Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: Hr2HiUTkBCeu66flXWMXkPOF47WVSyksP+6CoREnO4A=
Subject key identifier: 35:3B:E0:B1:00:10:ED:96:05:FB:89:5D:BC:40:F8:A7:5D:D9:2B:A0
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 0199FBEB787850FE5AEF8E44656A19AC8BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: T4JSoFrEVlA3_2SnHmgBXY12CKk.roa (hash: vzGu6j83ipDUTJQRTh0Y6Da8WT9NSHL+4Dey6CzoU8U=)
2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: p0JUB2Ex8Ardn4XTUKELe0RddX7Zw2/ecbyJTi31uO0=)
3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:78:78:50:fe:5a:ef:8e:44:65:6a:19:ac:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=353be0b10010ed9605fb895dbc40f8a75dd92ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:89:4e:e2:b6:a9:c0:0a:47:35:a6:02:c8:
c6:11:47:6d:9b:2b:1f:87:a4:cc:42:be:d0:5a:25:
b8:78:40:4f:98:95:3f:a5:fe:cb:a3:c9:8c:04:84:
bd:3c:17:d9:de:20:77:fa:ab:2e:a3:e6:bf:48:62:
56:9f:92:45:76:09:23:25:97:f1:73:eb:13:89:9a:
c0:d2:68:02:c3:be:4f:16:55:bc:1a:2e:4f:0d:a8:
69:11:e3:6f:72:d3:7e:97:d6:34:0e:95:e1:a4:7f:
5a:cb:77:65:8c:8a:4b:90:f6:46:7a:63:8f:c9:d7:
8b:63:cf:6a:fe:05:8b:da:b3:18:55:88:c3:cd:37:
26:18:5a:21:5f:3c:cd:4a:2d:16:60:cd:2c:e3:28:
a3:df:87:c5:0d:f9:ca:9a:77:91:d0:3c:91:66:e3:
5e:6f:79:27:43:92:23:39:2b:4a:80:aa:83:49:53:
02:8e:05:fd:d0:fa:36:6d:5b:36:5c:36:31:50:c4:
8d:dc:69:75:8b:0f:ad:62:94:43:48:12:39:6d:ee:
29:a5:cb:55:42:4c:4e:8a:cd:93:1c:ca:80:f7:e9:
05:f7:ea:fb:f5:c7:cc:d4:ae:da:51:e8:1f:5f:69:
16:b8:c5:3b:95:44:9d:9e:c6:3a:47:38:dc:e1:fb:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:E0:B1:00:10:ED:96:05:FB:89:5D:BC:40:F8:A7:5D:D9:2B:A0
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:be:0d:87:7e:10:34:95:22:79:36:8f:c0:02:1f:0b:cc:f1:
00:c4:bc:b2:18:49:2f:28:80:42:f5:e5:95:f8:22:cf:2d:89:
18:ef:82:be:29:3e:44:0e:f9:a3:2a:ef:7f:ac:4e:98:01:09:
d4:fc:52:d8:bc:17:6a:5e:4b:a3:36:03:f2:91:cd:d4:24:fe:
90:33:68:4d:5c:dc:57:ca:02:a5:c6:5b:03:70:19:69:f4:0d:
be:5d:f3:c5:61:53:1b:cd:fb:d9:67:8c:1b:20:91:8f:22:a6:
9b:27:59:dd:3e:e8:7a:2b:e6:70:4b:48:c9:93:8a:df:ae:68:
db:c6:38:f8:fd:5c:50:5b:64:06:8a:61:d0:46:7b:3b:9e:e1:
03:f1:c2:a5:70:fa:85:16:fa:e7:46:c3:0f:a5:9a:66:aa:8d:
4c:ee:da:37:dd:00:00:35:73:48:be:24:f5:d3:30:81:45:33:
7e:8e:bf:7c:6e:1d:8a:32:df:8e:90:84:f5:a0:b7:85:c2:66:
56:7e:ec:b4:68:74:cc:44:b9:6a:b3:2f:a2:e6:88:6e:64:91:
5e:f1:88:76:0c:e7:3e:a6:25:2e:a1:dd:0d:77:4d:84:2e:aa:
24:f8:31:47:f0:ad:ee:f2:3b:60:e2:d2:a7:71:2a:a9:03:49:
0b:7b:d2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:05 2025 by rpki-client