Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: ecBZw4d//CCa1/NXokXVcuHHj6khrXZ6kujXrv4N0Wk=
Subject key identifier: 3D:1C:AD:AC:80:FE:F8:B4:B3:AF:A1:C4:51:05:12:84:67:3F:02:6F
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019A4E190DCE16624254A53BE2EBF63EA801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0F40
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: fGjR/k7AEK3B0UcLke6mvP44HWfhysZ116xy9MQYSVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0d:ce:16:62:42:54:a5:3b:e2:eb:f6:3e:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=3d1cadac80fef8b4b3afa1c451051284673f026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:32:0a:51:df:0c:e3:ef:52:ec:cd:da:67:
e8:4b:d2:e5:50:7b:29:21:b3:d0:52:7d:2a:6b:1d:
33:15:08:ab:a8:dd:e4:57:6a:85:ae:67:e8:63:57:
31:70:ff:7b:9b:85:8a:67:7c:bd:4a:46:99:6d:d9:
3d:45:be:d0:0b:ef:dd:3f:f0:8a:d6:bb:73:4f:d9:
07:85:f5:31:80:c6:b5:de:1e:0d:57:48:09:d2:67:
ac:4b:4c:4e:5d:df:72:d8:7c:0d:f4:e6:17:50:1b:
51:af:73:80:6c:67:2d:b9:9b:c8:c0:9b:d6:37:c7:
2b:71:6f:d0:08:66:a4:ba:73:77:e1:61:75:ed:e6:
85:24:4d:ba:71:17:de:95:71:82:81:65:13:0c:b4:
d6:62:30:05:25:bf:f7:bf:15:48:ba:4d:ed:3c:c0:
9d:27:9e:92:63:5c:aa:b5:79:21:aa:26:a3:25:11:
74:1a:c3:d6:d1:9a:44:34:ff:7e:61:be:e4:bf:fe:
c9:76:14:18:ef:13:a2:f7:f6:76:89:9b:7f:2f:52:
f7:c8:8d:4f:51:6c:8a:aa:94:7a:09:16:0f:d9:bc:
24:c0:9a:ef:55:96:4a:52:f0:a8:1b:b0:e3:33:5a:
ab:23:89:31:c2:6e:35:3b:06:1d:60:31:01:11:34:
bd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:AD:AC:80:FE:F8:B4:B3:AF:A1:C4:51:05:12:84:67:3F:02:6F
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e5:2b:c7:89:e7:42:78:c3:b6:84:58:23:62:d6:ed:fe:5c:
90:1d:b9:25:16:9f:6b:6f:34:64:a0:76:75:2e:66:d3:dc:3a:
52:7d:e1:9d:77:43:0e:c1:0b:50:eb:7a:6b:d1:0d:01:9f:d4:
75:a0:99:be:40:88:b9:bd:13:59:87:ef:70:2b:26:4c:7d:65:
36:65:4a:94:86:03:22:9f:1f:c2:31:75:13:4f:f9:3b:19:00:
37:bf:b4:e9:dd:64:b3:7f:10:80:e4:eb:4d:41:09:65:62:d3:
86:ee:2e:db:00:fb:2d:36:2f:94:77:cf:4f:df:f6:fd:d7:0c:
41:df:15:e8:e0:bb:e2:02:61:01:eb:88:f4:cc:19:50:5f:02:
91:37:0b:44:16:f8:d2:08:fe:20:d3:a4:1f:f7:d4:fe:be:c6:
11:b1:a1:f7:19:9e:8a:12:bb:33:e2:e8:95:54:49:a0:0f:ec:
19:74:ba:72:ed:da:2b:75:e8:af:e3:47:e2:3f:5c:7d:22:02:
05:f1:50:97:52:9f:63:77:1b:0d:b0:41:f7:bd:47:43:0d:f7:
f0:17:bd:cf:2e:51:ca:c1:43:66:56:4f:c4:41:f8:ad:f1:8d:
93:90:19:89:85:f5:82:7d:dc:7c:ca:05:cb:ba:ad:45:09:0b:
f0:b7:e5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:22 2025 by rpki-client