Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: xC09rUTFrKbt1zrO1ettp2R/q6AIUPbq8G7niXIf6IE=
Subject key identifier: 89:C8:D8:2C:3B:04:2D:ED:21:7F:8E:1F:98:EC:77:4B:6D:22:2E:E5
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 0197B96AEE27FE40843FA088A3D397FA0269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 15C1
Signing time: Sun 29 Jun 2025 02:01:22 +0000
Manifest this update: Sun 29 Jun 2025 02:01:22 +0000
Manifest next update: Mon 30 Jun 2025 02:01:22 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: afgO0CQ3rJxCDr8cTe3MVHsiBWsKHr150UMMMk7NTco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ee:27:fe:40:84:3f:a0:88:a3:d3:97:fa:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Jun 29 02:01:22 2025 GMT
Not After : Jun 30 02:01:22 2025 GMT
Subject: CN=89c8d82c3b042ded217f8e1f98ec774b6d222ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:7a:bf:e6:04:58:92:72:4b:0e:d1:e0:40:
49:22:6c:70:c9:5b:10:72:ea:15:c1:64:cb:77:9b:
95:16:4a:2c:c2:e6:ee:b3:78:13:13:10:e2:e9:46:
5a:cd:a9:dc:72:0b:ec:26:7f:95:3a:21:e1:e4:bb:
4f:19:ec:b2:13:9a:99:57:19:5d:3d:92:0b:b8:44:
e7:49:53:39:ff:33:9b:a4:8d:c2:65:92:1d:a2:41:
cf:69:5d:e6:db:ca:66:2d:7a:70:09:a5:17:19:a3:
d6:9d:df:6f:07:8d:d9:ff:ee:38:81:7f:ed:76:2a:
9e:27:c1:2c:d8:77:ef:7d:05:26:aa:3f:b9:20:0d:
6d:56:9e:1b:5c:24:05:d9:9f:fa:de:9e:dd:85:26:
cc:9d:50:b3:a2:fa:54:aa:c1:99:23:95:bd:b9:ae:
cb:e7:da:2c:cf:33:b9:4b:76:d1:3c:78:5c:e6:2c:
a8:53:7a:c1:5d:c3:e3:e6:a4:85:a7:1a:9f:38:c8:
fd:69:d6:9e:54:af:7d:8d:40:9c:ba:8c:f6:81:2f:
c2:c3:f4:71:bd:bc:d1:0e:c4:43:f9:06:a3:db:41:
36:11:7c:29:d8:25:b2:59:87:60:f0:7c:f5:ec:87:
14:c7:2b:52:26:ca:ae:29:e6:d9:17:99:f1:47:20:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C8:D8:2C:3B:04:2D:ED:21:7F:8E:1F:98:EC:77:4B:6D:22:2E:E5
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:27:80:a9:58:df:c2:a4:fe:08:8e:43:46:20:b3:1b:de:bd:
59:69:74:08:42:e3:88:6f:be:a6:3b:8b:db:29:38:f4:1a:a2:
0e:b7:d6:c3:4d:2e:e5:24:86:cc:f1:ca:ee:c4:62:62:63:46:
75:bb:d4:1c:b9:4a:ac:ef:8a:d9:69:e3:8e:49:e6:b9:8b:b4:
84:db:d4:25:fe:b4:4e:ac:f1:bb:c5:30:7c:3d:e8:2f:57:3d:
49:e1:25:d3:1e:fd:c0:d5:03:16:f4:fd:e6:2f:2e:14:60:bb:
ed:9d:1b:5e:3c:c9:75:3d:b9:a6:ae:c1:ae:a2:d3:4f:8f:c5:
b2:20:f8:d5:7a:87:ff:dd:a5:42:5a:62:90:97:8a:03:d0:86:
cf:e6:b7:ef:20:3e:20:b6:d3:0a:5e:35:09:50:d5:78:f6:c9:
2f:fd:c4:72:f9:46:16:ca:a4:b0:3a:7f:35:89:be:cb:05:6f:
b2:b8:ed:47:b6:87:b9:f4:4e:69:31:6f:b1:02:6b:00:0e:a1:
13:80:21:43:e1:57:00:ce:c3:80:ee:82:54:d9:d3:d4:dd:db:
43:6c:d4:be:50:81:05:01:12:fa:eb:79:eb:85:1e:50:03:ea:
9f:52:0a:ef:53:80:39:66:57:fe:53:e4:d9:11:39:74:94:f1:
bf:c4:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:42:30 2025 by rpki-client