Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: kpQHvuFpxt9nU63a3Drj6Y6JkWRbBK2cCSHx4Dcj8M4=
Subject key identifier: 76:C8:46:6A:13:9E:F9:88:BE:84:D6:5A:27:74:DA:AA:D8:8D:3E:90
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019A00DA1D5B02D37AEED2B6B1C9DB5CAA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 0F18
Signing time: Mon 20 Oct 2025 09:01:25 +0000
Manifest this update: Mon 20 Oct 2025 09:01:25 +0000
Manifest next update: Tue 21 Oct 2025 09:01:25 +0000
Files and hashes: 1: JNo1MUvO7s8A9kHBAkmvoAiPGvM.roa (hash: R/jVb2Ae9Mk2lsjcWf8tfEbhkiCQiMp10JSlkK4oRdc=)
2: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: Wccpces4Lb75ZnYB2+LI0ltmkGQmPvyRILTiJjXl7mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:1d:5b:02:d3:7a:ee:d2:b6:b1:c9:db:5c:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Oct 20 09:01:25 2025 GMT
Not After : Oct 21 09:01:25 2025 GMT
Subject: CN=76c8466a139ef988be84d65a2774daaad88d3e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:8e:10:cc:9f:05:ed:1a:b9:31:e8:89:36:
bd:9f:76:89:bd:e7:d5:f8:f2:88:93:2e:46:60:7a:
e8:72:5c:77:99:95:eb:bc:e7:04:3f:32:dc:a2:5d:
55:dd:f8:37:02:4d:cc:04:87:42:d5:36:a0:63:79:
42:58:86:04:12:8c:e2:a0:c2:89:0a:69:52:0f:77:
65:d2:72:9e:3d:80:86:f1:54:be:58:a3:76:06:dd:
83:c8:4a:bc:6d:24:2e:66:f5:2f:9b:ec:a9:ac:7b:
00:af:27:5c:f3:76:2a:9d:b3:c6:45:b6:de:a8:f9:
e0:fc:58:a5:02:9b:b5:15:bf:d6:51:39:77:5f:70:
c6:63:a0:81:31:fe:6b:37:cb:14:7b:5c:13:78:8f:
9a:cc:28:a7:4a:eb:5a:39:a5:d7:7a:69:18:bb:65:
75:af:6a:3b:88:79:fe:6a:83:4c:bc:89:1e:d0:d4:
1f:cb:64:90:1d:c2:c1:85:6f:77:1a:65:65:ed:8f:
2a:96:5a:1d:1b:f7:04:6d:5c:f5:5c:77:68:cb:4e:
9e:e9:66:cf:4a:8b:37:7a:2a:98:c9:82:f4:0c:00:
2f:73:01:94:2d:ba:52:ea:ac:e9:a2:05:f0:82:1d:
d6:33:95:b1:65:32:8b:41:7d:90:71:da:59:f4:c6:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C8:46:6A:13:9E:F9:88:BE:84:D6:5A:27:74:DA:AA:D8:8D:3E:90
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4f:68:b4:70:d7:b4:c8:ca:3d:2c:6d:22:82:cc:ea:fe:9c:
38:a7:2b:78:60:45:7e:82:6c:f5:96:69:96:8c:10:5d:15:b6:
c3:8a:fb:61:35:73:49:2e:7f:fe:00:48:ff:82:ed:0d:f9:21:
02:38:16:49:36:df:85:ea:4b:aa:47:62:61:e1:84:aa:fc:82:
cb:b3:c2:a2:11:d6:be:30:90:86:be:03:3a:77:1f:bf:14:d7:
1c:e9:0c:79:ca:b3:d1:ca:da:5e:e5:f0:61:6f:cc:14:7d:c9:
cd:01:81:89:5e:31:87:9c:43:95:3d:4d:60:4d:b3:4e:27:84:
bd:54:0d:d2:43:90:4d:62:c5:63:85:a8:9b:90:2f:b1:bc:f5:
ee:65:c6:18:48:61:79:44:d4:2b:d5:e8:ba:cb:cb:68:39:c7:
ee:a3:28:74:da:91:1a:fa:ed:7e:4a:11:d5:e9:e1:e5:01:21:
09:74:5e:58:0b:97:66:be:e3:77:a5:d0:9d:ae:6d:aa:9c:cb:
f4:88:52:15:db:c7:ef:ed:d0:a6:d7:c1:7b:78:9b:28:3f:67:
31:7b:d2:55:bc:fa:b2:06:40:38:82:e0:f2:5c:fc:db:1e:7c:
bb:b9:1e:ec:f9:cc:e1:8f:bc:f1:84:b6:98:23:7a:dd:cc:c6:
14:9a:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:19:05 2025 by rpki-client