Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: SZukb+pcYc4rr0wXi5WDlcE7d039KaDn7MphcfhGBp0=
Subject key identifier: F3:05:0B:53:A7:DB:24:27:67:CB:B6:DB:67:87:77:4D:83:6E:22:C9
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 019771F641F37CB2FDBB50D5E02C14F0177F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 05:00:53 +0000
Manifest this update: Sun 15 Jun 2025 05:00:53 +0000
Manifest next update: Mon 16 Jun 2025 05:00:53 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 6v8c0/FkEKoQEmOz0D5RNT9QkDczhR7h4l2u4FTJMtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:41:f3:7c:b2:fd:bb:50:d5:e0:2c:14:f0:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jun 15 05:00:53 2025 GMT
Not After : Jun 16 05:00:53 2025 GMT
Subject: CN=f3050b53a7db242767cbb6db6787774d836e22c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:bd:b8:ca:84:92:7e:c6:a3:91:39:f4:b7:
01:d2:05:48:25:61:b3:bd:51:ef:09:d7:7b:6b:36:
50:db:4b:93:74:af:af:a1:06:a4:34:bf:73:ae:09:
05:a6:db:43:75:16:39:82:e6:69:fb:bc:56:6e:9a:
65:08:0e:76:66:fb:41:3e:2b:88:0a:27:69:a1:a4:
20:97:99:72:c3:17:83:5e:28:53:c7:8a:97:49:96:
05:96:d4:0c:8b:c4:aa:7a:59:f5:32:69:b6:da:c2:
44:67:0b:1e:b1:37:07:fd:b4:73:ce:d4:a8:6d:f5:
a0:36:3c:0a:a8:6a:f6:52:24:b3:2b:c8:bc:27:c2:
40:d7:0b:2d:d0:76:59:30:30:27:58:66:62:df:8a:
13:50:be:86:54:85:dc:6e:fc:34:ac:56:00:07:64:
cf:0d:1d:12:d0:a7:1b:c0:3b:28:b7:d2:c9:cd:bd:
a3:07:f9:35:1f:8f:0c:d9:19:23:eb:78:32:11:4e:
b2:09:50:92:79:4f:be:7b:82:3a:3e:01:5e:87:c3:
90:94:e0:bc:89:9f:7a:8f:24:46:d3:21:99:86:fc:
82:32:f0:74:10:64:71:19:27:54:76:e8:fb:02:91:
73:1e:0c:0a:05:69:de:99:a0:43:2a:2d:8a:64:ab:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:0B:53:A7:DB:24:27:67:CB:B6:DB:67:87:77:4D:83:6E:22:C9
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2b:b1:4d:1e:e1:9f:1a:e1:16:f6:c5:3c:1a:6c:c5:7b:62:
e1:11:08:14:96:9f:cd:e2:9d:0e:7c:8d:2d:dd:6d:ca:4e:bc:
e9:7a:3a:cd:da:a7:0f:cb:9e:43:c3:5f:36:e5:30:e0:7e:3d:
91:de:df:ba:c3:15:66:8a:a0:d7:06:ba:72:ca:20:b6:61:eb:
88:06:c5:53:a6:71:ce:51:bd:04:3b:80:6d:06:ae:23:3b:c3:
75:bd:55:92:4c:b2:61:ed:ac:89:7f:24:0c:6d:90:80:d5:e9:
fc:0d:d5:19:01:7a:ff:bc:99:8c:1b:5f:64:73:75:de:c1:8c:
19:0a:f2:be:aa:85:65:10:8e:fe:e9:ae:64:7e:ef:d7:3f:36:
34:3a:c6:d6:ba:98:d4:84:41:92:8a:66:1d:aa:af:99:3d:08:
b3:e1:9d:bb:5d:6f:c9:d4:8b:39:68:76:f8:5f:65:47:72:75:
ad:28:85:4c:47:a0:80:78:80:ce:8b:da:31:c1:0b:1a:5c:34:
af:94:c2:c8:25:eb:73:27:24:66:cf:8f:a7:fc:e4:1e:9b:c2:
d8:53:34:6c:a7:db:44:67:f5:54:2f:5b:24:07:d5:2d:cd:81:
05:83:91:be:f8:be:dd:ed:06:db:07:e3:65:47:08:e2:1f:e3:
b5:e5:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:45:51 2025 by rpki-client