Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: 47UqlHuoYzXSuPco9kdI96eohrAoM7yM8x+iU6w8I1s=
Subject key identifier: 19:8C:73:A2:57:46:C6:80:A5:80:08:6C:F7:6F:63:DF:4E:4E:77:C9
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 019A1BAC32A9EC154BA4D769C189034531F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1682
Signing time: Sat 25 Oct 2025 14:01:01 +0000
Manifest this update: Sat 25 Oct 2025 14:01:01 +0000
Manifest next update: Sun 26 Oct 2025 14:01:01 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: MyeAlJV9Ll3Pt/j8YJP4F40v1yDygrZGMOHUcAqu6Mc=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ac:32:a9:ec:15:4b:a4:d7:69:c1:89:03:45:31:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Oct 25 14:01:01 2025 GMT
Not After : Oct 26 14:01:01 2025 GMT
Subject: CN=198c73a25746c680a580086cf76f63df4e4e77c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:1b:a2:94:12:4e:86:d9:b0:bc:c5:de:d3:
7e:e7:d9:d7:49:df:00:13:e0:89:cd:50:90:4e:39:
47:d2:85:43:e0:01:fe:4d:b3:68:92:7e:9d:b9:0f:
2d:17:97:e9:0b:72:f6:23:59:8b:94:68:28:1c:3c:
08:13:cd:3d:94:fd:f4:a9:24:59:eb:7e:ed:dd:d1:
66:03:e8:95:ad:92:46:34:58:62:c8:fc:8a:e0:25:
44:73:29:19:54:58:80:47:ae:d7:d9:a1:33:ff:90:
c2:5a:3e:25:e5:8d:fb:2a:69:25:70:c5:00:2b:5d:
e8:8b:16:e5:89:08:79:42:e5:ed:d2:d7:c3:18:05:
10:11:e4:a0:6e:71:9a:7b:fd:67:c7:00:41:a7:01:
db:ea:07:dd:d2:cb:82:95:e4:0f:ac:03:f8:66:77:
59:75:21:21:6f:38:a2:a0:da:2b:cd:4f:48:ec:67:
82:36:b2:ec:b9:50:3d:d1:ad:30:fb:ce:af:0e:72:
9d:70:69:e1:a0:81:a1:28:18:da:d6:44:8c:74:a6:
0d:e0:c0:7c:08:37:c0:75:0e:87:f5:1c:82:ca:3e:
a6:6e:c6:07:71:5c:56:39:3c:36:7d:f1:09:3e:49:
c6:2a:e4:ff:89:f3:ac:e3:73:c3:e6:3a:30:8f:a0:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:73:A2:57:46:C6:80:A5:80:08:6C:F7:6F:63:DF:4E:4E:77:C9
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:cd:68:c2:7b:d1:8d:65:d2:36:4e:e8:b2:cc:3c:0c:b4:
65:19:16:78:2f:dd:1b:82:51:d3:69:5e:af:c8:2b:02:7b:93:
c4:2a:b3:d5:77:cb:55:61:f2:79:af:45:1f:21:50:5d:33:e7:
a0:1e:33:6a:32:97:95:64:c1:a1:4c:e2:61:8b:96:41:75:66:
18:69:6b:b7:e2:7f:ff:62:31:1f:ec:6e:f0:cf:aa:eb:4a:da:
eb:c5:ca:4a:d9:ff:6c:20:48:49:8a:c4:b2:13:0f:6b:55:7c:
6c:59:7d:b9:83:a1:fb:39:f3:34:13:83:39:8c:92:38:02:00:
1a:87:1a:75:46:9a:b0:ae:11:6e:69:6a:7b:8d:82:47:dd:ec:
d4:00:8b:16:e6:f9:ec:3a:27:00:45:8f:27:57:4e:2c:58:c8:
26:28:a6:dc:9e:22:46:b7:a1:f0:b0:8a:38:c4:c6:19:4f:8b:
6a:4f:20:8b:fe:ea:4d:df:fa:3d:6a:f9:a6:64:36:bd:f1:7d:
19:77:7f:ba:78:2d:b9:45:18:0f:ee:ba:e3:2b:3b:c5:1a:7e:
77:b2:ab:95:57:ed:f9:37:5b:8f:42:b1:83:76:9b:3d:61:90:
71:06:93:84:77:16:f4:52:5d:3c:5e:6d:b0:44:8e:40:1e:fb:
65:b0:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:28:28 2025 by rpki-client