Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File: NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier: v5xVrtTOyDIXpxrdNG3mtzLGsEi9YjnbpSoYKnph1eg=
Subject key identifier: B9:E3:B5:21:4A:9C:23:3D:83:B9:DD:3A:7E:BE:AF:80:4F:4A:88:89
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer: /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial: 0196C803EFA30FEBA8087565E31B5F9B8A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number: 14C9
Signing time: Tue 13 May 2025 05:00:23 +0000
Manifest this update: Tue 13 May 2025 05:00:23 +0000
Manifest next update: Wed 14 May 2025 05:00:23 +0000
Files and hashes: 1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: azcTV5dhB7ZVrGL/OvAc31k3ldilwwI6VWLe1Enf17A=)
2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:ef:a3:0f:eb:a8:08:75:65:e3:1b:5f:9b:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Validity
Not Before: May 13 05:00:23 2025 GMT
Not After : May 14 05:00:23 2025 GMT
Subject: CN=b9e3b5214a9c233d83b9dd3a7ebeaf804f4a8889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:6d:cd:14:48:b1:03:9e:32:8a:4c:12:f7:
e2:de:91:1a:f9:bc:90:cb:30:49:34:f4:25:73:30:
4d:f1:c0:7d:ce:2d:b8:5e:00:54:3f:f8:ca:20:9b:
34:1d:fc:b8:5d:0f:d8:0c:f4:f9:77:af:96:c7:76:
76:2f:0b:d4:1f:8a:a9:59:31:8c:fa:c8:83:cd:92:
07:2a:54:5b:24:e8:c2:e5:ed:67:d6:bc:72:dc:84:
6f:2d:17:b6:4c:08:cb:10:df:f1:66:4f:d8:c2:f9:
84:16:ea:46:d0:7c:71:42:cf:39:fd:0f:9c:cb:3b:
48:16:c1:38:37:1d:a3:dc:d9:f1:68:af:4f:13:1f:
6b:41:d3:a4:3e:a8:9f:98:b4:71:d3:cf:f7:ad:8e:
e3:8c:b1:f6:f4:2b:6f:7e:55:81:d5:df:8f:24:59:
0b:b5:1d:21:cd:43:40:5e:04:30:80:ab:17:a8:c8:
a7:46:d5:3b:99:ae:3d:a1:6f:6a:cd:59:cf:7c:8c:
dc:db:dd:da:a9:33:0b:f5:39:c6:e7:38:81:6f:46:
98:1a:5b:02:9e:ed:4c:db:42:c2:d6:07:6e:a1:6b:
59:66:47:79:b8:7d:20:e7:30:7b:37:98:cd:28:89:
a3:98:17:0e:c0:0a:2e:39:1c:79:99:a6:d5:23:1c:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E3:B5:21:4A:9C:23:3D:83:B9:DD:3A:7E:BE:AF:80:4F:4A:88:89
X509v3 Authority Key Identifier:
keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b8:cb:52:af:5e:78:e2:12:0d:88:95:f2:f5:e5:97:a1:67:
4a:8f:16:f7:7e:dc:18:41:b9:79:15:99:1e:b6:fb:1b:c9:9b:
81:42:28:18:bb:88:7f:28:bb:b8:11:2d:06:70:fb:e3:87:48:
5c:78:8d:57:64:6a:a6:ad:7d:a3:4e:e4:41:68:d7:62:09:3c:
bf:e5:69:16:97:1f:af:59:d8:1b:01:a7:1d:9a:76:c5:b6:86:
9c:c2:5e:3f:1c:ff:8e:d4:98:64:f4:e8:17:59:b1:bc:24:63:
3f:6a:18:ae:5b:70:81:92:04:e6:fc:7e:c9:5a:92:e4:d8:e5:
4e:90:80:8f:1f:f6:bf:f1:28:3b:dd:da:6e:88:99:76:10:37:
3b:86:18:71:6b:8c:33:cb:d9:e3:63:3c:7d:6c:d5:7b:0b:a2:
2c:93:60:e0:ac:1d:ad:6d:7f:5e:25:46:d7:fe:5f:ed:c8:a4:
74:26:64:be:19:e2:b8:a8:0a:fa:b1:5f:15:2a:16:ca:cf:17:
57:ac:c6:68:c9:d1:df:36:7f:13:7b:0d:86:21:d7:d6:ab:ca:
75:ce:ff:8c:42:80:07:45:03:15:e7:3d:5f:d5:39:b5:4d:21:
72:49:00:46:48:6e:9c:7e:a5:28:05:d4:b7:bf:5c:e1:f6:ab:
d2:25:1d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIA++jD+uoCHVl4xtfm4oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MTRhMDZkYWM4NTRkYmVlNjA5ODQ1ODhkZWM3YjMyODRi
NWFhNTAwHhcNMjUwNTEzMDUwMDIzWhcNMjUwNTE0MDUwMDIzWjAzMTEwLwYDVQQD
EyhiOWUzYjUyMTRhOWMyMzNkODNiOWRkM2E3ZWJlYWY4MDRmNGE4ODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5VtzRRIsQOeMopMEvfi3pEa+byQ
yzBJNPQlczBN8cB9zi24XgBUP/jKIJs0Hfy4XQ/YDPT5d6+Wx3Z2LwvUH4qpWTGM
+siDzZIHKlRbJOjC5e1n1rxy3IRvLRe2TAjLEN/xZk/YwvmEFupG0HxxQs85/Q+c
yztIFsE4Nx2j3NnxaK9PEx9rQdOkPqifmLRx08/3rY7jjLH29CtvflWB1d+PJFkL
tR0hzUNAXgQwgKsXqMinRtU7ma49oW9qzVnPfIzc293aqTML9TnG5ziBb0aYGlsC
nu1M20LC1gduoWtZZkd5uH0g5zB7N5jNKImjmBcOwAouORx5mabVIxzA7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnjtSFKnCM9g7ndOn6+r4BPSoiJMB8GA1UdIwQY
MBaAFDQUoG2shU2+5gmEWI3sezKEtapQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUt
ZTY1OWZkZTA1Mjg5LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wM2RjNmUtODUyNC00NWQ3LWFjYzUtZTY1OWZkZTA1Mjg5
LzEvTkJTZ2JheUZUYjdtQ1lSWWpleDdNb1MxcWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarjLUq9e
eOISDYiV8vXll6FnSo8W937cGEG5eRWZHrb7G8mbgUIoGLuIfyi7uBEtBnD744dI
XHiNV2Rqpq19o07kQWjXYgk8v+VpFpcfr1nYGwGnHZp2xbaGnMJePxz/jtSYZPTo
F1mxvCRjP2oYrltwgZIE5vx+yVqS5NjlTpCAjx/2v/EoO93aboiZdhA3O4YYcWuM
M8vZ42M8fWzVewuiLJNg4KwdrW1/XiVG1/5f7cikdCZkvhniuKgK+rFfFSoWys8X
V6zGaMnR3zZ/E3sNhiHX1qvKdc7/jEKAB0UDFec9X9U5tU0hckkARkhunH6lKAXU
t79c4far0iUdAg==
-----END CERTIFICATE-----
Generated at Tue May 13 09:45:36 2025 by rpki-client