Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
File:                     NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft (raw, json)
Hash identifier:          BPob1F8+JWvyo1UgkN+Nty0Nc++pRxcymV5T4iC87Oo=
Subject key identifier:   05:E4:59:66:4B:0D:73:2E:67:98:A9:AC:69:01:39:AE:19:80:34:79
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Certificate issuer:       /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial:       0196C34BEB52C9738C94CADDC9C372846365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
Manifest number:          148A
Signing time:             Mon 12 May 2025 07:00:54 +0000
Manifest this update:     Mon 12 May 2025 07:00:54 +0000
Manifest next update:     Tue 13 May 2025 07:00:54 +0000
Files and hashes:         1: 1lVPkkjQFhK0hASM76LaKqMw8Zs.roa (hash: XOFVSZleZP5fsRci6+Onq4xznm5gGBHazy8lj9Vtasc=)
                          2: NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl (hash: oq5yfnw5k2situmRnW+guOnRVHg9B+Q7vUwe6aHsZuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4b:eb:52:c9:73:8c:94:ca:dd:c9:c3:72:84:63:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
        Validity
            Not Before: May 12 07:00:54 2025 GMT
            Not After : May 13 07:00:54 2025 GMT
        Subject: CN=05e459664b0d732e6798a9ac690139ae19803479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:68:67:1c:32:84:e8:0b:ad:58:72:ec:12:
                    12:0b:b2:ce:66:de:ac:90:dd:d7:89:ba:d8:ac:e5:
                    50:7d:06:71:42:1f:7a:1c:a5:9c:b7:6a:6f:f5:9a:
                    c5:44:54:dc:8f:e6:e4:50:29:31:79:a2:2c:12:a1:
                    ec:df:4d:97:11:c0:67:5e:8b:14:35:f4:4b:24:f5:
                    19:b5:de:83:62:ef:97:78:52:96:f8:75:f1:c7:ef:
                    86:54:b4:41:7f:0d:d0:3b:c2:71:9c:90:0e:c5:d3:
                    70:5f:c2:d7:78:f0:a9:e8:41:e1:3a:33:15:89:b8:
                    b8:46:92:39:bc:e1:03:d6:96:56:e7:6d:52:fb:ea:
                    e4:6f:a6:a7:a0:48:b2:af:55:56:b1:6b:16:a4:a6:
                    6f:be:ef:3e:26:e2:47:c8:4b:be:cc:dc:4b:bc:62:
                    fe:db:5d:6d:18:47:b8:09:cb:4b:39:1e:3b:78:6d:
                    54:fc:23:24:b5:4b:23:9d:f1:97:fe:e0:09:be:55:
                    7d:05:56:d0:0d:d6:aa:9a:cc:7b:05:28:dd:28:75:
                    03:92:27:da:80:3f:35:7a:ce:45:ea:d0:fc:9d:91:
                    0e:62:70:ce:04:9f:21:5f:44:80:52:f4:a0:2d:ce:
                    e4:ca:e5:0c:33:12:0d:92:85:36:1f:fa:eb:19:49:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E4:59:66:4B:0D:73:2E:67:98:A9:AC:69:01:39:AE:19:80:34:79
            X509v3 Authority Key Identifier:
                keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:75:0a:f5:ba:a0:1c:d7:c7:26:67:63:d3:c8:a1:8f:fc:44:
         52:3e:ae:a4:84:d9:ee:da:31:77:cd:fe:69:23:eb:c9:02:aa:
         d5:69:08:25:87:ea:54:85:b7:66:67:8f:02:89:54:b6:4b:d7:
         72:d5:99:7b:c7:84:0d:36:1d:22:a2:88:2e:d4:f5:41:b8:92:
         68:98:71:f9:78:21:cf:38:0a:1c:30:23:4c:cd:ca:1a:1b:96:
         68:d2:ba:db:29:25:4c:bb:3c:c0:d6:6a:3f:83:70:40:83:16:
         bb:1f:95:d4:aa:ad:36:e4:30:e3:8b:fa:9c:56:ae:93:c8:d5:
         97:f7:89:ae:5e:ef:b6:77:e7:e0:78:1c:dd:0d:4a:84:b4:38:
         61:b0:c8:57:8f:fb:e7:00:c7:96:7e:d4:c6:af:40:86:40:d1:
         fa:24:a9:b3:e4:50:88:d5:23:1b:b9:8c:69:b7:27:ca:bb:d2:
         6d:3e:ad:bc:1d:53:6f:44:cb:2e:f4:52:41:c3:14:ee:02:85:
         fc:8b:fa:1f:77:a5:2f:53:c1:9b:48:4e:87:92:3f:1a:13:d7:
         1a:be:98:c6:ce:2e:08:3a:23:6a:77:0b:29:94:da:2a:04:1e:
         df:29:b2:58:1d:2e:e5:1a:ca:17:f9:3a:36:17:ae:b4:cf:f3:
         29:d7:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:24 2025 by rpki-client