Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: 9iBQf7PSyguZ0hNswLAJt2Ts8cm+485W0xdfSyiQZcM=
Subject key identifier: 46:FF:98:75:6A:4A:61:89:D2:85:FB:7B:3E:75:7C:4B:C4:23:5F:2A
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0198D58362E5B4A96A80A217AC80CEE1CD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0E7D
Signing time: Sat 23 Aug 2025 06:00:14 +0000
Manifest this update: Sat 23 Aug 2025 06:00:14 +0000
Manifest next update: Sun 24 Aug 2025 06:00:14 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: F7JpqedX+PWYlkwfY8LQNjdTGfh6lcS8kJFgl+986Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:62:e5:b4:a9:6a:80:a2:17:ac:80:ce:e1:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Aug 23 06:00:14 2025 GMT
Not After : Aug 24 06:00:14 2025 GMT
Subject: CN=46ff98756a4a6189d285fb7b3e757c4bc4235f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:fe:83:aa:d8:cb:52:23:e0:c4:44:07:de:
7e:f3:27:af:5b:8e:ca:53:10:5b:3c:2e:87:c2:2b:
02:ad:7f:a5:29:d2:99:0e:88:5d:28:83:b4:53:dc:
1f:d2:a3:19:7e:c7:83:5e:7c:56:94:87:d8:75:cc:
aa:76:a8:49:08:59:88:c9:12:57:8a:7c:32:58:a6:
85:2f:34:9e:81:22:20:b1:a0:a5:7b:58:16:99:b9:
99:0e:1f:07:0c:a7:5b:f7:d7:59:3a:2f:bf:49:35:
83:b7:0b:57:c1:50:ea:b8:e5:da:17:cb:38:31:45:
6f:96:44:c8:ec:07:29:43:d4:a4:3a:4c:cd:e0:53:
a8:63:2c:d3:fd:d2:78:07:55:e7:62:2e:76:5f:22:
09:9d:aa:2b:4b:50:e1:a1:51:d8:eb:e6:fc:16:72:
49:8a:49:aa:44:ac:73:c9:3c:1c:6a:b2:4a:d4:f2:
b8:b1:50:c1:6e:53:4a:cd:b7:9d:ad:c1:d6:92:19:
e0:04:22:13:1d:42:1c:99:b7:fe:09:13:0b:a1:4b:
b5:f0:94:c4:67:87:5f:a8:7a:b0:1b:f7:dc:01:c1:
c6:23:80:d0:19:a5:71:24:41:51:8f:97:d6:f4:39:
1d:14:5e:67:0c:60:8e:07:31:d1:0d:e7:fe:20:e4:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:98:75:6A:4A:61:89:D2:85:FB:7B:3E:75:7C:4B:C4:23:5F:2A
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a6:35:73:0e:64:69:22:4e:b5:09:96:f6:6a:76:40:7e:8b:
76:c3:aa:d3:84:ad:4a:7a:ef:55:98:03:2f:90:7d:36:5d:67:
e1:ce:04:4f:79:c3:a3:5a:68:bf:49:f0:9b:46:e1:6e:9f:65:
ab:34:ab:c5:b4:3b:f0:b6:4f:6d:7c:86:cb:9f:92:3a:15:29:
5f:b6:7f:f8:05:db:4c:ba:d9:53:9b:d7:fa:35:f8:b1:38:53:
65:cd:80:6e:2d:9a:80:01:f1:73:92:7b:d5:7d:5f:5d:fa:3c:
ee:0a:a1:68:7a:2c:d4:65:66:92:6c:14:f9:72:53:94:29:0a:
5a:5e:b3:85:f7:11:ec:45:33:38:fe:14:b1:73:0d:40:97:f3:
88:f4:fe:e2:6e:53:f0:c3:11:4f:8f:27:ac:b2:7e:1b:dd:b4:
90:77:64:c6:8d:84:f5:c6:e2:78:3d:ec:ac:aa:1f:fc:9c:01:
39:9e:d9:c4:7f:57:89:f6:91:bd:6b:52:93:58:8a:dd:43:2a:
29:0a:cd:e1:bd:61:18:ee:15:eb:d9:f9:26:ed:08:e9:66:99:
ef:c6:4b:6f:c0:96:ef:69:fa:2b:86:49:c9:05:ed:3c:9d:0a:
d6:7a:54:19:98:08:bf:d6:1d:cf:6e:b6:2a:be:b8:30:b8:bd:
75:6d:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:40 2025 by rpki-client