Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: PCXJKv5bmhXEWYP3JcEGR6t+TgSOysFWG7cdFgAVw8A=
Subject key identifier: 02:CF:78:F9:EF:FF:80:B1:3F:99:54:E3:06:0A:19:11:F2:74:0A:F8
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019510C6AEF837122C6D6EE147BA870ADF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 019B
Signing time: Sun 16 Feb 2025 22:00:11 +0000
Manifest this update: Sun 16 Feb 2025 22:00:11 +0000
Manifest next update: Mon 17 Feb 2025 22:00:11 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: jTmJYctsUBS/6RbV/iD/o5yoXManA4PW5tKBlbONFl4=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ae:f8:37:12:2c:6d:6e:e1:47:ba:87:0a:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Feb 16 22:00:11 2025 GMT
Not After : Feb 17 22:00:11 2025 GMT
Subject: CN=02cf78f9efff80b13f9954e3060a1911f2740af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:10:f7:9c:45:fa:fb:83:27:a9:79:a9:a6:
be:a0:3f:bd:da:1e:47:5b:2f:18:4e:f7:48:51:9f:
b3:44:2d:3d:a0:d2:9d:33:1c:83:5d:f6:fc:af:61:
17:81:ed:f4:bd:66:23:2c:cf:01:d3:95:05:c4:76:
e9:c5:af:a5:92:44:41:7f:5f:76:73:24:9b:89:eb:
da:01:43:14:9f:21:79:79:b3:a9:78:6a:8f:20:f2:
16:68:da:b2:00:60:4c:72:7a:9f:1d:71:ff:36:eb:
b2:cc:e7:e1:74:4d:68:d0:b4:41:8b:2c:20:40:ad:
16:7e:35:0e:d3:f5:6e:b8:ae:d5:51:b0:21:f8:39:
88:00:02:e7:43:58:c9:49:41:41:ca:d4:22:56:83:
be:95:ce:51:29:3c:8a:1f:4d:57:59:f2:2c:52:04:
9c:cc:70:56:b2:05:36:3b:1f:64:51:ac:60:f8:d9:
78:7a:ab:73:fb:84:94:09:5e:48:4d:22:81:bb:4d:
ac:33:4d:16:64:14:9c:62:59:23:b8:45:4f:e4:a1:
4c:6a:e3:76:de:17:dc:f3:b2:f5:4d:47:7f:0b:18:
8a:77:47:8f:4d:ed:c0:63:f4:98:ba:a0:5a:94:78:
d5:62:8f:17:26:4e:a0:37:de:3a:29:f5:e9:0a:2f:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:78:F9:EF:FF:80:B1:3F:99:54:E3:06:0A:19:11:F2:74:0A:F8
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:18:40:08:83:b7:f8:0e:08:6d:79:52:ef:5c:06:c8:60:
44:d3:ce:47:db:69:7d:43:3e:35:76:71:30:37:a5:ec:4d:bb:
2c:bf:91:fb:75:cb:9a:91:6c:08:4b:a0:b4:9a:78:0b:65:c7:
b7:ce:30:d4:d7:38:3b:ef:75:f8:5b:5d:31:4e:df:fc:74:2f:
4f:a8:52:e7:52:ed:0a:ef:35:8a:9d:51:02:d8:67:46:7e:7c:
b3:73:c4:02:da:f1:d5:72:4f:ad:3d:fd:5f:14:d5:52:13:31:
23:d1:28:a4:2b:00:91:17:7c:c8:c5:52:95:bc:0a:df:94:a5:
00:5b:d7:e0:06:97:cb:ee:8c:5f:3a:3b:90:1c:e1:1e:50:ac:
8b:3e:c0:30:fd:d5:6e:42:96:fa:8f:81:b0:0d:b1:36:91:58:
2b:45:32:40:e1:f7:d4:10:51:7b:c6:52:e6:5f:ae:70:07:c3:
db:57:cb:47:11:87:7c:44:7a:e2:4e:ab:3a:ee:c4:51:99:04:
44:3d:a1:bb:d2:e1:a4:6a:e9:96:80:37:fc:d1:ed:89:52:66:
f0:b2:93:65:c4:ae:0a:45:30:28:12:63:e9:2a:c4:12:6d:00:
7d:82:a2:71:51:3a:fa:35:21:25:1b:d1:fc:39:83:81:e4:de:
84:07:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:43 2025 by rpki-client