Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: 7I7cFn8IXSNwX/r35LpQ9I/6f+5JPacnoFTTMbc+8pY=
Subject key identifier: 3E:04:E3:05:12:59:9B:DF:92:FD:F8:C4:D5:50:B7:AB:34:AF:9A:8C
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019A4EF5D43D3B3B31AE6E43F704B9656906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: TnbRx5egCyZDPbiVVJSN1YplrstN+ESTCm4NN4vFtkY=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d4:3d:3b:3b:31:ae:6e:43:f7:04:b9:65:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=3e04e30512599bdf92fdf8c4d550b7ab34af9a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:3d:e3:88:01:82:ec:0b:0c:6d:3b:50:54:
d2:5a:06:a5:05:bc:28:0c:25:5a:34:92:26:b5:91:
02:2d:e9:63:38:6b:e3:3c:fa:50:ee:52:49:2d:2b:
7d:1c:41:ad:6a:b5:b4:67:a3:b3:b7:0d:62:18:30:
40:3b:a4:bb:41:56:0c:49:68:c5:89:fc:18:9f:5d:
d3:6a:85:ed:76:ae:d5:14:68:87:a8:95:c0:e4:11:
2d:43:f1:dc:d4:4c:ab:e6:93:a1:9f:20:1a:05:24:
69:e3:cb:ca:ea:4e:be:81:30:d0:c0:32:b5:f1:55:
61:d4:d3:53:57:00:f5:67:b5:d4:2b:78:b6:c3:ab:
dc:2a:8d:00:79:37:14:67:2b:b2:44:3f:93:33:79:
18:43:8f:94:16:b0:29:06:0a:c5:31:06:e9:9b:ed:
4f:71:44:31:84:bc:54:bc:1b:57:77:e0:58:98:12:
1e:9a:a3:66:97:39:67:50:ee:8b:f8:02:21:06:79:
7d:68:9b:05:f9:9f:a3:d7:5f:00:5e:04:de:88:4a:
27:c7:2c:b4:eb:49:31:ab:8d:28:50:72:f7:da:6d:
14:ea:f5:c3:ae:9e:50:1b:0f:bb:43:93:cd:e7:99:
f8:77:22:2c:51:c3:56:f7:c0:25:ff:94:83:10:34:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:E3:05:12:59:9B:DF:92:FD:F8:C4:D5:50:B7:AB:34:AF:9A:8C
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:24:a3:7a:bc:51:11:85:67:54:2e:f7:86:71:fe:45:88:cf:
9c:02:59:ec:2a:57:24:1f:5a:82:15:d3:e0:fa:39:88:59:1d:
74:be:37:bb:3b:e5:5e:f5:67:69:ca:18:91:48:ba:07:9a:98:
8d:a2:d5:11:40:32:49:8a:ff:16:3c:72:13:7d:11:d9:cc:cb:
a3:1e:da:db:e0:fb:53:77:9c:42:1e:3a:9a:e6:38:9f:c4:1d:
a5:27:4f:c8:60:6c:4d:21:b2:b8:74:1c:4a:d6:08:0a:4c:62:
30:14:eb:4f:c9:94:00:81:38:ad:49:cc:63:06:9e:cf:22:74:
d2:b6:ad:e5:e3:4e:96:1d:ad:f0:7b:7a:11:84:3c:f2:33:54:
d8:ed:b7:78:21:7e:51:7c:31:a7:bd:eb:ad:b2:44:be:67:52:
dc:b4:10:dc:cb:8f:e6:81:82:eb:6e:45:c2:60:c7:c1:bd:28:
4c:73:ff:9a:b5:b9:03:8a:24:ef:8c:a2:53:6c:cb:0f:d4:5f:
c5:e4:66:71:78:bc:75:c8:81:39:ed:bb:a0:4b:4e:a7:0d:6f:
9c:b6:3d:05:92:19:81:30:20:09:b6:e1:a7:09:cc:9d:5f:f0:
97:2b:8e:fa:20:d6:83:05:9d:cd:db:92:31:a3:14:ec:c9:91:
04:80:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:57 2025 by rpki-client