Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: mnoSUvGsNJWndGqTUJn7f2jiBYgGURGHKEktFCdMdLI=
Subject key identifier: 41:FC:60:F5:29:F4:21:87:D5:80:40:CF:A1:64:DF:E4:22:3C:E1:92
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0197B6A09D9D966D0FE55C6C153488CE1D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 02FA
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: snzfNAnsZetagr/aqiAkArFIl/Esk2z+2QdvXiIixdw=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9d:9d:96:6d:0f:e5:5c:6c:15:34:88:ce:1d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=41fc60f529f42187d58040cfa164dfe4223ce192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:68:c9:09:ba:b2:82:4f:7f:7c:49:f0:d0:
3d:b3:4f:64:21:38:78:d2:01:91:53:35:f7:5a:77:
75:54:d4:ac:45:12:28:4f:3d:db:4f:8d:32:bc:a7:
25:a5:18:6a:32:ce:4e:36:d0:8f:90:b4:71:4f:97:
f6:bb:d6:41:5d:f8:d8:6a:24:10:77:63:fe:65:4b:
39:95:fa:cc:47:8b:61:4a:70:29:7a:e8:28:d8:c9:
72:df:09:34:11:c1:be:51:1d:f7:61:d8:d7:e5:fa:
2c:51:e9:cd:fa:ee:18:a7:8d:ab:71:1a:c9:81:b1:
e2:2a:7e:7f:b7:cc:ea:18:93:b8:38:07:2d:82:ef:
3d:49:78:e1:83:d7:0a:25:d9:31:6d:e9:9c:08:82:
ee:72:8d:1e:39:c7:64:90:16:c7:9a:99:55:41:22:
b7:34:6d:b0:11:6a:7f:c0:c9:9c:b1:1c:ec:4c:ab:
19:69:cf:3d:12:b7:de:64:6b:47:87:8a:6c:fc:2e:
8c:6c:9a:1c:9b:84:ed:ab:ac:9f:51:be:33:d2:da:
63:04:d6:fa:9a:ac:4e:08:00:8b:a7:91:4b:a3:ba:
ba:b4:ae:4e:fa:95:57:3c:49:73:71:8e:50:6b:68:
69:f2:82:73:c0:69:17:c9:67:1e:88:8b:08:10:47:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:60:F5:29:F4:21:87:D5:80:40:CF:A1:64:DF:E4:22:3C:E1:92
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a2:55:ad:c9:49:4e:a1:b3:bb:f9:3b:4d:96:f1:09:d6:18:
40:3f:90:d4:08:ba:f9:9c:35:00:aa:43:2d:16:e0:d8:78:32:
f5:f5:c2:d8:e2:dd:40:b8:c9:01:44:7c:c5:b4:44:fe:bf:bb:
10:d4:8d:82:95:f6:6c:be:2e:eb:e7:d2:66:18:69:6f:a3:d9:
42:3c:89:85:05:8c:33:1d:4b:36:1b:f0:f6:c3:20:a6:9d:1a:
0d:14:db:4b:4b:ac:64:8c:f8:ee:fa:31:98:9e:63:84:45:7a:
5e:6d:38:b6:3c:21:86:2b:d8:b9:bc:27:b0:a6:7c:90:23:18:
55:d5:03:1d:f3:52:94:51:d7:72:8d:a9:ac:aa:26:55:10:4f:
c5:c0:e9:58:a8:9f:bc:92:51:5c:83:62:be:17:79:9f:03:07:
60:15:16:78:33:5e:26:b4:4f:7d:c2:31:c6:aa:04:be:69:14:
68:da:aa:41:e1:01:56:55:58:58:ed:6f:c2:fc:77:2f:f9:66:
ff:1a:2a:8e:73:4c:e1:90:a8:99:be:b3:fd:93:f6:9b:df:a3:
40:1d:47:bf:3a:c3:c1:2a:7a:e8:7c:55:84:9d:1e:97:76:dd:
95:8f:67:1c:58:dc:e1:e1:55:5b:0a:54:20:39:43:3f:33:b9:
10:67:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:19 2025 by rpki-client