Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: u3AP9+1enykxr5msSad8/Pg0Qxy11yzxjuJJw1FDCHU=
Subject key identifier: 65:89:EC:03:99:48:9A:10:FA:BA:8F:E2:4B:16:36:08:9B:92:27:00
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01965236B49D91FC79503099888F3BBD388E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1507
Signing time: Sun 20 Apr 2025 08:00:38 +0000
Manifest this update: Sun 20 Apr 2025 08:00:38 +0000
Manifest next update: Mon 21 Apr 2025 08:00:38 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 5ffvNVRxKFxgnakVOtA6KALcWviVtKLHtWbLrGdcRhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:b4:9d:91:fc:79:50:30:99:88:8f:3b:bd:38:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Apr 20 08:00:38 2025 GMT
Not After : Apr 21 08:00:38 2025 GMT
Subject: CN=6589ec0399489a10faba8fe24b1636089b922700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:f9:c7:da:99:3d:e4:79:89:ab:02:5e:f6:
69:77:e2:63:b7:d7:99:fb:7e:76:76:3d:f7:2f:a1:
75:63:7c:f8:04:cd:34:bc:14:1f:6c:21:64:ff:b3:
f5:0e:70:1a:eb:1d:ff:e0:5c:8f:44:92:fe:fd:1f:
d7:dd:00:f4:7a:58:d7:31:96:ab:73:8a:0d:26:4c:
f2:5f:6a:b6:2f:ea:21:53:93:0a:39:5e:b2:fc:05:
d4:be:71:a7:f9:11:c4:e1:41:18:38:fb:23:f0:83:
ad:90:0e:48:cb:e9:da:f1:c0:82:12:72:19:9a:99:
9d:ef:75:5a:2f:26:b1:2d:5f:45:7e:4f:8f:3b:c5:
27:8f:2b:19:b5:85:dd:79:51:cb:96:a7:d3:07:10:
64:6e:b1:ce:85:dd:50:94:5d:dd:2b:65:58:18:3d:
b6:83:9d:ea:06:c1:40:81:5a:83:47:45:26:eb:a3:
57:23:dc:b6:b0:b8:82:cb:09:ce:18:b0:c2:b4:86:
ad:cd:4e:4f:dd:2d:96:61:48:1a:7d:00:fa:4f:e5:
47:54:62:c3:37:26:7e:68:ca:e4:45:55:94:bb:6a:
78:79:8d:e8:c7:97:ed:b2:e6:33:12:f7:e3:1a:c8:
6f:6b:5a:7e:1a:32:03:df:bf:91:3e:ac:8f:66:6d:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:EC:03:99:48:9A:10:FA:BA:8F:E2:4B:16:36:08:9B:92:27:00
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9e:a1:9f:1f:4a:70:20:e2:2e:62:fa:8e:de:ea:a8:7a:43:
41:66:31:d7:3b:d4:d4:46:bf:fa:92:65:1c:08:3f:ce:fb:1e:
26:0d:88:d0:05:3f:2f:c0:26:75:3a:90:4f:5d:c8:fa:d9:86:
32:5e:5c:cd:63:ed:57:a5:1f:fa:bf:d7:3f:05:9f:f7:e6:d3:
b4:c0:e5:d0:af:27:ac:f8:77:e6:36:0b:a6:f7:ee:5c:d7:8e:
da:17:4d:11:9c:b5:49:39:6e:6e:4c:ca:f5:95:87:1b:5e:d6:
7d:89:1e:fc:c0:a3:0f:b1:9e:50:aa:f9:45:64:6c:b3:f0:d3:
88:d7:61:a8:cd:66:59:c1:8d:e9:dc:df:f6:06:11:e1:da:ca:
d8:00:bd:6d:00:69:20:50:d3:26:7d:5b:f0:46:e7:8c:ff:17:
e8:b3:a7:ad:23:a7:65:9e:03:6a:b6:80:ad:a8:f3:c3:e1:7c:
f3:7c:3b:4a:5c:9b:97:be:3a:ab:e3:37:1c:d6:c3:8b:ab:e2:
6e:3b:27:f9:97:5c:fb:91:5c:ec:9d:c4:3e:4a:7f:3d:05:e1:
51:a4:fd:29:88:9e:5e:98:55:7e:e4:98:64:b6:25:72:ef:b9:
61:01:15:37:c2:7e:e9:cc:eb:a8:cf:4b:0d:3b:e4:e8:92:e4:
f4:f0:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:50:14 2025 by rpki-client