Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: dlEsbPtjoGlfdOYwD3s/MicS2ec8EjWAFbzVkkgHD+k=
Subject key identifier: 95:50:53:1B:07:95:6D:E9:1F:2E:68:8D:7D:27:DD:2C:AD:23:8F:E6
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 0197684E34BC0442E9CE075EA7B1CDB65CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 151C
Signing time: Fri 13 Jun 2025 08:00:45 +0000
Manifest this update: Fri 13 Jun 2025 08:00:45 +0000
Manifest next update: Sat 14 Jun 2025 08:00:45 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: lU36qqPgm+Dl3LoAMzjeAQdvSf9vDzgLPlkHHGVsD8s=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:34:bc:04:42:e9:ce:07:5e:a7:b1:cd:b6:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jun 13 08:00:45 2025 GMT
Not After : Jun 14 08:00:45 2025 GMT
Subject: CN=9550531b07956de91f2e688d7d27dd2cad238fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:7a:4c:e0:70:8b:26:dc:64:f7:55:bb:ae:
0d:e5:ff:11:e2:85:40:e3:85:7c:be:cd:33:02:3d:
fd:70:67:06:96:8c:51:c0:63:79:49:40:0a:4b:f5:
0d:df:27:4f:49:c4:86:d3:2e:78:72:0e:21:f1:5c:
5e:89:54:b6:ec:bd:d4:7e:51:6b:e3:9f:f4:76:1f:
e4:96:1a:01:fc:ba:08:1d:4e:14:61:5f:95:8b:b5:
43:09:4c:c9:bc:3f:c8:68:00:0d:2d:24:a2:28:9e:
7a:40:5c:0a:18:ee:4e:0b:05:db:72:6d:e4:e7:45:
40:56:a1:02:d8:b6:5b:91:94:5a:bc:01:1c:d3:54:
4b:c3:22:d6:2f:9e:4c:40:06:b7:cd:69:7e:84:27:
65:f9:ed:48:7f:28:6a:57:94:e5:ad:5a:d3:e4:50:
c2:99:7a:21:b1:ec:25:3d:46:f1:cb:b3:0f:cc:53:
89:a0:f8:1e:75:ad:9b:2a:08:5c:0a:3e:d0:e8:68:
09:c9:71:a2:5d:72:81:a8:81:a2:20:3e:75:0e:45:
68:14:48:ce:80:e7:b0:f6:0b:9e:5f:8b:e5:e9:aa:
b0:b9:a4:ab:6c:3c:40:48:1b:a6:24:c8:f7:4a:30:
4a:34:3a:35:07:fa:07:06:e7:7f:02:45:a0:79:2f:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:53:1B:07:95:6D:E9:1F:2E:68:8D:7D:27:DD:2C:AD:23:8F:E6
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5f:58:7f:2f:6e:84:f9:82:fe:ad:51:ca:bf:18:bd:e8:3a:
87:71:34:bf:8b:06:6e:3f:b2:a9:3e:aa:10:0b:83:62:8f:21:
63:b9:c9:c6:22:eb:4c:56:cc:74:06:73:d9:ac:5b:2b:61:b9:
79:59:de:82:5b:d9:a0:be:c4:89:72:43:05:b3:94:fa:89:f9:
a3:fa:92:c9:a2:fc:81:30:e4:4a:ae:e8:91:b0:f3:e5:4c:4b:
4c:75:d6:4d:2b:96:00:71:7c:3a:b8:79:10:42:f8:e9:c8:22:
c1:60:96:85:05:4f:37:ec:6a:ff:b1:c8:1e:16:75:1e:1e:de:
18:ff:c1:e0:6d:15:5b:70:33:ae:de:86:95:66:43:b6:97:fd:
ab:7d:79:34:0b:d8:79:a1:1b:c1:e5:7a:fc:fe:e6:0a:84:cc:
72:07:86:27:fb:bd:61:90:e8:b4:02:96:fd:f5:ba:d1:04:14:
ad:37:5a:f2:4e:f8:09:0b:74:57:31:1f:7a:83:cb:14:3d:d7:
3c:7c:07:50:35:04:e6:9f:9e:4d:b4:2d:71:87:3d:ee:cc:96:
e9:99:9b:6e:19:45:b8:8a:c9:b1:62:db:2b:3f:eb:ab:e2:34:
31:53:3d:ea:9c:c8:f2:f4:8c:05:bf:b9:56:b7:c9:ac:a7:be:
a4:9f:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:27 2025 by rpki-client