Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: PfORsuTr3vXrTDfBbstDuqwJgwWNJTJW6dKOXz342wY=
Subject key identifier: 13:5F:32:BC:C8:7C:06:C8:AA:A8:09:6B:3E:F7:1E:D2:60:13:83:59
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019A209C58DF18DD30EDDC890399C0ACC33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 043A
Signing time: Sun 26 Oct 2025 13:01:48 +0000
Manifest this update: Sun 26 Oct 2025 13:01:48 +0000
Manifest next update: Mon 27 Oct 2025 13:01:48 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: pYlBa4m4nI4RR9fvhlYGwGGJhhHO1jIsF86i7ROZpmg=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:58:df:18:dd:30:ed:dc:89:03:99:c0:ac:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Oct 26 13:01:48 2025 GMT
Not After : Oct 27 13:01:48 2025 GMT
Subject: CN=135f32bcc87c06c8aaa8096b3ef71ed260138359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:a6:d2:8e:d1:66:fd:e6:96:2b:61:9c:fb:
96:f5:02:69:27:29:c3:e7:0c:94:67:54:93:af:2b:
e7:fb:bf:d0:6d:0a:fd:d0:06:23:d0:ee:77:20:a1:
e3:69:09:2c:9b:ff:f2:98:05:c9:7f:f8:2e:34:12:
7c:75:90:a1:b7:c9:10:8b:1a:02:9a:1c:c7:71:a3:
50:ea:38:37:10:f3:cb:70:b7:20:dd:c9:57:c3:2c:
9a:41:cb:82:4a:93:3a:88:1f:bd:70:3a:97:8b:ea:
c6:f8:3c:62:8d:a2:5c:ad:d5:62:76:31:b0:e4:86:
d2:53:52:11:92:bd:91:5f:d8:b5:84:26:f7:b9:84:
de:82:77:66:b1:12:30:17:74:d1:c1:39:2c:52:19:
c8:1d:6a:1b:37:c7:14:0c:b6:d9:7a:9d:d2:9a:f3:
e2:3c:85:02:97:5d:60:dc:f1:00:72:3a:4f:3e:26:
b8:6b:8f:5c:af:aa:2c:08:00:c9:f0:1c:88:41:c3:
f7:e4:95:ed:36:7e:07:e0:d4:3f:c5:56:bc:3e:48:
46:f8:d8:c5:01:a6:29:0d:c6:46:65:a4:fd:ee:41:
e6:bf:b6:9f:a3:8b:c1:10:0b:61:f2:e3:f9:89:23:
d3:9d:9a:a1:9e:11:3a:b9:96:e6:d2:17:fa:57:25:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:32:BC:C8:7C:06:C8:AA:A8:09:6B:3E:F7:1E:D2:60:13:83:59
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e0:27:fc:76:29:d4:0d:30:ab:89:88:53:41:cd:64:40:1d:
0a:68:00:b9:a9:4f:ff:41:ca:8d:c3:cd:1a:21:f5:b3:68:47:
ea:51:bf:24:e1:4c:f8:8b:c1:9a:72:86:9f:ea:df:d2:7e:e4:
66:46:9c:90:4c:c5:37:00:10:b2:7d:a1:92:98:82:25:7b:1f:
fb:b0:f4:63:6d:6d:49:05:eb:d0:92:1e:68:e9:c7:98:4e:f9:
0c:7f:de:8c:8e:93:11:7d:22:c0:25:2a:15:b1:14:26:6b:7b:
7c:b5:b0:59:76:8f:5e:db:23:8d:89:cb:2c:07:c2:e5:78:c1:
be:3f:5d:17:8b:9f:09:5e:21:b9:bd:4d:10:c3:ec:62:ff:2a:
cc:cc:3b:1a:22:f1:ca:62:b2:aa:cc:64:74:c6:36:9a:c0:91:
39:39:07:18:81:f9:e1:e8:36:44:f3:7e:9c:7c:ca:f1:2b:b9:
3c:37:57:a3:13:95:70:fd:a6:4f:5b:26:fd:fb:65:5d:87:78:
1b:f4:05:09:71:6b:b6:6c:79:19:55:09:1d:17:b9:49:a7:0e:
24:ad:c7:61:68:c2:f6:7b:42:0b:3a:bf:38:b7:a4:20:e9:d5:
ef:d3:be:c3:88:10:c2:0c:7b:8b:fb:8c:7a:79:82:2f:00:0f:
c3:f7:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:05 2025 by rpki-client