Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: R2z2yscx7aMbXcAMpJsZswP5efIQhXsJzX2BBkJLpQ8=
Subject key identifier: 42:F5:D3:30:8E:27:AF:48:31:48:57:A4:14:A3:AC:30:96:EE:F5:AC
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019650489A94B38D11A723E834919EE1D020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 23:00:57 +0000
Manifest this update: Sat 19 Apr 2025 23:00:57 +0000
Manifest next update: Sun 20 Apr 2025 23:00:57 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: eVhzcGLcl+0tvBk3tu9AQB7P9EHTJLMVbq3dmG3N0zo=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:9a:94:b3:8d:11:a7:23:e8:34:91:9e:e1:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Apr 19 23:00:57 2025 GMT
Not After : Apr 20 23:00:57 2025 GMT
Subject: CN=42f5d3308e27af48314857a414a3ac3096eef5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:c6:2c:17:91:5f:46:03:b7:e3:28:e9:fa:
02:ff:27:e9:74:80:87:38:60:4b:68:cd:7d:4b:14:
99:0e:c8:ba:0e:31:26:7c:e7:35:41:d5:e9:9c:39:
be:d8:f0:18:5f:28:8d:a2:7f:2d:a8:61:2f:b4:f9:
7d:85:96:16:51:7c:30:74:14:25:29:49:ff:5f:d4:
cf:e2:49:59:66:e5:e7:59:cd:84:aa:d6:ca:38:ab:
85:6a:f9:95:29:dc:d7:68:0a:7b:fa:69:73:92:e2:
bd:55:68:97:79:0f:54:9d:5c:8a:be:ca:69:f3:eb:
50:f0:55:de:59:77:f7:f8:b2:42:da:db:f2:bc:65:
80:6c:41:9a:35:0a:3d:48:20:4b:be:60:af:d7:41:
3b:1c:34:18:bc:35:4a:aa:50:76:d6:45:65:94:e2:
b1:e8:55:82:38:78:e0:3b:99:80:63:a0:f2:2b:73:
b6:ac:02:ba:59:83:a8:9d:c8:49:7d:0b:f0:9e:66:
3d:63:f7:3a:13:10:cb:37:9b:a4:f7:1e:30:d8:1d:
92:c9:f7:47:b9:b7:46:f4:ca:34:1c:a3:aa:62:94:
92:ad:e6:ab:b2:b9:2b:bd:da:43:79:96:09:e1:4e:
6a:cb:97:d3:2f:3e:d0:4c:7d:07:98:a0:80:2e:fb:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:D3:30:8E:27:AF:48:31:48:57:A4:14:A3:AC:30:96:EE:F5:AC
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:d1:43:f0:ac:0f:b1:bb:ae:db:88:ed:4b:72:de:71:e5:
d9:25:b7:84:ec:8a:be:79:17:56:78:b9:45:88:a1:16:15:1e:
f2:31:1b:16:0f:3d:e4:55:a0:1e:e7:78:4b:46:e7:c1:91:ab:
a0:1c:92:45:3b:ec:11:74:53:11:c1:d8:67:f8:27:b9:67:2c:
cf:d5:63:eb:b5:98:8e:c0:f8:6e:52:1e:33:b2:ed:62:3a:4f:
82:62:b2:af:e4:08:92:2b:7f:31:50:ac:2e:59:c9:a5:d6:71:
b2:88:2f:48:4f:c7:48:a6:1c:d8:f5:ac:20:ee:10:2a:13:20:
79:34:fb:fa:25:c6:b6:70:22:3b:bc:31:53:4b:92:d1:4e:f8:
f0:a8:18:e0:92:b4:c9:34:18:75:32:a6:56:29:d5:54:6e:c0:
0a:1c:30:59:eb:3e:18:b8:02:5f:d5:22:33:ca:fa:95:7a:0d:
34:c0:ea:da:81:4a:4a:8f:ef:75:17:a2:bd:bc:23:a1:fb:65:
3e:5b:32:eb:b3:17:c9:23:2c:8f:a5:87:6f:5d:f5:0e:e9:a1:
21:ee:2a:be:32:30:ad:9b:20:44:f4:1c:2b:c7:8b:c2:51:71:
89:ec:8e:83:cd:1d:2c:e1:fc:57:da:77:99:3e:68:58:6a:18:
fd:10:23:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:59 2025 by rpki-client