Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: cm2jCfPBC0z4BV5uJ1dxcdODzg3FNtq0tq3afyEAgaU=
Subject key identifier: 7A:C6:2E:85:E6:5D:67:50:F2:20:97:9C:1A:E0:DF:68:AB:A8:61:16
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0197488C935CE696295D23B0262735F80037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 02C1
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: H5WmFx6ZuA85KPnSlakVhtHlEK8cUwnKHhk2eddkll4=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:93:5c:e6:96:29:5d:23:b0:26:27:35:f8:00:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=7ac62e85e65d6750f220979c1ae0df68aba86116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:46:7c:84:a2:f3:49:f8:31:49:5d:2d:d0:
46:8c:f3:6d:de:d7:37:13:2f:e8:16:90:4c:0a:e0:
85:23:bb:ab:8a:e0:24:4f:32:3f:62:b1:e9:75:05:
77:d6:81:72:b3:18:a3:b8:70:e8:ec:a6:56:08:9c:
76:f0:a0:aa:70:03:37:23:19:f7:03:be:6c:23:e5:
2f:a1:1a:c1:43:f0:19:6f:a9:2e:34:54:4b:d0:3a:
f7:71:7c:78:f0:65:f0:cf:ca:63:86:52:18:28:6f:
e1:5e:e9:b7:d5:2f:6c:b1:dc:6d:98:14:55:21:a9:
6b:1f:3b:29:65:f9:ef:8d:1a:e4:fc:cd:1b:7c:fd:
10:2b:e2:c8:65:78:f3:ca:18:7b:20:18:83:0f:05:
f6:f6:13:cb:2c:39:63:56:e0:45:04:38:5b:f3:a0:
0e:fb:8a:ce:12:0f:b9:3a:ba:18:fa:11:18:e0:b6:
51:ef:cc:99:0d:26:c5:4b:2c:56:61:e6:0c:1e:0e:
77:d2:97:dd:c9:46:e5:1a:1e:16:3b:f9:7d:5d:6e:
66:0a:00:d0:88:dc:88:56:f1:09:24:f7:7b:41:35:
fc:6b:b0:41:ca:f8:ae:7c:99:37:70:d3:5e:27:6d:
fa:47:6e:4c:4b:9e:0e:fe:53:7e:30:07:b2:59:ca:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:2E:85:E6:5D:67:50:F2:20:97:9C:1A:E0:DF:68:AB:A8:61:16
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:9a:c9:87:a3:52:17:3d:ed:5f:ae:ff:49:be:45:4a:84:
73:90:1a:9d:88:24:6f:22:1d:77:11:36:c5:76:aa:a3:2b:f5:
0f:84:bc:2a:74:15:23:7c:4e:54:95:26:04:0e:c3:58:5a:38:
94:87:54:ee:c2:aa:8b:f6:81:0f:57:c4:b0:5f:c9:7e:1e:e6:
8a:c9:63:a2:da:3c:18:1b:bd:76:b1:c7:38:08:7b:bf:7d:ac:
93:c8:31:f1:96:87:aa:48:67:62:ca:ae:89:1d:ce:71:97:15:
09:3f:fa:7b:1a:47:99:64:73:d7:b7:e1:3a:d2:c4:9f:fb:44:
17:ca:9a:60:74:ae:d3:f7:f7:e1:a5:3a:20:60:c2:6e:88:4c:
44:90:a7:33:50:74:ba:ab:17:92:7d:55:b1:f3:88:75:01:33:
f6:c7:84:3a:07:b7:70:0a:94:14:b9:5c:3d:81:7a:f0:3f:64:
a8:bf:24:61:d3:27:56:34:a1:fa:e1:2d:b0:fa:d1:4f:b9:4e:
13:02:de:80:d2:3a:d1:4d:3b:17:9e:cb:2c:a4:72:b8:f3:0a:
d4:5a:5b:73:5d:70:26:9d:6b:75:5d:30:7e:37:c1:00:4e:34:
c3:50:e9:45:a1:13:b5:5d:8d:81:df:83:8e:f9:2e:47:04:fe:
97:71:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:41 2025 by rpki-client