Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: g4VItU6asUO6vtbckB8dw+4jkFJdMGHCCIe99xsA1T0=
Subject key identifier: 66:E6:B5:96:2A:BB:FA:F6:71:0B:93:B4:E7:01:7A:8D:D8:CD:FA:8F
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01984287A112C3B5DB6ED7BCFE9AA9A28F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 158D
Signing time: Fri 25 Jul 2025 17:00:41 +0000
Manifest this update: Fri 25 Jul 2025 17:00:41 +0000
Manifest next update: Sat 26 Jul 2025 17:00:41 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: fT356Ug2ifTzRUMvNZkyV4Xsy7ACSLyDZFKnPf6Ly40=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:87:a1:12:c3:b5:db:6e:d7:bc:fe:9a:a9:a2:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Jul 25 17:00:41 2025 GMT
Not After : Jul 26 17:00:41 2025 GMT
Subject: CN=66e6b5962abbfaf6710b93b4e7017a8dd8cdfa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:cf:39:21:43:62:57:c1:76:d7:ae:a6:65:
08:57:42:ef:d0:92:91:b6:a5:1f:69:87:43:2b:cf:
1b:41:e1:f6:18:98:aa:d5:87:21:74:ba:89:eb:51:
93:80:04:5f:61:2e:a4:f1:1c:f3:17:ba:3a:0d:ed:
5b:ef:57:d1:b2:a1:ff:ca:9c:36:04:8f:c0:6c:0f:
56:bf:e4:6c:9e:57:d4:f3:13:60:f6:36:1b:90:b7:
16:20:9a:f8:e2:6a:03:6f:56:44:5d:0d:b1:7c:d1:
41:56:40:93:13:23:d9:af:8c:2a:85:77:0a:bf:b0:
9f:66:dc:e7:54:6f:84:bd:76:0d:d3:c0:0b:46:d9:
9a:e2:11:0e:ca:94:fe:15:c4:9b:5c:b2:cb:c4:b6:
c6:60:a0:68:07:cb:99:b3:9d:18:91:98:85:d4:7b:
86:24:04:81:11:88:5d:d6:8f:bd:c7:ed:8f:7a:9c:
8e:0c:ad:45:18:bd:ee:91:56:5b:af:a4:02:e7:54:
74:3f:65:a4:96:51:1f:de:29:71:a0:95:04:08:c0:
9a:44:b4:ae:13:ae:1b:04:1f:88:b3:1a:8c:dd:6e:
f8:eb:07:45:b8:03:17:e9:97:60:f8:b0:df:ec:de:
47:24:52:4f:39:c4:59:ac:be:40:6e:a3:af:85:10:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E6:B5:96:2A:BB:FA:F6:71:0B:93:B4:E7:01:7A:8D:D8:CD:FA:8F
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a4:e4:07:9c:22:38:7c:06:0e:6e:e3:ef:a9:c1:02:5d:61:
63:96:f1:78:6b:c0:fe:bc:2b:96:f1:c6:2a:f5:80:19:c3:54:
9d:34:1d:30:cb:34:6f:49:1d:4f:00:8c:43:f9:60:e4:7e:a9:
cf:0d:63:14:3a:8e:e9:d3:a1:f0:8c:a3:6d:04:73:ea:7b:3a:
d9:72:42:cd:1e:50:80:02:03:f7:9f:66:39:6a:67:bf:ee:69:
c6:4b:2f:d1:e9:19:66:2b:a5:7a:08:90:ca:13:25:9b:9a:a2:
43:f9:a8:67:ba:45:22:e5:c9:5b:1d:93:d5:5c:61:fc:a8:7c:
a4:fd:a8:84:78:2e:8d:87:8c:d0:46:71:a5:c7:6f:dc:c0:36:
e4:b3:e1:bb:e1:d4:70:ae:63:22:22:f5:a1:ff:4e:e5:cf:7e:
c8:ef:3a:6b:1b:c2:dc:1b:12:70:b4:c3:b9:3c:9f:98:5e:d1:
b9:5a:46:98:e4:f2:50:8f:ca:87:b2:fa:bc:1f:9e:a6:0b:e2:
32:15:f6:cc:9a:c0:8b:dc:64:f1:72:06:96:b2:d1:39:83:6b:
87:4b:7a:13:34:95:7f:85:0c:ca:aa:db:c4:53:73:e3:47:6a:
a1:7d:ba:19:1a:6a:39:09:d2:b9:30:d5:a9:5b:89:f0:74:21:
0c:61:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:21:41 2025 by rpki-client