Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: D5LhcEr9bfJE3aDlISzJiqfLEAnUXizeYBGwnuugFj0=
Subject key identifier: A5:D4:B0:DA:C1:DB:5B:55:C6:8C:44:11:EF:7D:6A:53:06:66:F3:48
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 01992C34F05624824763641C419C64FE6E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1606
Signing time: Tue 09 Sep 2025 02:01:30 +0000
Manifest this update: Tue 09 Sep 2025 02:01:30 +0000
Manifest next update: Wed 10 Sep 2025 02:01:30 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: 6aNaeMXUzockxVC23KtOyQendA7UH9eIK6n1RR3EEyg=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:f0:56:24:82:47:63:64:1c:41:9c:64:fe:6e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Sep 9 02:01:30 2025 GMT
Not After : Sep 10 02:01:30 2025 GMT
Subject: CN=a5d4b0dac1db5b55c68c4411ef7d6a530666f348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:64:a2:54:20:07:d8:67:e4:36:54:24:12:
d5:13:14:9c:77:de:36:92:e9:7d:1b:9c:78:c3:71:
30:5c:a8:aa:df:0b:c7:1a:a0:47:6d:4d:cb:2d:02:
ba:6a:04:eb:7b:45:ee:7f:ed:cc:8f:79:39:81:1c:
77:82:11:de:9c:35:d2:f5:27:d7:24:39:95:b6:9f:
7b:53:81:92:c6:8e:ff:37:aa:eb:19:8f:48:15:c1:
e4:b2:37:a1:f7:e1:16:00:5c:b5:5e:28:4a:82:09:
90:c9:0d:de:5c:f3:89:87:a4:cb:fd:9b:ba:53:d4:
d9:c5:99:e7:11:00:73:31:9c:f5:87:39:61:78:11:
ce:2a:f1:5a:1f:1f:ee:bb:77:a3:5a:fb:e0:ae:d6:
c0:8e:17:4b:68:e2:f8:9b:61:5c:12:85:b1:5a:94:
a5:2d:7a:91:d8:1e:fd:ed:23:d9:87:69:9a:a8:14:
03:84:24:9c:6d:8e:61:f7:56:b1:84:90:66:7c:05:
f6:49:6b:9c:49:15:f7:75:47:73:79:cf:24:51:af:
6d:d4:8f:ba:0b:40:1e:28:d0:51:d4:f6:f7:43:22:
81:28:b0:8a:96:b4:c9:a9:73:9b:62:71:77:3f:b6:
ff:12:8f:76:d3:53:c3:1c:34:a1:66:ae:ba:d3:c3:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:B0:DA:C1:DB:5B:55:C6:8C:44:11:EF:7D:6A:53:06:66:F3:48
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:60:9d:cf:88:cb:94:54:43:29:d6:fb:eb:24:86:df:5e:ce:
06:ba:d1:8e:4a:c9:4c:34:fc:0b:18:79:cd:d0:b1:7b:32:5b:
65:19:c1:f7:97:2f:f7:b2:00:5f:d5:74:65:5a:88:77:8a:31:
40:58:33:83:a1:ba:2e:8f:a1:58:98:d7:d2:19:63:cb:f2:96:
78:02:03:70:b8:60:90:0a:2e:4e:b2:41:e8:5a:90:62:cd:d0:
c7:54:ff:84:ff:70:10:0c:51:cf:e6:1f:0f:af:f1:05:34:38:
2f:4d:c7:fb:20:5c:bc:16:51:c4:a0:0c:5b:13:b5:d5:26:2b:
0f:00:92:ad:82:91:0d:62:a4:3d:a9:06:db:45:0e:cc:e6:df:
d5:2d:76:95:02:17:8a:47:46:e4:2b:b9:b9:ae:ab:dc:cb:ee:
fe:d3:6a:79:be:8a:fa:0d:b3:12:31:33:83:c4:33:5e:1e:73:
76:a2:af:7f:55:bb:ea:e8:28:3e:87:e0:e0:47:14:39:c8:0c:
14:c7:97:50:6f:0d:db:42:44:e8:57:28:52:d2:73:83:5e:5a:
d0:23:02:78:f3:5d:6c:76:ae:1a:77:68:eb:98:b6:15:8a:1f:
9f:7c:f4:44:d5:96:0e:e7:fa:21:c3:d0:90:78:e1:c2:99:56:
86:a7:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:59:38 2025 by rpki-client