Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: yIrn52heq31s+G6TbDMYuA5+l2SS9qrTx1VLwbBiEcU=
Subject key identifier: D4:94:7A:B9:7B:02:42:88:30:32:07:9C:20:41:96:42:29:C2:45:F3
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 01976F2C30D5AA12F44979ABB8457EBE9AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 02D5
Signing time: Sat 14 Jun 2025 16:00:56 +0000
Manifest this update: Sat 14 Jun 2025 16:00:56 +0000
Manifest next update: Sun 15 Jun 2025 16:00:56 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: XM6FM9Nu6gxn9tqB+6fnrrYrkDLoTczv5+lvRhCPUzc=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:30:d5:aa:12:f4:49:79:ab:b8:45:7e:be:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jun 14 16:00:56 2025 GMT
Not After : Jun 15 16:00:56 2025 GMT
Subject: CN=d4947ab97b0242883032079c2041964229c245f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:50:e3:65:a3:4c:98:97:e5:cf:2a:36:6b:
00:7b:0d:2a:01:11:21:a4:1e:9a:ef:e6:63:d4:de:
b4:cc:a4:28:ab:29:93:d5:66:94:a2:0b:2d:9f:ec:
b9:6e:9f:dd:00:8f:73:2e:3e:a8:63:57:4a:2d:38:
84:b1:36:3e:f4:d1:65:3c:e5:21:2d:4c:51:8a:11:
b2:76:01:71:bf:50:c4:52:bc:82:50:21:e2:f8:94:
51:00:15:c0:ba:27:0f:eb:f9:03:3c:fb:1a:18:25:
8a:0d:14:5a:66:af:82:99:91:62:9c:4a:61:21:57:
3f:de:da:d2:32:83:51:2e:31:40:f8:a7:4a:26:62:
ff:78:3b:e4:15:ab:4a:5e:a6:12:44:6e:3f:49:64:
33:fd:30:02:0e:f1:20:73:ef:7f:b6:df:cf:1a:81:
08:73:70:77:0f:46:1e:2f:33:42:d3:4e:15:ab:b7:
2f:38:10:d2:15:8d:a5:9b:e5:7a:26:c4:03:dc:7e:
45:04:1f:14:fa:bc:54:58:c4:8a:b2:7b:33:38:fe:
c3:b3:76:05:bc:30:51:8d:bb:d3:c6:86:d7:b6:cf:
79:a1:fe:2f:e2:86:a5:ac:9c:ca:28:b5:9d:a3:6b:
48:f6:55:4d:7f:dd:f5:15:15:4c:2b:1d:d3:4a:60:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:7A:B9:7B:02:42:88:30:32:07:9C:20:41:96:42:29:C2:45:F3
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c6:ea:51:f6:2f:2b:de:30:cc:44:ce:21:ac:bc:35:f9:cc:
c7:5d:19:ee:35:63:c0:af:2c:28:08:90:c3:82:ed:cd:3f:d3:
7b:b7:9b:60:17:96:b6:08:37:90:80:26:f3:c1:33:43:6a:7a:
41:07:26:10:12:5a:f0:ff:a9:b2:e5:d0:96:a4:ec:9f:17:45:
64:28:47:fa:1c:d2:14:9f:ce:6c:4f:d6:03:63:07:3e:ea:32:
ed:a5:e9:c0:82:fc:2a:15:9e:8a:23:2d:e9:76:8e:24:20:60:
d1:bd:c6:69:67:51:9a:8a:84:ba:c0:e6:61:45:a4:8c:b6:1a:
b3:2c:0e:1f:d2:ed:57:82:ab:c0:59:5d:cc:e4:c5:85:e1:66:
f4:a3:62:ab:39:6b:4f:25:91:c8:2a:83:fd:88:85:88:b9:1c:
c2:ee:d8:36:df:65:ae:9d:53:f6:fc:f1:97:d4:fe:19:f6:49:
66:d6:5d:4f:ba:f8:c5:00:d5:9c:b4:7f:9b:c4:fc:61:d9:66:
75:b8:f8:c5:11:73:b4:de:4f:80:cb:c0:bf:92:01:94:9e:01:
26:73:11:db:a4:e0:8d:0b:cb:4d:d7:e5:5e:16:ed:4e:3e:ff:
6e:0e:17:03:6c:f0:6b:37:0b:a4:ed:e7:8f:54:47:e8:1f:ad:
e0:5f:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:50 2025 by rpki-client