Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: iDEeW+JmeXcMmjMoLnk5nxqi1Lu+KAexHqHp8lSuIsw=
Subject key identifier: D5:A9:A1:5E:D5:85:DB:94:5E:16:A4:EB:C5:07:1B:BA:77:CE:53:A4
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019A02C76D51D38ABB665E2E75085B9631C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0F19
Signing time: Mon 20 Oct 2025 18:00:15 +0000
Manifest this update: Mon 20 Oct 2025 18:00:15 +0000
Manifest next update: Tue 21 Oct 2025 18:00:15 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: jBhg6ZnurzsYG5p+a7JYnhRjjFS7IUwmvZr5i5L+MWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:6d:51:d3:8a:bb:66:5e:2e:75:08:5b:96:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Oct 20 18:00:15 2025 GMT
Not After : Oct 21 18:00:15 2025 GMT
Subject: CN=d5a9a15ed585db945e16a4ebc5071bba77ce53a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:96:5c:95:f3:25:55:3d:df:01:da:1f:7c:
0b:7e:bc:ab:fe:b5:23:cf:ed:b9:92:47:16:40:88:
90:ba:99:8f:21:06:3b:7a:a5:54:ca:cb:4c:6d:ca:
cf:45:a9:f6:67:ce:5d:9e:98:bf:4f:8b:cd:70:fc:
50:b9:1f:35:41:7a:18:83:00:05:22:8d:6c:8d:87:
e4:fd:79:f6:f2:6f:56:c0:48:e3:88:37:23:68:d6:
57:8b:eb:8e:44:c5:57:db:53:ec:bb:ff:bb:9c:df:
18:b1:87:6e:9e:f4:eb:9c:cc:07:13:a7:9a:40:60:
73:2d:9a:c5:fa:ca:e3:e0:52:d2:c1:4b:29:17:85:
e1:32:4b:4f:63:b9:cf:0b:40:87:82:78:2d:37:a5:
4b:bb:8b:06:96:33:df:42:7e:d3:04:38:b4:e0:77:
50:c4:a3:d9:79:9a:ad:45:e4:7a:02:79:bb:8c:04:
67:5c:b7:21:85:75:67:6e:b0:5d:78:24:a4:59:8f:
71:a3:86:51:5d:fc:a2:f7:0a:a1:cb:c7:08:d6:66:
7a:cb:35:18:ea:c1:9f:b8:89:4c:3d:89:5f:7c:44:
c8:17:f0:cc:c4:3a:48:0b:c6:6c:1c:66:bb:da:36:
f2:11:d7:aa:81:8a:53:78:63:61:3a:20:f5:92:10:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:A1:5E:D5:85:DB:94:5E:16:A4:EB:C5:07:1B:BA:77:CE:53:A4
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8d:c4:36:13:34:8e:6f:76:63:9f:22:ee:0a:f0:1a:c0:88:
7d:c3:c7:0b:d3:11:78:ab:93:54:43:b5:6a:1a:f7:0d:ae:00:
5e:d2:1f:2a:27:03:2c:71:07:2a:6a:18:cb:de:00:73:83:35:
9a:37:55:de:a0:5c:f4:05:a6:f3:92:61:14:0d:b6:19:a0:30:
69:2b:f8:25:48:89:36:9f:45:63:1a:9e:f9:14:81:f3:79:b1:
62:d3:04:95:55:16:9d:e6:72:a3:ed:00:3c:f6:5a:2e:d7:65:
32:29:c8:b9:1c:93:6a:95:af:82:c3:cb:41:42:ba:ea:df:25:
c4:bb:25:61:15:68:c1:18:3a:93:9d:c5:34:fd:60:d8:55:b9:
c6:e5:cc:db:64:29:8f:7e:81:02:e4:1f:25:61:43:d4:52:bd:
76:f3:75:c7:d4:8e:95:48:6c:b9:89:46:ad:8f:64:de:f9:44:
b9:ec:25:ec:ec:d6:bc:39:57:69:d1:35:c9:c1:15:d9:85:38:
51:25:39:d8:bb:2b:d7:4c:62:c4:ad:d5:b9:6d:53:38:71:5f:
67:eb:f1:af:46:27:91:fc:b0:f9:93:f8:ac:f3:7b:fb:58:16:
7d:8e:0b:5f:35:f7:65:be:a4:26:5d:e8:03:b6:a5:27:b2:e1:
19:e6:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:51 2025 by rpki-client