Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: dUhvfIdaEvKP77Zfl2156EtraUKEvbA0OpBoFcRIEzU=
Subject key identifier: D7:3A:80:E2:45:C3:51:96:6A:9B:AA:F9:E4:14:19:E6:2F:66:E5:06
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0196839114BFCB8A42F429D8041489DEF6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 025B
Signing time: Tue 29 Apr 2025 22:00:45 +0000
Manifest this update: Tue 29 Apr 2025 22:00:45 +0000
Manifest next update: Wed 30 Apr 2025 22:00:45 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: BP6se2PB+ZgCqMkeZUWnwcJGk07ngtzChrd5sCiS750=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:14:bf:cb:8a:42:f4:29:d8:04:14:89:de:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Apr 29 22:00:45 2025 GMT
Not After : Apr 30 22:00:45 2025 GMT
Subject: CN=d73a80e245c351966a9baaf9e41419e62f66e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:07:99:05:be:ad:3e:bc:63:8c:7c:2a:6b:96:
13:3a:20:24:e9:3f:30:dd:17:6c:36:33:3c:3b:5e:
43:44:f4:c1:13:75:1f:ac:e5:82:17:4a:53:db:a0:
21:61:4c:ce:24:3e:0c:e5:79:80:78:a0:21:47:2f:
29:bb:10:27:8f:dd:fa:97:02:f6:9e:5d:2c:f1:26:
0a:88:05:e4:b3:c7:ad:05:d6:40:1f:cb:6c:31:9f:
78:12:cd:00:67:e7:ad:cf:5c:01:10:b6:51:12:f2:
96:43:f2:e4:7f:2a:56:44:3f:36:34:b4:77:a1:36:
ca:15:4b:24:9a:a1:be:2f:49:47:38:df:23:53:6a:
81:cf:35:bb:7b:d5:57:f2:10:cb:bd:20:40:8f:55:
79:9f:a7:d5:35:29:d9:b6:36:fe:c3:ae:37:be:1f:
9b:bd:e8:13:1f:cd:09:64:c0:cb:7f:b6:55:52:6d:
4e:d7:35:8c:ad:d3:6f:1e:75:14:95:7e:0f:16:c0:
b4:8c:70:ee:52:0d:85:cc:da:cb:c6:4a:11:bb:73:
3c:eb:89:8f:c1:3a:a6:74:1f:42:41:cc:16:bd:09:
2f:21:4a:8f:cc:ce:02:60:d4:eb:b3:46:ce:56:2e:
85:57:bd:9e:0e:d9:33:30:ad:2b:3f:41:58:d0:69:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3A:80:E2:45:C3:51:96:6A:9B:AA:F9:E4:14:19:E6:2F:66:E5:06
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a2:38:6a:09:02:45:d4:aa:50:65:e9:15:4f:47:24:9b:28:
03:af:d4:50:26:b4:1f:0a:36:18:fc:94:8a:b1:a9:30:f9:60:
af:6c:87:e8:2e:bf:0f:f7:fd:d3:78:74:9e:6e:5c:10:25:bc:
c2:8b:21:c3:e5:03:af:8b:f7:81:49:39:0e:9c:33:c2:bf:9c:
ce:ca:8f:8d:64:0f:16:4a:0d:4c:bc:6c:72:cf:f6:cc:09:a1:
c9:49:90:89:62:4d:85:64:f1:c3:94:47:5d:5b:19:19:9b:00:
4c:4d:6f:a2:b3:90:49:a9:af:6b:b3:39:bf:70:f3:55:9f:16:
40:3a:da:40:c1:02:81:ae:72:ec:3e:d0:04:11:ad:2a:5f:00:
35:34:29:fb:eb:37:f8:5e:4d:9f:e5:cc:de:a2:d1:85:8f:dc:
29:ad:36:46:2c:95:f2:5c:71:d1:ec:40:35:3b:c1:da:1b:16:
90:4c:9f:fd:8a:17:d6:a0:e4:b1:18:3a:d1:0a:b3:94:99:41:
9b:e9:18:10:19:09:85:ab:16:bc:af:26:f9:90:05:ac:31:08:
00:fc:66:35:5e:5b:d9:ff:c2:2b:e5:37:98:b6:80:21:b3:92:
42:53:b4:0a:71:d3:af:fb:3c:45:e3:41:6e:c6:0e:b2:3b:68:
b5:7f:d0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkRS/y4pC9CnYBBSJ3vbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MjhmMjljZDM3ZDc3NWNkNjRiMjI1MjA1YzM4MzNjM2U0
NGQ2NjEwHhcNMjUwNDI5MjIwMDQ1WhcNMjUwNDMwMjIwMDQ1WjAzMTEwLwYDVQQD
EyhkNzNhODBlMjQ1YzM1MTk2NmE5YmFhZjllNDE0MTllNjJmNjZlNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9geZBb6tPrxjjHwqa5YTOiAk6T8w
3RdsNjM8O15DRPTBE3UfrOWCF0pT26AhYUzOJD4M5XmAeKAhRy8puxAnj936lwL2
nl0s8SYKiAXks8etBdZAH8tsMZ94Es0AZ+etz1wBELZREvKWQ/LkfypWRD82NLR3
oTbKFUskmqG+L0lHON8jU2qBzzW7e9VX8hDLvSBAj1V5n6fVNSnZtjb+w643vh+b
vegTH80JZMDLf7ZVUm1O1zWMrdNvHnUUlX4PFsC0jHDuUg2FzNrLxkoRu3M864mP
wTqmdB9CQcwWvQkvIUqPzM4CYNTrs0bOVi6FV72eDtkzMK0rP0FY0Gl+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNc6gOJFw1GWapuq+eQUGeYvZuUGMB8GA1UdIwQY
MBaAFDco8pzTfXdc1ksiUgXDgzw+RNZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgt
MTM4MTdmZGJlYzA0LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMmRmZGQtYjA2Yi00OTM3LWI4ZTgtMTM4MTdmZGJlYzA0
LzEvTnlqeW5OTjlkMXpXU3lKU0JjT0RQRDVFMW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqI4agkC
RdSqUGXpFU9HJJsoA6/UUCa0Hwo2GPyUirGpMPlgr2yH6C6/D/f903h0nm5cECW8
woshw+UDr4v3gUk5Dpwzwr+czsqPjWQPFkoNTLxscs/2zAmhyUmQiWJNhWTxw5RH
XVsZGZsATE1vorOQSamva7M5v3DzVZ8WQDraQMECga5y7D7QBBGtKl8ANTQp++s3
+F5Nn+XM3qLRhY/cKa02RiyV8lxx0exANTvB2hsWkEyf/YoX1qDksRg60QqzlJlB
m+kYEBkJhasWvK8m+ZAFrDEIAPxmNV5b2f/CK+U3mLaAIbOSQlO0CnHTr/s8ReNB
bsYOsjtotX/Qmg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:19:19 2025 by rpki-client