Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: ad53/U6hlnPbz+bRWRTJ8Si0kdYTle3y5LzTp9AmpcE=
Subject key identifier: C8:A3:42:54:8E:79:B4:2E:70:53:D9:94:7B:F4:99:75:0B:63:3F:2D
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 0196BA7F221652F7840E7F417EE457FC169C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 153D
Signing time: Sat 10 May 2025 14:00:15 +0000
Manifest this update: Sat 10 May 2025 14:00:15 +0000
Manifest next update: Sun 11 May 2025 14:00:15 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: h4IAioTOfJCJLNggxEIn/BABZHgz36Zjo5/bQoQI1gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:22:16:52:f7:84:0e:7f:41:7e:e4:57:fc:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: May 10 14:00:15 2025 GMT
Not After : May 11 14:00:15 2025 GMT
Subject: CN=c8a342548e79b42e7053d9947bf499750b633f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:48:82:f2:58:93:fd:8e:e3:23:cb:89:b5:
9e:22:ce:37:1b:47:8d:89:03:2c:d9:13:1d:21:f1:
86:da:31:56:b7:e0:2e:c7:27:a4:bf:67:68:14:3a:
8e:f2:77:87:ce:7b:62:d1:27:6d:aa:ca:f4:13:a8:
5f:56:31:ec:68:cc:db:93:8f:ef:c9:9a:3f:bd:db:
b9:22:20:f3:a2:24:a3:5d:ae:33:2b:2a:09:34:62:
86:0f:96:5c:4c:b1:e8:2d:6c:36:e0:9d:9f:2f:86:
15:f8:84:23:62:f0:65:95:e8:e1:4e:14:5a:67:33:
d7:95:e8:00:d1:41:7d:26:87:50:08:97:a6:af:09:
df:c6:44:2b:8c:df:ea:61:b8:cb:9d:10:03:df:1f:
cb:b9:71:e4:c3:06:0d:41:cf:eb:54:f9:f5:78:8c:
80:84:f1:28:2c:d7:f2:47:c3:7b:22:46:c3:64:99:
7d:69:3f:78:36:64:ce:97:5e:2d:5b:b2:bd:41:9d:
ef:f5:a3:67:4f:f9:f6:b5:23:7a:a1:da:96:93:3c:
5c:95:a6:92:ee:50:29:a4:fc:62:95:e5:8d:35:ea:
97:90:53:ed:a5:dd:cc:b0:f0:d8:0e:fe:1a:be:e1:
53:8d:db:9b:d9:01:68:cd:c8:fa:5f:e1:bf:2e:8f:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:42:54:8E:79:B4:2E:70:53:D9:94:7B:F4:99:75:0B:63:3F:2D
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b5:37:8e:90:2c:4f:16:e8:9e:07:03:62:8d:8a:0b:5e:75:
b4:bd:02:a9:e3:7d:14:62:a9:0e:69:7a:be:30:d8:8b:b4:96:
c8:9a:29:52:4d:99:83:7b:5b:93:1b:29:b5:60:61:51:80:e2:
3e:57:af:08:82:1b:71:35:79:98:d4:dd:a2:c8:73:ff:51:3a:
8e:f3:f6:56:b3:26:22:57:3e:0f:e4:67:84:c6:14:9f:59:23:
eb:ea:e5:32:3c:b4:90:6e:59:10:84:ce:cf:04:98:00:90:b2:
7e:51:3a:36:af:36:6b:1a:7e:6c:74:96:59:f0:31:54:c1:68:
fa:e1:0f:fd:07:6a:8f:f2:f8:38:a1:1f:ce:ec:9c:1c:3f:fd:
13:93:90:3f:eb:43:65:19:a3:5e:53:b9:5a:e4:9c:69:74:55:
89:11:cc:53:c0:02:4e:a7:f9:27:8f:d0:de:32:17:0d:0b:ad:
ed:4a:a0:93:43:f2:18:e3:a3:d9:24:98:43:96:0f:89:f9:3f:
10:2d:c1:da:fd:0b:a0:0c:a2:38:bd:48:ca:a6:88:ee:bc:81:
4f:ab:eb:4c:46:5a:3c:c9:f8:8a:47:8c:c4:3f:66:c7:98:62:
c3:a3:6f:52:45:e8:7c:3a:4a:86:cc:7d:6a:b9:67:0b:23:de:
57:a8:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:18:21 2025 by rpki-client