Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: wn/dL3C+dJnOTVUvXpmkGreWFSyqoc1fP+2ZF3jr7bU=
Subject key identifier: 1F:78:96:A2:D7:74:AF:BC:FF:DF:E8:09:53:02:59:21:D6:05:F3:BA
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 019873E1C4CADBCE612006B484F5E5BA8446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 035C
Signing time: Mon 04 Aug 2025 07:00:32 +0000
Manifest this update: Mon 04 Aug 2025 07:00:32 +0000
Manifest next update: Tue 05 Aug 2025 07:00:32 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: IXdyYHOyAOQGQfJjGyt0UT0ujSiQlF2OsOG1DLyPlJY=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c4:ca:db:ce:61:20:06:b4:84:f5:e5:ba:84:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Aug 4 07:00:32 2025 GMT
Not After : Aug 5 07:00:32 2025 GMT
Subject: CN=1f7896a2d774afbcffdfe80953025921d605f3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:c3:bc:87:4e:8c:91:e5:18:d0:ab:66:af:
6e:f6:99:50:f9:bc:8a:84:4e:72:4c:ec:51:e2:35:
69:e2:42:50:5f:8d:b6:04:2b:83:09:c9:9b:e5:c5:
2d:99:46:42:63:11:25:e2:48:d7:78:05:38:5b:1d:
e9:fe:71:cc:e2:e7:3e:46:66:a8:01:6a:30:1d:ab:
14:21:53:87:07:e5:d6:21:76:dc:17:6a:65:0c:f7:
be:de:5b:64:a2:5d:83:38:4a:d5:22:e8:08:69:16:
bd:de:57:27:f2:98:ad:e8:08:e8:45:f8:56:72:4b:
c2:65:28:8c:96:6e:38:7c:e7:db:a6:a9:45:c3:ed:
81:7f:c3:ff:2f:68:aa:75:9f:c4:a2:2f:1e:2b:5a:
88:89:39:30:9e:40:32:34:9c:ef:e1:db:6f:b0:2f:
9b:39:69:0a:3b:e3:b9:6f:19:9d:70:7d:bc:bc:46:
2b:d6:67:df:49:73:75:2c:c4:b0:f6:d1:1a:85:56:
60:fd:0c:2b:eb:13:dc:a9:73:57:cc:87:20:bf:df:
86:44:04:a1:16:6a:e5:37:a5:5e:ff:00:21:77:0c:
c3:7d:d2:33:ec:c0:17:ae:a1:88:af:dd:11:e6:6e:
8d:74:ab:c8:04:00:f0:52:46:3f:70:43:7e:19:a7:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:96:A2:D7:74:AF:BC:FF:DF:E8:09:53:02:59:21:D6:05:F3:BA
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:07:ad:49:11:e6:c6:da:b8:4d:52:29:c3:12:49:92:bc:7c:
bb:a4:ae:56:3d:f9:89:09:2c:9c:09:3d:56:df:15:e1:82:f8:
e6:a9:36:cf:08:3e:2e:a1:4e:32:17:c7:42:e7:c2:4e:c3:9a:
d0:2c:ec:1c:98:57:93:d7:ec:b4:39:9d:ef:8e:ac:23:d8:14:
a1:f2:da:df:fb:09:c4:09:84:6b:0a:62:f4:4a:3b:95:a2:91:
2e:51:73:1f:ad:cf:de:1f:11:de:20:b9:8d:b8:52:30:17:56:
52:c8:85:73:4d:96:a4:50:1f:33:d7:e3:6f:26:62:2e:5c:b2:
5b:f7:d3:2b:00:38:71:25:5d:80:9a:2f:d4:bb:dc:72:68:79:
63:5e:c8:7d:d3:82:a4:bd:1a:53:e8:42:9b:32:3a:8d:8e:96:
19:96:0c:bc:2b:ca:75:d0:7a:9b:3d:d2:ce:31:75:c3:b6:b5:
c5:83:46:d5:81:f1:33:75:ff:1a:7b:53:f0:13:ae:0a:3d:8e:
61:b0:69:6b:ae:2b:27:f3:59:2d:b1:cd:3e:cc:1e:fb:69:32:
fe:46:e1:e1:9b:71:ab:e3:01:4c:42:50:fe:ae:1f:cc:67:75:
c6:e3:bc:02:b8:60:e8:03:42:3b:d3:ba:95:93:9d:71:35:d9:
87:19:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:24 2025 by rpki-client