Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: 9BS52oXubP2Pf11QukpWfkyDlpmUs/MAybspJx8Cz5w=
Subject key identifier: 1E:39:8A:FC:7B:82:C4:C5:6E:1A:25:C5:30:C0:1E:3E:F5:68:BA:9B
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0196515B1E82411C44266C7DB8F40AECB28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 0241
Signing time: Sun 20 Apr 2025 04:00:48 +0000
Manifest this update: Sun 20 Apr 2025 04:00:48 +0000
Manifest next update: Mon 21 Apr 2025 04:00:48 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: TplAQgTp/xfrPmRgVemTYDCHpHrEVs9TDE+9ReCwkYc=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:1e:82:41:1c:44:26:6c:7d:b8:f4:0a:ec:b2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Apr 20 04:00:48 2025 GMT
Not After : Apr 21 04:00:48 2025 GMT
Subject: CN=1e398afc7b82c4c56e1a25c530c01e3ef568ba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:31:c7:03:05:69:07:4c:9c:98:1e:7e:4c:
df:38:49:8a:fe:da:45:4f:b5:67:36:7e:23:d4:af:
2a:c8:0f:6e:93:34:ee:fa:48:d0:da:ac:49:8e:91:
8b:23:d5:7c:bb:b1:2e:b7:4c:ae:bf:9f:1f:0f:4f:
07:1a:09:f0:d3:2b:e5:70:cf:cc:e2:7b:66:42:78:
0e:3e:d6:ed:d4:0f:dd:19:d5:b5:03:32:81:df:b9:
b9:fa:ca:01:4b:49:9a:44:c5:38:e8:93:9d:99:a8:
72:ea:e3:cb:e1:a6:c5:23:3b:5e:d8:45:13:f2:ca:
9d:bd:e7:9a:1f:66:09:c0:2c:16:6d:54:8c:5c:62:
1e:c6:7b:73:1d:81:5e:09:f1:33:6d:26:6c:06:df:
3a:6f:4f:79:ff:10:93:3c:4d:3a:1e:d4:c3:b5:ba:
6a:c9:e5:fb:92:2e:52:e7:28:8e:ed:50:c7:64:d8:
26:c4:09:7d:de:78:bf:ea:29:0a:e5:4d:6a:8c:b5:
00:73:e4:c8:a1:b0:ae:c3:c5:7c:b6:95:62:2c:de:
de:1a:27:bc:84:d7:6e:0b:97:03:71:04:1c:d8:17:
03:d1:1c:74:a5:8d:4b:72:d7:ab:65:4b:f1:3a:73:
29:8b:ea:c9:0d:9e:83:5f:7a:a9:92:84:8c:66:6d:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:8A:FC:7B:82:C4:C5:6E:1A:25:C5:30:C0:1E:3E:F5:68:BA:9B
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a7:67:d5:b7:6f:ea:a5:6b:c9:e2:42:1c:a2:95:41:fe:bb:
41:7d:78:80:9e:04:ff:eb:50:fd:25:16:d9:0f:73:84:e8:61:
19:64:d0:a8:f7:2a:1e:b4:5d:f1:8f:85:57:ed:6a:b5:33:00:
03:87:44:67:21:f9:2b:40:ed:48:65:8e:c7:c5:c5:4c:ba:2b:
b3:0f:ca:40:aa:21:dd:be:e2:af:21:8d:36:99:e6:92:e0:91:
c2:9e:38:b8:25:c7:be:0f:c8:0f:92:d2:03:6c:fa:1b:57:da:
9b:bf:aa:39:02:4e:56:43:d3:06:c8:fc:6a:f1:a4:93:1a:af:
3b:7c:e1:d0:8e:6c:dc:e7:da:16:2f:97:8f:26:3b:0b:94:b7:
44:f7:c6:1f:04:fd:b2:86:c6:48:63:3a:37:d7:00:27:6d:e0:
fe:8a:cf:2f:ed:95:91:99:9b:b8:52:eb:c6:69:ad:f1:d3:70:
1d:be:0e:38:fa:53:4d:da:e6:a1:8e:de:1a:c5:a3:59:d3:02:
af:4c:e1:36:b9:5a:d1:61:98:9c:65:f9:0b:cc:9c:68:d4:a8:
36:9c:de:16:37:ff:24:c8:eb:98:f8:95:92:76:ff:4f:cf:45:
d8:8d:eb:45:a5:1e:72:7d:ec:9d:a7:df:92:95:b3:f5:f3:34:
4b:99:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:40 2025 by rpki-client