Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File:                     nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier:          xs4cOAZ56zIzWeDFScruxrdd+xLECV1hovUMQB7WeYo=
Subject key identifier:   2A:8B:0A:04:3C:FC:AE:6D:1F:CC:A3:00:95:AE:50:6C:9D:A9:B6:13
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer:       /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial:       0196AF1FF8580777507B1599AF331AB42CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number:          152E
Signing time:             Thu 08 May 2025 09:00:30 +0000
Manifest this update:     Thu 08 May 2025 09:00:30 +0000
Manifest next update:     Fri 09 May 2025 09:00:30 +0000
Files and hashes:         1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
                          2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: 17bHPpl3KiKZoIpJyrQV/HWoXVppvuTZbGslu8BTmYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:1f:f8:58:07:77:50:7b:15:99:af:33:1a:b4:2c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
        Validity
            Not Before: May  8 09:00:30 2025 GMT
            Not After : May  9 09:00:30 2025 GMT
        Subject: CN=2a8b0a043cfcae6d1fcca30095ae506c9da9b613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1f:23:36:95:fa:79:56:e0:34:44:2a:f0:17:
                    fa:0c:f6:f6:c9:f3:4a:f4:90:88:69:70:27:4d:b3:
                    36:f2:ab:60:21:37:ee:09:57:eb:73:a7:6d:d3:be:
                    ae:f4:86:0e:c5:04:5a:e9:ed:86:e8:2b:02:7c:41:
                    2d:a0:8c:ea:6c:cb:b5:52:ed:2b:2f:0a:5b:83:e4:
                    c0:07:8a:45:52:d8:84:9d:76:b2:09:73:2e:01:ee:
                    3a:ea:e7:af:be:63:b9:9c:b3:22:dc:1d:9f:6a:b9:
                    3d:2c:ce:94:e4:2c:6a:74:07:a1:f1:ea:7b:82:fd:
                    a3:ab:36:5d:32:3a:ee:a1:bd:4b:37:7c:70:90:5a:
                    d4:8c:d1:7e:5c:78:6c:d5:0d:7e:62:f5:ca:ae:21:
                    fe:b8:58:d3:d5:34:aa:31:0b:eb:f1:0f:fe:33:7e:
                    b9:48:26:fc:f9:2e:c8:19:ad:5e:03:d5:1a:9f:61:
                    5b:ec:58:1d:8e:4f:e1:1a:70:b9:4b:e3:9a:1e:cf:
                    b8:37:b1:91:19:7b:5d:df:31:d7:62:a4:30:be:8c:
                    93:8c:f9:ea:28:b5:6e:f2:2f:5d:a6:a1:86:e7:5d:
                    54:ec:cf:f9:56:78:2c:0f:e6:60:8b:93:8c:d8:e8:
                    02:64:a7:39:26:48:bb:27:2c:24:81:c7:67:4e:ce:
                    97:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:0A:04:3C:FC:AE:6D:1F:CC:A3:00:95:AE:50:6C:9D:A9:B6:13
            X509v3 Authority Key Identifier:
                keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:2d:89:5e:8f:18:bf:d5:19:78:a6:ff:91:c9:86:b7:a3:db:
         7e:a0:4b:70:d1:40:47:da:9b:07:3b:f7:a5:03:8e:dd:3c:39:
         3e:d7:6f:cf:22:6c:f4:84:6f:f0:35:25:a8:a3:4d:83:cf:1c:
         68:58:86:b6:57:9b:83:82:e8:64:8c:d1:b4:cb:a3:63:80:9b:
         1b:a1:ee:16:6e:39:94:7e:92:38:96:35:6d:9b:99:25:ef:9b:
         0c:78:04:4f:9e:98:58:68:62:0d:be:39:30:fa:64:e3:61:66:
         6b:8e:61:e3:e2:cc:5b:fe:cb:f0:26:2a:23:00:04:03:a0:5d:
         91:b4:6d:17:b5:47:d4:6b:dd:37:9f:4f:f6:ea:d4:68:fa:89:
         0a:ef:aa:7a:a2:ba:2f:44:ef:68:d5:61:7f:dd:e5:02:52:92:
         e5:af:85:4e:4c:c3:36:14:e9:55:7f:11:31:f4:ec:4f:74:3c:
         b5:77:be:50:8e:4e:19:52:fd:b5:9d:4c:b9:bb:4e:a1:58:e8:
         a7:6e:bd:97:66:45:8c:51:39:5a:1d:3c:b4:6f:ca:42:4e:cc:
         57:4a:4c:fb:19:77:fb:e9:db:08:80:db:11:ba:dd:7f:f2:39:
         f3:64:29:91:bc:46:30:cd:63:8e:19:a9:21:3c:09:50:4a:fb:
         a6:54:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:18:04 2025 by rpki-client