f:
         70:12:d7:3b:90:9f:a5:58:95:16:6e:21:1c:42:ad:9b:5c:1a:
         44:4d:83:66:38:15:9f:5e:33:2a:a6:0e:ef:15:dc:f9:47:fc:
         fb:79:ef:95:a6:ac:3e:b1:53:cd:65:b7:25:dc:84:df:66:95:
         42:64:f6:a1:55:71:a8:1f:54:5f:86:72:48:70:94:66:bd:d7:
         96:90:80:b0:03:65:a5:6e:21:6a:14:d2:b0:09:80:8e:59:95:
         2e:01:c7:e5:65:76:4c:86:f5:29:e3:3d:b7:80:5c:ed:6f:41:
         b2:8b:af:67:85:5e:73:a9:86:89:c5:40:0a:39:db:fa:09:09:
         28:c0:40:53:ea:86:bf:4f:f6:ef:a2:64:21:30:f5:34:c0:9f:
         6a:64:7a:e6:67:2d:fa:45:91:9f:c8:f8:78:90:3a:df:4b:90:
         b3:24:f9:0e:4b:82:4d:5c:eb:14:17:5d:da:b5:18:4e:f8:19:
         ef:61:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:32:06 2025 by rpki-client