Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: VSWMHSyr4YPjWk0YFBaV4LCeXg9VWjfhiHwpL94zt/g=
Subject key identifier: EA:A1:55:DC:C0:8A:9E:4A:6D:3C:1C:89:D0:9A:3D:32:57:BF:3F:C3
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 0199FAD8209E72793FF83F91792438FBE01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 05:01:32 +0000
Manifest this update: Sun 19 Oct 2025 05:01:32 +0000
Manifest next update: Mon 20 Oct 2025 05:01:32 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: iF0XFvbxg9sRoWkmxf/ThQ9FqLMY/alI2FXF9m/o+wo=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:20:9e:72:79:3f:f8:3f:91:79:24:38:fb:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: Oct 19 05:01:32 2025 GMT
Not After : Oct 20 05:01:32 2025 GMT
Subject: CN=eaa155dcc08a9e4a6d3c1c89d09a3d3257bf3fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:62:1b:f2:b2:04:f5:94:b0:6a:7a:78:67:
51:7e:50:fc:f7:f3:7e:2b:c3:77:36:5e:0d:4d:ef:
85:65:89:8a:71:5a:8a:39:8d:ce:cc:13:81:81:b9:
47:fc:fc:3c:53:0b:43:aa:9d:0f:30:e2:77:ce:ef:
c0:a5:37:f2:9b:c4:41:22:61:3d:73:33:35:3e:26:
88:f5:8d:62:06:d6:99:09:b8:a7:22:ad:49:a5:13:
cf:d4:0a:76:c7:be:39:8f:c2:32:04:d9:65:90:d9:
7e:09:a0:ae:90:07:c1:63:57:f1:c3:d8:52:af:c3:
02:58:10:47:79:1e:cc:25:b6:7b:be:0c:f2:15:ab:
cb:49:f0:32:e3:ba:a5:cb:dc:84:f3:dd:d8:63:08:
aa:bb:52:df:bb:67:5c:ee:f7:6b:53:99:d4:53:dc:
34:5c:55:98:a9:f3:92:88:4a:a1:60:af:18:cb:47:
56:4e:a1:bb:8d:19:f9:80:2c:3f:7f:5d:cd:53:3d:
3d:a1:2e:27:32:6e:6a:00:ef:55:78:17:00:48:99:
a9:9b:99:64:d9:39:69:22:8d:7e:84:07:59:fd:ce:
a5:c1:5d:bc:0e:af:67:c6:a9:96:6a:b9:f4:27:3d:
35:13:5a:73:09:a1:5d:3c:b8:c9:61:a4:c5:ab:2e:
4b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:55:DC:C0:8A:9E:4A:6D:3C:1C:89:D0:9A:3D:32:57:BF:3F:C3
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d5:82:f7:d3:a5:77:fc:f3:e3:0f:50:d4:c1:2c:69:dd:37:
78:a7:a0:da:23:d4:c1:3e:45:31:f9:82:da:29:56:0a:51:50:
13:5a:1a:3a:b3:7a:e8:1a:b1:42:32:7d:ee:a1:1a:be:e1:19:
d4:00:f3:43:b4:05:98:e1:1e:70:01:f6:fa:01:e1:c3:0f:4b:
0d:18:a5:82:1a:88:69:3f:6a:9f:80:ac:bc:12:93:bf:1a:b4:
59:a8:cc:d9:f2:da:17:75:b9:3b:ea:03:97:60:41:98:9b:fc:
8b:1e:cc:ec:ec:02:57:7b:aa:96:3d:ce:fc:de:a1:60:c9:b4:
4d:5c:30:b8:53:a4:8c:ea:26:f9:6e:01:46:9e:8b:5c:1a:1f:
5c:2a:39:b6:9c:75:e9:dd:2b:ce:03:5a:2e:32:82:18:da:d5:
44:21:92:72:0b:c1:15:5a:45:22:60:52:db:a3:2a:58:d8:b8:
4f:3d:7d:46:6f:65:44:1f:87:67:a1:46:d0:bb:b1:e3:60:af:
cf:67:b8:70:6b:6e:57:0b:4c:65:03:35:41:72:a8:f8:7a:b8:
1c:38:45:78:43:86:9f:c4:8d:9a:13:a0:02:18:57:ef:40:40:
8f:96:c8:c1:cb:e9:0c:8f:59:08:e6:41:e6:1f:94:c6:cf:72:
92:b6:da:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client