Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: d+FkALySIaUCTBCrBeoLbcQFgL+WB1CKBlc2eFdVyhY=
Subject key identifier: DB:30:35:9F:75:DF:AB:95:60:84:FF:FF:74:3C:52:37:EA:67:05:F5
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019674FA2E38C82865A924C0BDF8BA65E5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 149E
Signing time: Sun 27 Apr 2025 02:01:14 +0000
Manifest this update: Sun 27 Apr 2025 02:01:14 +0000
Manifest next update: Mon 28 Apr 2025 02:01:14 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: bOTxE9gL8Gx5tPpO5srN7ZMbEW7Fs0ILJlwUOlxuLsU=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:2e:38:c8:28:65:a9:24:c0:bd:f8:ba:65:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Apr 27 02:01:14 2025 GMT
Not After : Apr 28 02:01:14 2025 GMT
Subject: CN=db30359f75dfab956084ffff743c5237ea6705f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:cf:6b:47:ed:43:f0:85:54:60:17:2d:0e:
cb:4c:81:e1:43:8a:08:2b:7b:ab:7c:8f:8b:46:2f:
2a:1e:9b:49:7c:29:01:2a:60:ee:1b:0f:4a:9b:29:
60:a2:b6:9d:22:4c:9f:90:91:3f:06:3c:0a:d3:a9:
75:95:b8:3e:9f:fe:02:d1:8c:6b:3b:35:25:6d:98:
54:2a:1c:84:ca:91:98:c7:fb:01:0d:6d:26:11:55:
9c:06:c9:b2:cb:b7:f6:da:f6:48:74:4c:93:6a:f1:
f6:12:3b:6d:e2:fe:76:38:27:8f:57:c5:bd:39:a2:
bd:4a:b5:af:8c:68:0e:66:3f:3b:7c:84:2a:34:47:
97:56:e8:ab:77:91:7f:cb:00:6c:2e:68:e6:fc:10:
be:99:25:c7:c0:5b:fe:ba:4f:aa:b4:94:96:67:c6:
84:c7:d9:26:9c:98:b5:d8:f8:9c:d2:de:b1:60:80:
1e:3c:f5:2c:a4:6c:ca:b1:35:9d:16:f2:0f:77:ba:
66:50:59:0a:81:0a:bc:bb:80:c4:dc:64:1d:43:93:
55:e3:7c:50:f8:04:44:d5:27:c5:08:f6:75:79:43:
fc:6e:05:95:34:ff:45:4b:44:b8:30:b6:e6:2d:f1:
db:d8:77:8e:0a:c2:a5:eb:48:a5:4f:e6:2f:3a:8a:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:35:9F:75:DF:AB:95:60:84:FF:FF:74:3C:52:37:EA:67:05:F5
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:b0:7d:55:15:1e:f4:d2:50:f3:92:af:b1:dc:b4:c1:84:
7b:d8:16:35:e8:a7:b2:33:df:5c:22:8c:00:db:aa:5d:bf:6a:
2e:05:d1:9b:df:0b:80:7d:5c:52:bc:fa:ac:2d:fb:41:6b:92:
54:20:75:33:27:8f:3b:9a:a4:4b:d4:4a:86:81:b7:e8:8b:2c:
b6:e6:69:54:85:26:af:a1:b5:6e:30:39:40:48:70:00:69:5e:
ba:c4:63:91:37:25:73:45:57:56:d1:6b:5d:06:fd:ef:7d:9b:
88:80:d5:e6:dd:fb:50:bd:dd:e0:d6:f2:8e:cd:36:42:63:ca:
89:8e:d4:f0:b3:74:5c:4b:18:97:c1:ed:31:24:02:5b:e6:9d:
3c:59:2e:6b:ac:75:86:b0:c4:35:f0:d7:2f:c8:5e:bf:81:25:
b2:d6:9e:8b:ba:08:15:22:fb:7c:7b:aa:0e:23:5c:0a:cd:c8:
c2:c1:d8:01:52:94:89:59:f3:cc:b4:6c:3e:9f:c6:cd:81:61:
2d:9f:1a:b2:1f:99:29:15:0b:5b:40:5a:97:2a:24:3f:22:2a:
9c:cb:98:9b:a3:2d:c9:73:97:7b:88:3f:5a:4f:18:b5:d8:17:
33:3e:68:dc:fd:d9:1b:0c:21:c5:db:f1:43:5d:c8:0a:06:07:
02:0b:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:08 2025 by rpki-client