Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: 8LPvmnr6HXjPJ6Ubdxqi1L9n6lHYbASpea0HXHWkYoU=
Subject key identifier: 2A:BC:E6:FA:42:88:16:E4:0F:DC:7D:89:CF:00:AC:4C:B8:EF:56:ED
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0196A0895B5D3F54D84A3674C276869B81D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 026A
Signing time: Mon 05 May 2025 13:01:18 +0000
Manifest this update: Mon 05 May 2025 13:01:18 +0000
Manifest next update: Tue 06 May 2025 13:01:18 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: GuKBVAqnY8tGljkCqX6xjhOmiVbKdC/iwh9Yy7AaiPE=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:5b:5d:3f:54:d8:4a:36:74:c2:76:86:9b:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: May 5 13:01:18 2025 GMT
Not After : May 6 13:01:18 2025 GMT
Subject: CN=2abce6fa428816e40fdc7d89cf00ac4cb8ef56ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:bf:c1:47:da:2e:06:5b:f3:45:e1:05:e1:
66:9a:df:b6:d8:41:39:fb:35:2e:64:76:a8:2a:03:
53:99:db:63:c4:a8:39:d1:33:aa:72:e5:c9:d4:81:
a1:d6:7a:3d:8e:98:47:aa:5f:7d:55:52:25:e2:8f:
bd:09:e5:3d:76:27:5e:54:48:5e:37:90:d8:dd:7e:
e7:c0:61:f7:36:f9:0e:ff:6d:19:d3:02:49:f2:26:
90:a5:30:27:99:09:a8:a7:a6:89:75:87:49:2f:fa:
3a:06:d3:59:83:d3:9b:fd:52:62:41:a0:74:1b:87:
30:b6:8c:f4:e8:46:1e:f0:9a:bf:1a:66:85:02:33:
cc:a4:8f:f0:68:3e:2d:a1:19:c4:a9:f1:b5:25:5e:
7a:82:ab:b1:15:b8:fa:14:d8:25:97:6f:7f:7f:c9:
f7:3e:f2:14:b4:11:77:cf:9b:16:ea:b7:a6:e0:f4:
8d:c1:64:ab:fb:e9:ea:a9:32:41:ce:c7:5f:67:e4:
0d:00:b1:05:f8:9d:e8:33:cc:94:37:ff:f1:dc:6e:
32:63:f0:b4:9f:15:3f:08:36:60:83:fb:c3:73:14:
29:8e:d2:16:00:25:1c:c8:42:5f:92:ee:e1:ba:5d:
83:0e:4c:91:ef:31:78:d0:49:f7:cd:c5:33:cf:03:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:E6:FA:42:88:16:E4:0F:DC:7D:89:CF:00:AC:4C:B8:EF:56:ED
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bb:b1:bf:8d:57:80:a5:44:14:d9:b0:ec:fa:08:ea:62:66:
ae:e1:92:ba:ee:3b:6a:1b:ef:db:e7:94:3d:15:0a:ba:a7:3b:
81:49:eb:7a:c1:6d:30:37:54:a0:2d:69:bd:84:37:53:ab:49:
0a:43:be:21:21:52:f1:7c:c6:78:d0:71:54:db:a0:2f:f8:d8:
da:dd:3d:f0:ce:04:91:16:dc:ec:6b:6c:a2:8f:2a:9e:57:a8:
28:59:ec:3c:52:b9:82:2a:f8:e0:dd:9c:af:88:f8:78:2f:eb:
78:fe:9f:ed:f5:8d:9b:55:2e:22:61:ad:c5:36:9b:64:8f:5f:
bf:4d:98:03:07:d1:16:4b:a6:95:7b:36:ca:c0:f5:70:e7:72:
ea:1a:b4:67:fd:24:24:fb:6c:8f:59:3e:2c:57:d7:ca:74:ad:
c6:c5:1b:13:52:e2:94:46:a4:86:0f:b7:78:2b:ff:0c:ce:0f:
29:20:14:e4:d4:b7:29:81:a1:12:9d:2f:1d:c2:50:3b:40:d1:
db:49:25:84:1f:97:53:83:fe:73:8b:88:88:e0:40:2e:00:5f:
fd:9e:1e:eb:8b:f2:40:43:75:9a:e1:cf:30:f5:35:09:3b:da:
32:bc:a0:8c:3b:ed:a9:80:c6:63:09:04:8c:7f:80:c7:fc:17:
1b:e7:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:27:37 2025 by rpki-client