Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File:                     x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier:          hoDTSgDjs/kANzm7kFLykjH+hVUfN6e25t63vtWl+M8=
Subject key identifier:   40:44:E7:BA:F4:0A:2E:AE:05:77:1B:C5:73:5D:00:54:CA:19:40:90
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer:       /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial:       01976EF53A3DBA5BBE16017F4BC856435741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number:          46
Signing time:             Sat 14 Jun 2025 15:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:54 +0000
Files and hashes:         1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: rH+hpcH32jXtskXyjzittwKbbvuSmTC2rHy825Gw/Hc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:3a:3d:ba:5b:be:16:01:7f:4b:c8:56:43:57:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
        Validity
            Not Before: Jun 14 15:00:54 2025 GMT
            Not After : Jun 15 15:00:54 2025 GMT
        Subject: CN=4044e7baf40a2eae05771bc5735d0054ca194090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b7:47:3b:b0:64:f4:2b:43:7d:24:9d:59:16:
                    35:cf:b7:00:9a:45:5d:22:c0:65:3d:d8:f5:f8:06:
                    04:d7:f6:e2:ac:fb:db:a7:f2:57:55:aa:d1:0a:f2:
                    32:bd:10:a7:c4:b7:f4:d9:b5:98:cd:00:44:b4:35:
                    0f:34:bb:f2:93:dd:4e:1f:c3:58:ad:62:b7:c1:43:
                    d6:a1:ba:a6:21:a3:88:9e:70:45:52:08:12:4d:20:
                    72:93:65:e9:3b:7f:39:c6:2d:0f:cf:97:53:53:05:
                    58:1e:b1:a8:d4:4f:5a:a4:ec:84:b5:06:b5:f9:f3:
                    d5:75:03:3f:c6:23:0f:e5:e7:5d:97:0c:19:c8:a1:
                    a6:5b:2a:4e:ae:b7:22:6a:5c:e1:9d:f5:04:22:41:
                    dc:c9:22:6f:80:7f:e8:a0:03:06:2f:e3:d2:bc:be:
                    8e:8d:03:c4:d6:09:e6:73:39:b1:aa:4d:d5:de:d5:
                    c9:af:5e:ed:14:8a:b4:3a:9f:d0:ee:00:e3:33:60:
                    b4:0b:2a:b6:68:6f:d5:56:ea:01:f8:36:ef:f5:da:
                    ac:25:2a:1c:28:26:20:85:f8:04:af:2a:51:8f:94:
                    ed:0e:b6:98:86:40:d1:5f:44:0b:a9:fb:93:48:62:
                    92:bf:b1:8a:6c:72:9b:f4:bd:67:cd:5c:0a:d7:4c:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:E7:BA:F4:0A:2E:AE:05:77:1B:C5:73:5D:00:54:CA:19:40:90
            X509v3 Authority Key Identifier:
                keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:88:52:f5:9e:54:a9:c7:e8:f4:d2:31:5b:77:22:03:12:06:
         c7:2e:9e:1d:59:3b:58:40:2f:d5:78:67:65:1d:0e:d8:ea:fb:
         b0:03:20:ed:83:1d:9f:2f:4d:58:26:1d:9c:8c:23:13:b2:d9:
         d3:52:4b:23:7c:ba:0a:4c:7e:51:af:9a:b3:81:8d:88:02:46:
         4d:66:e5:71:48:e7:25:65:60:75:b4:27:9a:30:28:cb:46:36:
         a9:7e:a8:72:ab:1a:f3:4f:c3:3f:05:c5:ce:e1:f2:de:a2:ab:
         f7:25:99:28:5d:d9:ce:e1:85:13:58:fa:65:97:5e:57:39:bd:
         12:6b:3d:b6:c3:44:d3:e3:fa:04:96:9b:29:74:e9:6d:3f:81:
         87:cd:99:11:18:db:67:1f:fa:c8:39:fb:d4:62:ca:8f:34:ef:
         fd:98:88:61:83:cc:77:07:da:1b:0f:1a:6f:19:b5:5e:1b:c2:
         75:b8:b5:59:da:ae:51:32:54:ca:b2:92:fc:23:17:e6:85:75:
         f3:ec:90:6d:eb:7f:38:3a:50:bf:6f:85:4d:4a:1b:6d:9f:92:
         9d:8b:72:92:84:51:13:2a:11:fa:d7:c7:f4:21:6f:d1:32:57:
         32:a8:77:7d:0e:c5:1d:61:bf:94:5f:45:6f:b1:10:f2:38:26:
         53:98:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:33:42 2025 by rpki-client