Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: t/4k3LCJp7+eZEQ3Wen64xPaoSD2EiaDNHnaWcHjqGc=
Subject key identifier: CB:5D:9C:17:43:D6:32:E2:D5:16:89:10:43:BB:70:C2:64:15:E6:C3
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019A4DE174E3A704255C875364CDB181DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: 06+SqeZGpjGZKsAHfyx4ladxsNu4JtRC7OHS5tntVds=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:74:e3:a7:04:25:5c:87:53:64:cd:b1:81:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=cb5d9c1743d632e2d516891043bb70c26415e6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:bf:f3:56:9b:e2:72:5c:ca:7a:9b:99:24:
91:6a:8d:27:55:7d:82:ec:6b:81:24:41:fd:29:e3:
f1:8c:cd:95:1b:62:2c:be:79:c1:69:0d:a2:8a:f9:
a6:f6:f2:cb:73:6e:13:17:b5:be:86:28:d6:69:75:
d2:96:55:76:f9:96:9d:07:5d:1e:00:62:a2:e4:95:
29:a3:0a:44:68:3e:22:e6:03:1c:41:86:aa:dd:14:
d2:d2:c7:7d:02:0b:86:77:d6:1e:b7:60:4a:09:91:
70:67:26:82:98:4b:81:25:0b:4f:98:0e:7a:28:6b:
06:47:15:c0:38:87:f3:33:92:0b:07:15:bb:db:6c:
54:70:41:ae:0f:32:76:40:b3:14:65:c0:ec:df:30:
fa:5e:21:83:b8:0c:85:19:d0:29:de:ce:02:40:53:
66:48:b1:1a:fc:77:82:32:d7:1e:66:29:8f:c8:45:
73:8f:f6:68:fe:eb:c5:de:1c:ee:90:33:ff:de:6c:
69:38:23:c6:e5:71:77:68:8c:5b:a6:ec:d7:e0:78:
74:bb:47:0b:aa:ce:25:5e:d6:69:fd:96:d5:1b:5f:
7c:38:ad:77:7f:ec:5f:48:b7:5c:87:07:05:be:62:
00:38:bf:fa:e0:d3:f8:54:f5:17:4b:8f:fc:91:c5:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:9C:17:43:D6:32:E2:D5:16:89:10:43:BB:70:C2:64:15:E6:C3
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:78:f0:b8:b2:59:19:e7:df:52:33:c3:62:50:a6:db:b9:
54:a1:af:a0:fe:02:5d:7a:80:d4:ae:a2:4f:e4:81:17:c0:96:
6a:68:52:77:e9:4c:09:b2:04:99:46:10:b6:bf:ef:49:59:aa:
54:76:f9:8a:39:9e:5f:c6:54:42:cc:0b:bf:b7:9a:ac:d6:a2:
8f:3d:67:f7:00:66:be:de:85:74:e6:46:77:d3:3b:fe:bd:d5:
9e:97:24:ff:02:9c:61:8d:f2:08:7f:c4:7e:3f:1f:94:fc:ef:
f0:01:56:f3:8e:d8:83:16:ce:84:73:75:78:3b:c0:88:16:99:
d1:01:56:86:fc:77:60:35:af:b1:9b:8d:14:8c:23:1f:96:f8:
e5:67:d7:5c:1d:99:66:0a:ca:ec:14:eb:ce:96:cc:f4:7f:03:
26:b7:22:1d:7f:5b:5e:1a:5a:09:95:61:5e:92:23:14:e7:3d:
e3:bd:bf:3d:1f:eb:ba:a2:45:98:ac:c4:4f:a1:35:a8:3f:83:
7a:88:1f:14:c8:8a:b9:2a:5a:86:eb:65:ed:1e:d2:78:95:31:
5a:4e:e9:b9:e9:06:f0:54:e7:7d:df:e0:7a:ed:19:a6:61:77:
88:4f:bb:93:54:a4:c4:5c:30:8f:c8:58:82:af:02:90:3b:5c:
af:64:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:34 2025 by rpki-client