Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File: NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier: wmwQ1GkM9TuN5n7xUR0aBvaRYfGndKMn83cokjSwq/s=
Subject key identifier: CE:14:BD:48:80:8E:79:57:05:C4:59:2F:6E:FA:C6:D1:96:A1:04:D0
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0198D65EFF6F83FA5A3E344588F14F11ED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number: 038F
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: JB7hmYpySfxxhLglcX/J+GhRFiIRRvZCptoSvb+Q9dI=)
2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:ff:6f:83:fa:5a:3e:34:45:88:f1:4f:11:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=ce14bd48808e795705c4592f6efac6d196a104d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:8f:b3:91:01:d1:3d:dd:0f:e3:cf:b8:d9:
2b:29:6c:4d:dd:4d:6d:22:30:bd:a5:3c:d2:fa:04:
a1:48:de:1b:9c:6f:c9:d7:5b:40:11:a9:89:00:c0:
1c:99:91:16:73:ee:a5:ae:0f:b8:1e:dd:a1:2d:70:
61:7f:23:d7:7a:73:dd:82:43:a4:ec:5e:3e:6e:0a:
ed:c5:d1:95:7e:14:4e:95:51:d7:24:da:b5:a8:db:
61:d9:a1:d5:2e:b4:40:35:88:ef:09:4b:e7:f1:ee:
cf:d9:c5:5f:ce:cc:7a:00:4a:54:d1:7e:64:6b:28:
e9:ba:39:8e:da:24:7d:6a:b8:5a:53:d6:bd:11:a7:
6b:e8:0a:a1:f3:2d:5d:fd:81:50:d8:5f:a7:ad:71:
b4:00:b2:f8:3c:7c:ad:b0:38:96:72:30:09:3e:8b:
03:d3:c0:92:29:2c:d3:8c:69:bc:77:ba:9e:31:09:
6b:19:00:ca:bb:a5:e2:cc:cb:27:3d:fc:53:f7:ef:
fd:5f:b9:fa:8f:32:23:cd:ac:05:54:a6:57:1b:2a:
37:80:3e:a2:0f:28:b6:30:d5:a4:77:f6:06:8f:c5:
3e:83:70:e6:13:92:ad:2e:c9:7b:d4:3c:d4:7b:9a:
36:9f:26:e8:5a:c8:08:29:6d:df:a1:cd:48:be:af:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:BD:48:80:8E:79:57:05:C4:59:2F:6E:FA:C6:D1:96:A1:04:D0
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:59:31:19:c9:4f:b3:f3:40:de:35:b0:51:bf:94:86:94:84:
1e:5d:23:2e:45:c2:b7:45:6b:c1:9a:5b:41:b6:38:41:15:24:
a3:11:0a:ab:f2:f4:85:b5:bb:11:6b:e3:cf:ca:35:d3:6d:a6:
aa:72:57:04:00:2a:c8:75:32:c3:d8:de:9b:ba:ef:ca:63:bd:
94:17:57:36:d2:fa:db:d5:26:f8:54:c3:35:19:d4:6a:8a:2e:
2e:08:fb:b2:48:bf:3f:51:f9:e1:95:7e:13:72:56:1a:07:b2:
80:1d:97:cc:0c:dd:4f:1e:13:80:bd:7a:51:78:d0:fe:84:3a:
0b:22:cc:ef:6e:31:c2:55:a3:97:0d:1c:13:ca:92:8e:a2:9e:
47:2f:66:a2:40:b0:e4:79:37:12:0f:9f:75:eb:50:d5:d9:b3:
7e:00:9d:16:96:68:c9:4e:61:93:45:4b:b1:a3:f2:a6:6a:fe:
1a:73:9a:f9:08:c1:fc:fe:e3:20:aa:cd:9e:4f:61:0f:ed:7c:
c9:7c:1d:6b:e3:51:73:67:0d:8e:1d:76:8c:da:ff:b8:95:f5:
27:b0:e7:72:7f:49:bf:9c:d9:12:40:05:17:df:9a:0c:18:8a:
81:63:88:0f:05:8e:f2:49:14:09:31:03:b9:70:17:87:64:e1:
76:8b:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:38 2025 by rpki-client